Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa
File: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (raw, json)
Hash identifier: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=
Subject key identifier: 19:E4:C3:D8:59:D1:0B:52:52:88:00:A2:ED:97:3A:C7:0A:4B:08:50
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019670F6E3B901B9A243D8A41D09B930E324
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa
Signing time: Sat 26 Apr 2025 07:19:10 +0000
ROA not before: Sat 26 Apr 2025 07:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209227
IP address blocks: 80.191.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:f6:e3:b9:01:b9:a2:43:d8:a4:1d:09:b9:30:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 26 07:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e4c3d859d10b52528800a2ed973ac70a4b0850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:7a:d7:13:bc:83:4b:47:7c:b0:2a:b9:f8:
51:aa:28:27:b4:76:94:44:3a:74:81:b0:9e:ec:1a:
c0:4c:bd:a3:9f:2e:b0:62:85:62:d8:83:a1:b4:1a:
51:bf:01:cf:e3:af:3b:2b:19:ac:4e:a6:80:77:b5:
37:d8:df:b9:00:4a:47:a3:a2:67:b3:3f:c9:f2:f4:
37:05:d2:36:8b:30:de:9f:b1:60:6d:34:4e:d4:2c:
73:1a:e6:b8:5e:2c:71:aa:fe:32:4a:3b:38:b7:c6:
5f:63:5b:3b:5c:62:c7:bb:f1:dd:c5:30:64:dc:b2:
e3:f2:c3:33:6d:a4:4d:b4:2d:51:60:65:b5:75:5f:
20:a1:16:c4:9b:b2:69:d0:a2:ca:9d:a6:b6:07:aa:
98:cc:a5:a7:23:ca:db:0e:4e:fe:2d:69:bf:76:de:
e5:16:7b:f5:2f:0d:b5:49:33:76:88:bd:8a:72:8a:
9a:e9:fb:63:30:63:44:07:90:16:6a:c4:63:a2:8e:
95:8b:24:0c:f9:d0:42:68:47:ff:0c:5f:a9:13:df:
14:36:d7:04:da:a7:44:8c:d1:8c:6e:ad:93:99:59:
a2:df:2c:3d:4e:71:26:61:3d:d9:0c:01:75:7b:cc:
95:9a:e4:6f:1a:a4:7b:b2:3f:b6:3e:39:3f:8d:8c:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:C3:D8:59:D1:0B:52:52:88:00:A2:ED:97:3A:C7:0A:4B:08:50
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.191.78.0/23
Signature Algorithm: sha256WithRSAEncryption
79:0f:75:43:7a:3b:b9:b7:83:04:a2:1d:c1:2c:3f:d5:a0:dc:
ec:fa:1c:79:a3:e4:1b:59:1d:a9:d0:98:10:27:5e:2f:7f:c6:
7b:53:63:ac:3f:3f:29:57:c2:db:0e:a2:9b:ad:c4:7d:5b:32:
a0:74:db:a1:74:8f:57:47:e0:f8:ae:e2:6c:73:24:b0:ce:d2:
d2:c0:ff:60:7b:69:81:dd:08:3c:95:45:b5:cc:e5:19:10:a0:
2f:73:28:41:cd:03:ce:36:fc:4d:1d:c5:47:2f:c6:c1:7a:7f:
23:4f:06:c6:75:26:a6:d6:c5:d5:8b:31:62:d5:cf:d6:c4:3d:
be:cf:64:8a:2c:9b:83:64:a9:76:c8:ac:4a:f3:a9:1c:7e:45:
f4:66:0a:1a:92:d7:d3:e4:66:b3:9e:ed:de:c8:ab:4f:e6:0b:
da:21:e2:26:d4:24:b1:d3:6a:c3:47:6e:3f:cb:10:c4:10:c8:
53:ae:43:c3:4d:2f:52:db:4b:b5:a2:61:db:4a:26:47:3f:f9:
fe:2a:49:19:42:62:2c:e7:cc:90:f8:8a:04:74:44:d8:c2:00:
5b:3c:e0:c5:1c:ee:2b:08:ee:22:85:65:1f:22:07:85:e7:1b:
15:79:71:88:19:17:3f:fa:79:b7:d2:76:62:8b:47:36:e7:92:
6c:37:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:27:40 2025 by rpki-client