Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/gGh1amzB-Jk0RfzueDLNl64yqE4.roa
File: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (raw, json)
Hash identifier: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=
Subject key identifier: 80:68:75:6A:6C:C1:F8:99:34:45:FC:EE:78:32:CD:97:AE:32:A8:4E
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0194228DB61AF11A1D5E13B76B74BA033352
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/gGh1amzB-Jk0RfzueDLNl64yqE4.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 45.86.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b6:1a:f1:1a:1d:5e:13:b7:6b:74:ba:03:33:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8068756a6cc1f8993445fcee7832cd97ae32a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:42:de:be:d1:e5:3e:b9:ca:4c:31:d4:ed:
20:8f:b3:82:d7:b5:21:fa:50:a9:60:d8:d8:80:51:
cf:46:1c:6f:87:90:34:be:f2:b1:6d:fd:1b:65:f1:
85:ba:a4:e5:0b:25:16:f1:45:6f:f5:e9:f1:e9:53:
56:ff:7e:63:2f:3d:91:46:72:9a:6e:c7:2b:fe:42:
20:da:0e:ff:10:4a:56:3d:25:0d:d6:76:c5:7b:28:
87:a5:c4:8f:ed:60:ea:50:a0:d4:9e:10:38:31:e3:
17:9c:43:09:8f:07:ac:15:b0:80:c8:66:c8:ac:8e:
1e:96:fa:9c:15:97:3a:5c:ee:d2:39:b8:f5:b9:ea:
52:23:3d:2c:85:e0:e6:97:53:b7:a4:72:0a:6f:48:
a3:13:dc:8d:67:d8:98:70:ed:04:2b:72:9b:37:fc:
fb:18:7e:26:2a:04:38:55:2e:56:c5:f1:8e:8e:c7:
e4:37:33:cf:da:2a:1d:c8:39:e4:63:35:21:db:72:
cc:0f:96:96:7e:09:a7:52:f7:a8:b3:17:79:71:95:
b9:3d:07:38:e6:2f:e5:c3:97:a5:9a:b2:05:f9:b9:
07:46:22:66:ee:53:fd:96:4d:cf:bb:54:87:df:e6:
6a:b2:d6:c1:68:cf:98:a5:52:ee:f8:91:b0:71:e2:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:75:6A:6C:C1:F8:99:34:45:FC:EE:78:32:CD:97:AE:32:A8:4E
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/gGh1amzB-Jk0RfzueDLNl64yqE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d0:1c:a3:6f:19:64:7a:38:a9:cf:01:78:1e:62:f9:cc:e8:
7c:0a:d9:f6:59:3f:b0:22:d8:c2:2e:e7:e3:77:fd:21:35:e2:
ec:34:14:46:7d:78:fd:3c:e7:c2:11:a6:4f:67:59:8b:a3:2e:
90:79:f3:6b:7b:9c:32:3d:ad:0f:ce:5b:77:3b:f3:9e:99:e7:
88:a3:bd:f3:74:62:6a:72:8b:2b:9d:2e:5f:f1:97:4c:ec:22:
dc:ab:18:79:9f:9e:45:b2:10:95:8a:62:0f:53:b4:3e:55:67:
75:11:fb:ee:ea:bb:ba:3d:9e:37:c7:5a:d6:a9:72:33:22:0d:
4a:e9:75:a7:49:a3:bc:ea:c9:f1:a2:ce:c2:07:f4:4e:4f:0c:
a7:7f:43:2a:8a:51:06:15:a1:04:1b:5b:44:6d:35:a0:67:4d:
ec:64:ab:2d:97:20:d5:7f:c2:3d:42:15:87:39:ef:aa:d3:d2:
b3:c7:5b:56:12:83:bb:bf:d2:62:72:d8:69:ef:0e:2a:22:c8:
ab:d2:8f:e7:18:c0:a5:58:59:ac:b9:2a:a9:9d:b3:91:be:a9:
38:ce:54:b3:ef:10:68:ab:e6:99:98:c2:7f:02:22:fb:38:c1:
bc:a5:aa:a3:10:59:60:a8:d3:3b:9b:81:5b:37:91:df:d9:30:
0e:87:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:59 2025 by rpki-client