Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/gtNjwWIklt9RQOUEEkHBnNPLSqM.roa
File: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (raw, json)
Hash identifier: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=
Subject key identifier: 82:D3:63:C1:62:24:96:DF:51:40:E5:04:12:41:C1:9C:D3:CB:4A:A3
Certificate issuer: /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial: 019423697DDFFE660B4D64FA3FE27203A4C8
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/gtNjwWIklt9RQOUEEkHBnNPLSqM.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29449
IP address blocks: 46.37.224.0/19 maxlen: 19
82.143.0.0/18 maxlen: 18
2001:15a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7d:df:fe:66:0b:4d:64:fa:3f:e2:72:03:a4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82d363c1622496df5140e5041241c19cd3cb4aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:8f:42:4d:f1:bc:fb:25:04:55:d0:40:96:
71:33:80:5e:28:8e:6d:c8:8a:0f:48:af:30:9b:dc:
ca:ce:ea:d1:8c:1e:56:69:2d:3d:a5:6e:e9:7e:eb:
c6:ef:bd:47:44:5d:13:48:24:af:98:9c:b1:34:88:
d3:60:10:6c:87:4c:72:47:2d:da:57:95:63:06:71:
e4:c1:24:33:cc:bd:f8:d1:6a:0c:e7:5b:b1:62:16:
96:1f:23:b0:f1:a6:d5:b5:7f:77:cc:a6:9d:84:65:
09:3b:d1:c1:d7:f8:17:11:ec:8b:45:63:38:55:a0:
0b:24:46:a9:48:a6:16:a7:e9:fd:98:03:75:21:9a:
e1:3a:f0:00:f3:85:0f:d0:01:a1:1a:0d:2c:83:25:
22:23:82:c0:d6:99:07:df:e6:8a:3f:27:21:fb:ca:
27:6f:43:4e:f0:f7:8d:dc:50:ae:68:88:28:f5:31:
bd:0a:11:98:61:6e:31:f0:2a:3e:29:8a:bb:22:8f:
a7:41:0c:7b:b0:4b:42:cd:69:a6:3f:46:a6:2d:af:
0d:7f:3d:2e:85:bf:aa:b4:fb:69:cb:8c:1d:b4:6d:
76:59:8a:cd:b3:b7:cd:12:3e:5c:2c:ba:b8:e8:08:
23:3e:7a:6c:0c:5d:a2:01:70:8e:0e:04:22:e9:27:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:63:C1:62:24:96:DF:51:40:E5:04:12:41:C1:9C:D3:CB:4A:A3
X509v3 Authority Key Identifier:
keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/gtNjwWIklt9RQOUEEkHBnNPLSqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.224.0/19
82.143.0.0/18
IPv6:
2001:15a8::/32
Signature Algorithm: sha256WithRSAEncryption
d2:31:1f:01:a6:14:7e:fc:05:27:34:b5:ee:1b:f6:2e:7e:81:
19:f6:0f:c4:12:b4:30:26:88:22:da:ac:8d:d6:10:7b:0f:f6:
e3:dc:03:5f:90:2b:d8:a9:b5:ca:74:4a:79:b6:f8:2b:bc:78:
de:a4:41:4c:c3:0a:ad:cc:e8:ce:22:dc:4a:07:2d:86:b4:0c:
fe:e2:d9:39:65:8a:28:8c:0b:11:84:47:2c:c9:dd:e0:24:9c:
9e:f3:ed:a6:01:61:a6:89:1e:51:de:5f:2f:bb:27:2e:7e:81:
62:69:c6:b8:b0:38:ab:af:72:73:f4:5d:4d:3f:88:df:7b:98:
f9:cf:a7:5e:ce:d4:db:d2:31:cf:ce:17:15:7e:d3:d9:c9:69:
ac:db:ce:bc:66:01:a0:57:c4:c5:5a:de:f7:9f:3a:78:16:39:
86:20:7a:f8:6b:c4:91:b1:5f:b9:dc:b2:55:63:a8:c2:a1:9c:
08:c0:fe:b9:65:e3:70:fc:27:7b:0d:1a:e0:0a:e0:91:9b:f1:
4b:a2:79:2a:e5:1e:34:c3:f2:e1:de:f2:14:48:d2:2f:70:ef:
5d:55:1f:cd:1e:9e:84:c7:ff:b9:74:9d:d8:8e:03:3f:61:bd:
f3:c9:51:bc:3f:00:a1:09:15:53:36:5c:3f:48:5a:6a:c0:c9:
02:0f:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:38 2025 by rpki-client