Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa
File: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (raw, json)
Hash identifier: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=
Subject key identifier: 19:EF:EE:5F:F5:B7:BF:A4:2F:E7:45:70:E5:A7:B5:54:AE:75:50:45
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5DD6E73FEF68D2743C724FA54D01F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50321
IP address blocks: 88.151.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dd:6e:73:fe:f6:8d:27:43:c7:24:fa:54:d0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19efee5ff5b7bfa42fe74570e5a7b554ae755045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:26:c7:85:32:60:24:dd:8b:7c:59:19:bb:
dc:b7:bb:38:d5:02:6a:9b:51:9d:2f:1a:bc:99:06:
ac:d2:cd:f8:4b:41:e4:53:cf:34:ef:f1:30:b9:ee:
71:de:0b:e4:bb:51:bc:8b:86:37:cb:e7:dc:d4:5c:
cf:db:0a:f2:aa:ff:0a:69:12:bc:d3:c6:98:3c:f5:
76:03:45:e7:fc:e3:04:cc:9d:a1:77:a6:5d:b9:6a:
67:d1:87:f3:12:03:0d:f7:f5:93:e7:c4:20:15:8f:
ed:cc:ce:03:b0:33:55:80:c2:7d:b3:d8:fe:6e:16:
36:b5:63:18:bd:fe:e8:08:15:58:4e:83:88:2f:59:
6e:32:12:32:c1:d2:19:e7:2b:91:a0:ba:c7:16:cb:
0d:99:af:d2:2e:1a:ab:74:09:11:26:27:86:4c:97:
a7:94:99:f8:ef:bb:61:70:6c:4f:35:03:2a:e0:77:
88:90:24:a6:d3:75:da:21:03:db:6e:9c:1d:6b:0c:
b6:9b:76:83:71:15:95:57:9f:e0:70:56:2b:60:32:
7c:88:b3:37:44:00:01:2c:ce:7c:50:31:21:24:c7:
7e:40:bc:f1:36:48:84:e4:8c:45:46:0c:46:9c:2e:
a4:5d:86:cc:15:14:24:81:61:8e:5a:e6:f9:f6:cc:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:EE:5F:F5:B7:BF:A4:2F:E7:45:70:E5:A7:B5:54:AE:75:50:45
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.192.0/24
Signature Algorithm: sha256WithRSAEncryption
90:cd:34:e8:8f:46:95:4d:23:16:89:6f:09:6e:b2:0d:d7:64:
fd:90:7d:c2:16:6b:7e:fc:4a:7f:76:24:69:70:a1:19:32:d1:
ae:67:91:45:42:b6:57:dc:c6:9e:f3:6d:22:f2:4f:11:cd:c7:
72:a1:cc:4e:66:56:df:13:0b:98:6c:a8:31:92:b7:31:72:e3:
0d:64:91:ff:1f:b0:e4:dc:50:d0:76:b5:89:f1:df:59:89:32:
37:c9:a6:3e:53:86:a6:1a:a7:b3:23:c0:a2:05:3b:a0:da:d9:
4a:fe:a6:1a:3e:8d:ad:68:78:09:f6:c0:0c:8d:13:4e:98:9f:
e7:fa:d2:83:71:e9:a5:50:f6:a7:72:80:4a:ca:4a:a1:df:d9:
fc:cd:80:05:ab:42:b3:cf:8d:43:f1:a6:35:f4:cf:99:37:6f:
86:c7:e0:3a:14:fe:d7:e9:28:46:37:7b:72:03:7a:0c:10:d5:
f8:2c:45:7b:c3:02:8f:80:1e:9d:f6:ec:9d:c2:a9:e6:fd:5a:
05:6b:30:a5:31:79:4e:81:24:39:99:44:bc:e1:b3:1a:da:ce:
3c:a6:60:e2:03:2b:24:1c:14:ad:63:b5:7b:59:3e:8d:57:8b:
74:c0:37:9d:3f:b8:aa:a2:27:8d:be:be:a0:df:ea:ef:93:7d:
b0:27:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:24 2025 by rpki-client