Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G0XtWDoXmf3g4WPOe4oJBWwD53c.roa
File: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (raw, json)
Hash identifier: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=
Subject key identifier: 1B:45:ED:58:3A:17:99:FD:E0:E1:63:CE:7B:8A:09:05:6C:03:E7:77
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0194266B31014CCF2DD259458919BC6C589D
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G0XtWDoXmf3g4WPOe4oJBWwD53c.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61388
IP address blocks: 158.172.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:31:01:4c:cf:2d:d2:59:45:89:19:bc:6c:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b45ed583a1799fde0e163ce7b8a09056c03e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:87:0d:b7:30:fc:d6:66:da:1b:4f:b4:c5:
3f:1e:81:84:8b:5c:ae:9b:81:8e:af:b7:2f:7d:e8:
41:cb:3c:94:b2:50:f6:36:7d:a3:c2:f8:2e:25:d0:
ef:35:99:b0:9e:ad:e6:d2:7d:9b:35:9e:c6:ea:c9:
bd:27:f6:09:38:88:e6:36:a4:b3:e1:97:10:dd:13:
94:c0:a0:9e:08:93:69:2a:a9:12:35:ea:f1:6e:ac:
9e:3d:b4:98:f6:54:42:2c:01:60:1d:12:46:d5:76:
07:29:8d:d5:18:c4:9f:f8:d5:ab:ee:00:6a:2c:fe:
82:c7:f1:84:8a:c0:d6:11:5d:66:c2:94:97:20:85:
eb:3b:96:f4:e1:a2:f4:6e:b7:23:9c:17:22:1e:dc:
3c:58:71:5b:c7:b2:ce:72:72:0d:36:57:b5:02:d8:
b0:08:ea:24:23:4e:5d:34:5d:09:31:4b:fd:77:89:
a7:5d:ac:4f:ea:ea:a8:d1:2e:c4:8c:d5:9c:f6:2b:
e3:c0:da:52:0e:af:e8:1b:01:46:62:0f:3e:8c:11:
2b:a6:2a:9c:10:78:6c:7e:ef:f3:db:02:56:30:83:
25:37:17:1b:5b:bc:a9:0b:40:26:7a:ad:55:1c:c4:
56:6d:41:11:a5:29:15:0c:0f:3f:77:09:0f:b1:c8:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:ED:58:3A:17:99:FD:E0:E1:63:CE:7B:8A:09:05:6C:03:E7:77
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G0XtWDoXmf3g4WPOe4oJBWwD53c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:49:3c:0c:fa:9a:43:85:6e:be:c1:22:19:75:62:62:e2:b4:
f8:c5:b2:e7:da:7c:8d:18:bc:46:28:7e:26:85:63:db:4c:2c:
61:c5:db:93:bd:e3:de:bc:5f:19:b9:09:6d:d4:35:f5:e2:c6:
b0:bd:cd:20:61:56:82:1e:a3:fd:4d:b2:88:13:36:69:98:0b:
8b:b2:2b:6b:8e:74:41:31:2b:4e:9d:53:cb:30:71:dc:89:24:
5a:74:be:0a:bb:e4:2d:1e:8b:80:3d:c6:37:f0:38:f6:8d:cf:
51:d4:20:02:90:bf:96:71:16:53:57:92:d2:54:7e:62:7e:8e:
9f:ac:90:5a:21:fb:73:8e:6f:31:23:c0:fe:5d:8e:c2:67:b2:
aa:7b:36:04:71:23:85:d5:c5:84:5a:75:b5:f7:20:3e:dc:d4:
94:9b:d3:45:e8:5f:19:e3:ce:5b:93:6e:a7:8d:7b:30:37:79:
84:d7:f6:8c:3f:f6:ff:7c:87:01:bb:b5:f4:9e:75:fe:ec:8e:
64:28:fe:c0:b5:0a:ce:7e:8b:5d:e4:60:b3:26:4b:d5:fe:e3:
85:88:3b:bb:96:8c:1b:e1:fb:b8:45:32:f1:3a:1e:3f:51:72:
7a:6d:df:17:bb:fb:b2:a8:0b:dc:d9:44:c7:3e:3e:84:e9:13:
ff:a3:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:05 2025 by rpki-client