Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa
File: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (raw, json)
Hash identifier: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=
Subject key identifier: 1A:A9:2F:91:C4:00:D9:B6:E0:43:01:C9:D9:BE:A3:58:09:5E:88:68
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019483F3E41E5A22571710EA1A841762A0C6
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa
Signing time: Mon 20 Jan 2025 13:43:06 +0000
ROA not before: Mon 20 Jan 2025 13:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206910
IP address blocks: 185.172.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:f3:e4:1e:5a:22:57:17:10:ea:1a:84:17:62:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jan 20 13:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa92f91c400d9b6e04301c9d9bea358095e8868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:70:3b:15:58:b7:a6:87:57:d3:40:13:b7:
78:55:d2:25:aa:e8:3a:be:84:39:42:8f:3a:77:5e:
76:99:37:8c:74:96:ec:04:6c:74:f5:16:12:6c:59:
2c:19:bf:b6:8b:41:fe:1e:d3:a2:a8:c8:9f:64:9d:
38:23:94:33:90:ec:9e:a3:f8:74:ab:75:5f:4d:76:
4a:73:d3:80:41:8a:b3:49:b9:d8:c5:ed:33:c5:45:
37:cc:63:85:ae:68:d7:c8:b6:71:06:7d:17:8b:4d:
45:ab:f1:ab:91:ab:f4:50:1e:54:66:92:8f:5f:61:
14:ed:7e:25:70:2f:98:de:9b:5d:2b:eb:88:91:6b:
7a:61:f7:7d:79:dc:4f:d6:92:a2:7a:da:4d:6b:bf:
ba:ca:d6:e9:d8:3e:8d:f3:b3:ac:0c:4a:0c:8f:68:
f7:39:d9:02:b7:70:6e:a9:b3:ed:d4:a2:01:cc:2d:
72:6f:63:f7:b7:b2:a0:15:04:e7:93:0f:22:9d:b1:
be:48:4a:e5:6e:71:24:06:15:a2:f7:91:25:e1:0c:
6e:66:85:01:35:82:fc:c3:fa:c9:93:b3:e1:d0:00:
2a:bb:6a:b3:10:f6:ac:f3:1f:e0:09:46:9e:6c:e1:
fa:78:8e:a1:a0:4c:37:42:d8:ba:a1:71:30:c5:b0:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:2F:91:C4:00:D9:B6:E0:43:01:C9:D9:BE:A3:58:09:5E:88:68
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:28:68:90:58:82:ae:f9:d2:c9:fb:34:ae:b6:cd:85:a4:4d:
3b:c1:eb:12:f6:f5:da:99:32:ec:02:87:16:3f:b2:b2:4d:1c:
2e:6f:3e:ef:e2:e0:28:ed:58:ed:c0:a7:a6:3c:24:95:a1:38:
7d:c7:11:27:51:3b:0c:a7:4c:0d:3f:c0:9d:95:0a:76:22:bb:
c5:4d:7f:65:b9:6d:3b:79:3d:6d:9e:cf:6e:e3:66:4f:a5:12:
67:7c:45:89:b1:54:ab:02:3c:30:3d:19:09:0b:48:43:f9:83:
79:c2:c3:a8:ce:22:b5:fa:29:a9:4d:fd:1a:2d:4c:22:4a:e0:
9d:33:62:1b:df:23:92:37:5a:e9:a6:a4:71:39:9b:29:c2:05:
da:f1:de:e2:aa:a0:c1:cb:fe:f9:5b:8c:57:fb:06:32:34:53:
b4:fc:7f:d6:67:65:78:62:ed:bc:a0:59:f7:c6:89:0f:77:aa:
75:b0:2d:8e:c6:80:39:d1:df:6d:da:e3:a7:ea:45:89:ae:37:
c7:46:a7:64:72:cc:98:97:5d:16:69:71:f0:26:96:61:7c:69:
c9:c6:09:4a:fc:1d:8b:d4:0d:1f:76:60:89:4a:40:61:9a:5d:
58:57:bd:4e:5a:b1:9d:89:0f:d2:16:ba:d2:42:57:74:5e:19:
b7:bd:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:53:18 2025 by rpki-client