Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gyWUe0gTwK0HaBDpLZk_FxixfDE.roa
File: gyWUe0gTwK0HaBDpLZk_FxixfDE.roa (raw, json)
Hash identifier: bErorrvc6tFnBRIwUNd3B/VIXbCCAzRkGtQJHpHjRcM=
Subject key identifier: 83:25:94:7B:48:13:C0:AD:07:68:10:E9:2D:99:3F:17:18:B1:7C:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196810CEEC469665CE897F7D6257C62D0D5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gyWUe0gTwK0HaBDpLZk_FxixfDE.roa
Signing time: Tue 29 Apr 2025 10:17:10 +0000
ROA not before: Tue 29 Apr 2025 10:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47392
IP address blocks: 89.144.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:0c:ee:c4:69:66:5c:e8:97:f7:d6:25:7c:62:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 10:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8325947b4813c0ad076810e92d993f1718b17c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:2c:54:e3:13:d2:a1:46:f2:fc:70:7c:f0:
ec:fe:5d:1c:7f:66:ef:a3:cd:db:5f:04:97:70:ce:
10:28:e3:7f:71:c6:80:c7:e2:ae:e0:a3:05:6b:06:
59:8c:d5:12:c2:a6:ef:19:6c:72:2e:f7:30:1c:df:
a0:72:1e:62:4b:0a:8e:30:3b:42:b5:a0:db:16:d0:
85:9c:bb:84:98:71:3e:a6:0e:a1:63:39:93:e7:c2:
da:1a:15:74:f0:85:87:7f:98:ca:ef:9e:24:3b:e1:
5f:d4:d3:65:d3:07:87:05:9c:e4:97:0e:99:7b:8e:
a7:b8:a0:d7:53:e6:f6:28:88:df:61:ec:6f:8a:76:
3e:34:02:1e:5c:01:51:3f:27:2f:95:af:26:31:2e:
e9:03:c2:af:d8:04:eb:95:78:70:5d:29:2e:4d:ff:
65:88:08:8e:9b:7c:d2:7a:f5:8b:b6:6d:65:fe:83:
58:d6:d0:f0:51:3d:69:9d:2d:77:c9:36:c1:81:03:
91:a5:e4:6f:b1:1c:7d:46:b3:fc:a1:bc:a5:43:20:
80:73:be:c2:e4:f4:d5:f8:c3:1e:55:80:13:9f:16:
8a:f9:af:7f:2e:01:6d:f0:57:c3:b6:0d:97:21:16:
f9:58:0d:58:8a:a0:5e:bf:07:de:f4:db:2f:2c:ef:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:94:7B:48:13:C0:AD:07:68:10:E9:2D:99:3F:17:18:B1:7C:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gyWUe0gTwK0HaBDpLZk_FxixfDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.40.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:9b:c0:b1:53:63:fe:e6:e0:4d:a6:46:5f:05:60:09:6c:e7:
65:3a:5c:f5:3a:5f:c7:9a:e7:20:16:0e:1c:d1:82:f8:fb:8a:
f2:23:f7:17:2e:b1:7d:1b:b9:08:ab:c4:06:fd:bd:7e:e8:00:
66:ae:35:5a:4e:6f:94:60:b1:e8:41:2e:8f:dc:7e:86:a3:e7:
fb:5e:4a:e5:8e:dc:fd:e1:e3:e9:7c:0d:b6:80:1d:cc:47:21:
a8:34:35:38:af:4c:0f:4e:ac:fd:c4:5d:62:a0:06:f4:65:72:
8f:b9:4f:d7:26:08:22:a6:2f:70:60:9a:d6:21:16:09:9f:f3:
24:48:2b:c1:19:32:98:b0:e6:28:3a:df:ba:06:21:18:0c:5c:
9a:9d:69:ef:5c:54:c9:bb:f3:fe:45:e1:9e:c5:b0:93:1f:e7:
70:39:01:d3:b3:e6:da:fc:3a:9e:31:c3:49:fd:89:81:5c:9b:
19:ac:32:3d:a7:cd:e0:61:0d:14:5c:c5:7e:96:7e:68:00:86:
16:20:dd:51:ff:9b:bb:15:83:42:4b:58:20:f8:c2:9e:bb:69:
94:03:7e:17:b1:34:1a:5d:71:79:5e:79:7a:ad:68:22:4e:67:
a6:5c:c8:8f:21:69:4f:79:5b:a3:89:8b:3f:64:22:23:6f:8a:
d0:23:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:37:27 2025 by rpki-client