Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GCq3OcvhsVssgyhwVftlmv2qS0g.roa
File: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (raw, json)
Hash identifier: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=
Subject key identifier: 18:2A:B7:39:CB:E1:B1:5B:2C:83:28:70:55:FB:65:9A:FD:AA:4B:48
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B6013D0711828570E14875E5536487
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GCq3OcvhsVssgyhwVftlmv2qS0g.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214088
IP address blocks: 85.133.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:01:3d:07:11:82:85:70:e1:48:75:e5:53:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182ab739cbe1b15b2c83287055fb659afdaa4b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:31:5f:48:91:db:0e:d9:dd:ec:f2:6b:fe:
35:31:04:8f:31:76:e5:a0:6b:ef:47:75:b7:84:9e:
fd:ba:c4:7e:ba:34:db:87:71:30:ee:84:a7:34:c1:
99:05:e0:f5:bb:38:57:67:31:9c:f4:b9:f0:ea:af:
a1:41:96:c4:f7:a8:5d:f3:88:31:98:4a:71:64:eb:
a2:03:e3:de:34:b0:6f:62:c2:e0:0c:24:c7:f9:ad:
d9:53:34:06:8a:0d:43:72:5f:5e:ad:c4:ee:84:59:
c8:cc:68:2b:42:06:77:c6:93:0b:33:43:9b:39:a4:
89:3a:5f:ed:3e:f2:cf:2b:9c:2b:74:d6:4b:ee:a5:
8d:fe:87:04:cd:c9:8f:b0:8a:3b:72:9c:55:8f:67:
89:99:9e:88:69:9a:68:73:3a:5b:38:0a:aa:27:07:
68:41:0d:85:09:de:eb:64:8d:88:40:6d:b5:1a:05:
6b:fe:33:3c:5f:38:f8:f5:17:b2:20:05:87:1b:06:
7b:14:13:6d:95:a1:4f:b3:bd:c3:4a:44:fa:fd:f4:
94:e1:79:29:b9:91:f5:fb:57:b4:e8:fb:6d:6c:cb:
d7:eb:6c:e0:1f:7e:0a:d8:10:97:01:af:09:75:15:
51:a1:e1:84:3e:1a:6c:ad:ef:da:6d:0d:f9:b0:af:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:B7:39:CB:E1:B1:5B:2C:83:28:70:55:FB:65:9A:FD:AA:4B:48
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GCq3OcvhsVssgyhwVftlmv2qS0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.233.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5d:72:d4:05:cb:62:e3:e8:5f:54:d1:2f:2b:3c:d2:d8:d8:
27:9d:fc:84:2e:e8:41:b9:42:72:2f:04:6b:d4:05:9b:08:34:
f8:ac:19:54:c5:36:69:5a:6d:4c:6d:e6:b4:dc:7b:55:7e:19:
c5:ef:44:dc:20:f5:6f:e3:fc:99:08:4b:07:ba:23:f0:c8:c4:
a1:4e:b1:34:c0:5a:38:da:00:7b:8b:50:d3:b2:77:78:42:08:
6e:5a:a8:0b:60:32:1c:85:6b:02:a3:9e:2f:2b:1f:02:09:d9:
99:f4:e7:23:9c:ca:d5:d2:78:b0:9e:eb:69:02:ae:e2:cb:1e:
2b:d9:90:31:de:45:ec:2e:d4:c1:0c:1b:b2:46:6a:8d:44:54:
d5:6f:c1:ff:16:f3:e0:7e:91:f7:58:d6:cb:47:8e:ee:18:55:
1c:c4:66:d5:b2:53:13:7d:c7:62:9d:2e:a0:e2:36:31:a6:97:
fd:bc:ce:77:9b:6e:d1:52:52:d1:70:0d:12:d3:76:19:0e:c7:
2b:8c:35:71:b0:c5:fe:4e:5f:77:c9:b9:1b:75:6b:f2:6d:36:
c8:5a:91:a4:d4:b1:8a:7d:f8:4f:7d:e6:b5:1f:2c:3d:e2:23:
ea:4a:55:97:01:bd:e2:ff:58:00:76:d7:f9:dc:c3:ec:b6:3e:
87:16:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client