Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa
File: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (raw, json)
Hash identifier: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=
Subject key identifier: 1B:2D:82:5B:44:DD:E8:9F:AB:C4:91:B3:81:57:EE:4E:F2:4D:D8:67
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194258F81AB67960525DAF659ED09BD0DE6
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6584
IP address blocks: 194.69.96.0/19 maxlen: 19
194.69.96.0/22 maxlen: 24
194.69.100.0/22 maxlen: 22
194.69.126.0/23 maxlen: 24
2a01:110::/32 maxlen: 32
2a01:110:8008::/48 maxlen: 48
2a01:110:8012::/48 maxlen: 48
2a01:110:e050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:ab:67:96:05:25:da:f6:59:ed:09:bd:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b2d825b44dde89fabc491b38157ee4ef24dd867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:e6:a8:f5:9d:81:35:77:bc:dd:72:e9:e0:
c1:89:0b:97:4c:b6:6b:a4:19:75:8b:7a:3c:59:f9:
8a:99:6d:59:fb:ae:74:8f:fc:2d:1f:98:0c:13:47:
ec:3f:22:78:bd:61:20:af:8e:75:c4:08:b7:10:14:
6e:85:c0:7c:98:30:76:a1:5a:e4:e7:80:c0:0d:36:
30:08:a6:77:f6:8c:0f:0c:d4:fa:47:0f:43:7d:b5:
03:3f:cf:4b:ad:e6:0d:a3:01:67:41:5b:a4:53:06:
04:d0:98:7a:eb:8a:0a:44:a0:46:31:15:35:42:9b:
ac:09:6f:b7:00:6e:29:87:47:ae:00:63:ef:40:7d:
3b:b2:6a:9c:87:ec:6b:34:ab:90:e1:67:bf:7b:91:
51:87:82:2a:b9:88:b4:6e:f2:c3:c1:f6:c6:5d:56:
92:96:ac:85:82:97:44:5c:7b:27:22:14:c7:83:78:
3d:3e:4f:d9:86:1b:b2:a8:c8:1e:79:88:19:99:51:
8c:3b:5c:40:db:a7:d6:1b:24:b5:32:50:9e:a4:09:
d2:84:30:1a:63:ed:df:63:fa:cb:74:97:a3:65:a5:
43:f6:03:3d:b1:63:3f:9b:c7:e5:3d:dc:d8:ec:e7:
11:fa:0c:42:d8:2c:6f:5c:d7:c5:19:e3:f2:7e:b3:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:82:5B:44:DD:E8:9F:AB:C4:91:B3:81:57:EE:4E:F2:4D:D8:67
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
1b:06:7d:91:da:4e:86:8d:85:0d:89:43:82:b7:66:69:ab:7f:
fd:72:96:c1:76:d7:bc:a4:8e:b2:06:5a:20:e0:16:3e:f7:a8:
40:3a:d7:12:c6:fd:da:53:ea:47:9c:cd:a8:75:13:9e:7e:5d:
df:4f:8a:32:63:4a:97:d3:9d:07:20:9f:a6:ff:8e:b5:c3:6b:
7c:cd:14:80:af:18:0b:ee:fa:46:93:90:d5:94:c4:8c:88:fe:
e8:4a:fd:92:2b:45:d6:5c:ba:c7:42:6e:84:db:fa:75:b3:49:
37:ff:5c:3b:30:23:3d:25:6e:4d:59:37:a0:f2:07:ea:2a:5a:
bd:5c:06:7d:58:ac:5c:69:e2:2c:2e:da:e0:09:ee:a1:b8:80:
0a:61:1f:0b:28:3c:73:d5:c7:cd:22:c1:66:97:7f:14:8a:bf:
2e:b5:c3:b8:5f:e9:a2:14:1c:51:b2:89:85:d2:20:74:75:5b:
ca:93:68:2f:b2:a3:77:a4:dd:73:30:41:7d:b2:d3:cd:d5:1d:
08:74:21:22:d5:f7:a8:2e:7f:78:1f:8d:8b:65:45:6c:89:a3:
32:dd:09:46:3c:3d:37:c0:7b:39:9b:e2:9b:e0:ac:9b:66:e7:
ea:8d:61:8f:37:43:16:e1:03:7e:78:13:f0:42:73:ce:61:3c:
d0:1f:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:04 2025 by rpki-client