Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/cGnWsTG6_HuBPIKsK-FAxem4vS0.roa
File: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (raw, json)
Hash identifier: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=
Subject key identifier: 70:69:D6:B1:31:BA:FC:7B:81:3C:82:AC:2B:E1:40:C5:E9:B8:BD:2D
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019423D7EFA357FC34A929A4F170B8E51179
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/cGnWsTG6_HuBPIKsK-FAxem4vS0.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213300
IP address blocks: 46.232.187.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ef:a3:57:fc:34:a9:29:a4:f1:70:b8:e5:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7069d6b131bafc7b813c82ac2be140c5e9b8bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:b6:9c:0a:a0:9f:9f:e1:b5:d8:3c:91:bb:
9a:e6:eb:34:e3:c6:13:dd:69:1f:0d:d6:39:b3:6d:
44:ac:4f:24:84:c3:2f:be:e3:08:eb:69:2b:60:b2:
3e:17:3a:a2:9f:7d:51:53:e0:97:64:8d:b9:6e:51:
25:84:28:56:b2:dc:da:48:60:5c:55:75:01:8a:a3:
b4:5a:35:5e:bd:8f:2f:ed:72:52:f7:ea:59:2b:9a:
f4:60:5c:84:f8:46:74:a2:8e:ae:d9:f8:01:e9:39:
a7:69:13:3b:2d:42:cc:11:6c:aa:54:2c:77:1c:ca:
6e:47:4b:37:47:b3:49:ca:70:44:37:99:ef:52:2a:
38:4a:3e:54:c3:8b:6f:97:2e:83:81:d7:69:38:f1:
f0:a9:55:25:cb:e4:63:f8:48:bb:fe:cc:3d:7d:b2:
56:af:6b:7e:49:25:60:f6:7b:4f:c9:a2:68:1c:af:
b0:d7:c1:10:c4:7c:ce:a2:40:0c:48:ad:b0:02:3e:
89:64:ec:7b:7e:e5:d4:94:c7:27:24:8d:73:47:cc:
1f:0e:85:f9:c0:74:3c:3b:67:c3:e0:de:76:55:cc:
0c:8d:2e:1d:42:6e:b3:dd:56:fc:a4:f0:b8:ba:48:
44:c6:9e:c4:93:b1:18:32:12:e0:55:1c:28:7a:52:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:D6:B1:31:BA:FC:7B:81:3C:82:AC:2B:E1:40:C5:E9:B8:BD:2D
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/cGnWsTG6_HuBPIKsK-FAxem4vS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.187.0/26
Signature Algorithm: sha256WithRSAEncryption
5b:17:f1:12:e8:4e:a4:1d:f0:79:fe:11:c6:e1:9e:72:6a:1c:
d8:27:7a:47:4f:8f:40:86:a0:dd:b3:09:61:83:6c:ad:67:fa:
e2:d1:0d:8a:89:65:c0:d1:d1:86:17:3f:65:75:39:42:fc:ef:
45:5d:e9:bc:01:d5:2f:22:db:93:75:e9:2a:b0:d9:be:02:87:
b6:1d:cf:e1:79:21:4a:cd:79:24:d6:b7:15:9c:cb:1c:71:10:
ac:6c:7c:7f:ec:7f:60:a1:a3:4b:ab:7b:ce:5c:dd:59:cc:ad:
51:57:e4:4b:76:1f:17:3f:86:16:64:c9:3e:e7:1c:6a:30:de:
00:81:bd:8f:06:a3:1e:c2:33:9e:de:5e:76:c8:8d:6f:32:28:
0b:a9:83:dd:1c:28:f0:a4:db:d8:2c:66:6e:47:d3:e6:d3:44:
81:84:44:0b:4b:db:b4:7d:12:1e:ef:40:b0:37:36:49:d2:e1:
16:77:87:d2:dc:dd:37:31:db:0c:f6:62:f9:51:5c:41:4f:70:
fc:9b:cb:5f:ca:a5:b3:06:0f:fa:10:c6:34:77:19:c2:69:85:
42:31:1f:da:a0:4c:66:7b:aa:d9:36:6d:ed:b4:b1:54:e2:8c:
59:64:07:bd:8e:16:4c:d4:df:13:9b:6a:cc:a9:d1:38:93:bf:
9f:08:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:37 2025 by rpki-client