Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/gJhF5evxe8g-iDe3hBXACq-nKPk.roa
File: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (raw, json)
Hash identifier: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=
Subject key identifier: 80:98:45:E5:EB:F1:7B:C8:3E:88:37:B7:84:15:C0:0A:AF:A7:28:F9
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 01942522320B9E3658EF5D2DDF5A50B08D88
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/gJhF5evxe8g-iDe3hBXACq-nKPk.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206351
IP address blocks: 2001:67c:12e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:0b:9e:36:58:ef:5d:2d:df:5a:50:b0:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=809845e5ebf17bc83e8837b78415c00aafa728f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:c9:f2:08:e9:b9:1c:14:ef:65:ad:95:10:
7d:09:dc:10:8a:20:04:2f:57:9f:e0:bc:c2:d1:70:
1b:d9:69:9b:88:dc:76:d1:a8:9e:b1:50:92:9f:ba:
48:41:11:a0:6f:c0:d7:eb:72:6f:2c:0f:f9:68:b1:
70:b4:25:43:40:d9:a6:90:4b:dd:b2:1d:ce:d6:db:
f1:be:24:fe:67:8d:a4:79:44:0c:b9:4f:58:f9:ad:
f9:5a:9b:e7:98:ac:75:8e:30:d0:58:a9:38:0f:45:
8d:ae:68:cc:1e:b4:1a:e1:ab:1c:b4:3a:c9:8e:9c:
de:89:d2:84:14:3b:7a:20:6a:eb:cf:a6:3e:a6:92:
d7:0a:df:40:32:7d:46:e0:c5:9e:d2:11:c6:46:24:
44:60:49:1f:1d:f5:06:66:be:00:e0:d9:60:82:15:
a3:97:96:04:21:3a:c1:68:b7:4d:cb:af:0d:9b:ee:
ed:49:c4:07:6d:cd:4b:40:ee:23:d5:11:9b:a9:3c:
df:91:99:4f:6b:45:43:7d:e7:4f:e0:35:9d:82:f1:
d0:f7:67:62:09:58:bf:7d:72:49:4c:1d:14:bc:5f:
d8:64:7f:39:52:bf:31:3e:cf:6b:d2:27:40:df:6e:
64:f3:56:2b:f4:6e:67:af:bd:a6:0d:e0:a7:d9:6f:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:45:E5:EB:F1:7B:C8:3E:88:37:B7:84:15:C0:0A:AF:A7:28:F9
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/gJhF5evxe8g-iDe3hBXACq-nKPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12e0::/48
Signature Algorithm: sha256WithRSAEncryption
c0:1e:e9:12:67:e5:fd:b9:2e:93:75:92:33:3f:07:ba:f6:bc:
be:ff:92:2c:09:0f:36:53:41:6b:4a:d6:5b:b5:88:9f:b2:57:
f8:cc:a1:95:66:ed:30:29:a6:b4:c5:8c:b0:ed:12:8b:95:16:
f1:d2:79:90:fd:3a:23:44:51:bf:c3:fd:e6:63:6b:b9:d7:47:
76:e5:71:d6:d6:78:fb:df:6a:9a:2f:9e:b1:12:74:c4:55:48:
12:a6:3a:fb:c8:86:0e:23:f0:7a:9b:56:9f:15:fd:9a:8c:f1:
95:75:fc:43:24:8c:32:fd:0b:66:f6:e6:ff:37:5d:6c:a1:2d:
ac:88:0a:70:47:e4:4d:83:0f:cd:13:b1:02:0e:a7:63:fa:c9:
24:94:2e:47:10:d1:5d:35:29:1e:82:9a:84:79:8a:92:6f:b6:
99:fd:44:48:a3:a2:5b:a8:d6:fa:ac:27:ae:e5:65:3b:7b:1f:
95:a3:c8:6c:3e:f5:e5:a7:99:36:86:66:2b:27:52:3e:8e:3a:
7a:46:d6:23:02:5e:01:05:fe:52:f6:36:0d:aa:73:cd:f8:a7:
e9:ab:e9:1e:a3:f6:a6:c1:78:76:57:81:69:4b:fb:61:a2:ff:
6f:37:d1:8c:c6:88:73:c4:87:9b:aa:e4:a2:c0:99:0f:3c:b4:
9f:94:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:25:06 2025 by rpki-client