Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/gXlhbbxVLQVqCMGvhejieNdtoBY.roa
File: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (raw, json)
Hash identifier: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=
Subject key identifier: 81:79:61:6D:BC:55:2D:05:6A:08:C1:AF:85:E8:E2:78:D7:6D:A0:16
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019421B217B795CA9664A05EBA21293EDEB0
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/gXlhbbxVLQVqCMGvhejieNdtoBY.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 185.204.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:17:b7:95:ca:96:64:a0:5e:ba:21:29:3e:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8179616dbc552d056a08c1af85e8e278d76da016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:47:20:7f:31:9e:43:0d:16:c6:bf:b8:81:
8e:a5:c3:f1:44:f2:8d:e7:eb:f6:29:4a:06:a4:22:
64:f7:74:5a:ce:82:ad:8e:83:94:3f:e4:ea:b9:d4:
58:7b:f4:2c:ec:06:99:40:5f:97:92:95:f9:dd:3f:
32:fc:83:6f:e5:04:27:f0:66:32:48:b3:9e:6b:a9:
a4:b0:8c:bc:3a:a0:bf:fd:6e:00:24:82:f6:ce:cc:
58:59:7a:63:39:9d:15:b9:e0:9d:8a:69:1b:25:cb:
3c:ce:19:c8:0d:7f:8e:71:a5:55:02:6f:a1:e5:fb:
a5:0b:6e:62:08:de:ee:7e:4c:36:5e:66:f7:85:e8:
1e:5f:b1:4f:3c:7f:22:e9:6d:af:e5:e4:8c:91:0d:
ce:5c:a0:67:9d:95:35:aa:f8:84:24:cf:e7:ec:16:
d4:ec:eb:c7:d8:48:0f:b3:a4:04:92:65:ff:1b:cc:
78:31:42:47:02:16:f2:9b:37:29:fd:49:3a:23:fe:
6d:90:56:d9:f7:43:eb:8f:d3:e9:27:3c:bb:60:0b:
ed:90:36:ab:c0:6c:3c:bc:8a:62:3c:94:e9:a3:f6:
18:ea:0c:6b:58:47:8c:85:c1:f5:f4:0a:96:b8:f3:
31:d9:c9:e6:d8:0d:52:97:e0:16:65:5d:e1:69:ce:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:61:6D:BC:55:2D:05:6A:08:C1:AF:85:E8:E2:78:D7:6D:A0:16
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/gXlhbbxVLQVqCMGvhejieNdtoBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:51:28:cc:55:b5:15:0b:0a:37:e0:34:4c:9e:24:15:1c:5c:
ab:b1:eb:c3:ee:2d:ee:a9:3c:64:39:2b:a2:b8:ea:43:43:6f:
c5:3c:74:3e:f6:2f:46:8a:c1:35:1c:a5:36:3a:0e:e9:b6:e6:
d3:80:c0:0e:0d:de:fa:7e:c9:fa:6a:ed:b0:1a:83:b1:78:8e:
de:21:c3:1d:74:07:59:3f:38:10:63:7d:36:ff:49:a6:f7:ae:
3c:1f:95:00:ab:fe:bc:50:eb:64:f8:c1:00:ac:5e:4e:13:47:
39:26:8f:20:dd:50:99:ae:33:f9:b2:f5:6c:e5:c0:ca:99:d5:
50:7f:14:d7:1a:4f:9d:a2:b7:6b:b3:7a:6d:0e:52:01:b2:01:
e9:4f:d8:c8:3f:0f:94:47:09:7c:fe:7f:ed:50:e4:29:36:f2:
4a:34:f1:b2:97:06:4d:27:f7:6e:ed:0c:f1:9f:83:aa:6d:bd:
79:a2:b8:09:67:22:57:e6:b5:26:c4:ab:94:14:36:d0:7c:7b:
55:62:21:2c:21:7b:06:a9:12:47:7a:01:2f:6c:8a:1f:c4:6d:
bd:3f:6a:a6:14:42:ce:21:c3:08:8a:81:1c:ad:54:c3:7b:9a:
bc:b5:12:c9:28:97:21:67:25:e9:c7:f7:ce:d7:c1:85:1d:06:
a3:7c:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:08:51 2025 by rpki-client