Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gb5TicBLRrfPEBErCGhrr6tNb04.roa
File: gb5TicBLRrfPEBErCGhrr6tNb04.roa (raw, json)
Hash identifier: ocROI0q7w9wREZotKy00foz4ii7bG7XXZY1TOvZHeQg=
Subject key identifier: 81:BE:53:89:C0:4B:46:B7:CF:10:11:2B:08:68:6B:AF:AB:4D:6F:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01975D55DFC9D06CF6F0195E59F6AD8C2E22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gb5TicBLRrfPEBErCGhrr6tNb04.roa
Signing time: Wed 11 Jun 2025 04:53:18 +0000
ROA not before: Wed 11 Jun 2025 04:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 87.121.70.0/23 maxlen: 24
87.121.88.0/24 maxlen: 24
87.121.144.0/23 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
141.98.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:55:df:c9:d0:6c:f6:f0:19:5e:59:f6:ad:8c:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 04:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81be5389c04b46b7cf10112b08686bafab4d6f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:c2:5e:ed:fe:ee:20:5e:20:72:46:08:a3:
63:eb:35:27:a8:80:3f:d5:21:a7:13:18:a8:76:b8:
96:4f:e2:66:c9:48:57:d3:09:e6:37:ab:d0:8a:d3:
f5:b1:a5:9b:89:f1:25:6b:b3:b6:13:a8:9b:13:e0:
07:64:18:70:24:79:36:e5:9d:4f:e8:e0:1d:37:b5:
78:a4:dc:9e:f5:d2:7a:25:99:2d:cf:33:09:9f:58:
97:57:e7:a9:f5:f3:6b:6b:72:50:5c:b0:5b:3f:06:
f7:68:b6:d4:42:ba:1d:9b:18:d6:a8:d0:25:73:75:
f6:7b:f1:99:bd:c5:c6:41:38:b0:6c:06:fb:3c:a2:
fc:6e:2b:a5:a1:2b:8d:4c:82:9f:5d:78:82:ae:20:
95:77:ed:9f:17:11:c0:0e:4e:a9:eb:f2:19:e6:6c:
1c:b5:07:3d:a1:dd:0f:54:1b:6b:01:cd:b5:ed:15:
39:9d:85:50:7e:03:96:aa:ad:ca:58:cf:05:18:af:
3f:48:fc:3a:69:47:2c:ee:4b:ef:0f:a9:20:e1:3d:
e2:5a:4d:f8:33:8a:05:a3:30:d1:6a:e1:f3:8b:c3:
64:9c:30:97:1a:3d:95:d6:69:e4:ee:a6:ed:5b:ce:
8f:88:b5:a3:8d:b3:59:76:94:ac:7b:7d:5b:e8:c9:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:53:89:C0:4B:46:B7:CF:10:11:2B:08:68:6B:AF:AB:4D:6F:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gb5TicBLRrfPEBErCGhrr6tNb04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.70.0/23
87.121.88.0/24
87.121.144.0/23
94.156.162.0-94.156.165.255
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f4:2d:4b:90:40:7c:a7:76:ef:49:32:18:5b:21:72:40:bd:
ae:7a:cb:ac:f8:18:30:1e:84:38:47:2e:4d:db:6d:e9:c0:24:
71:e4:f4:c0:38:64:7e:b1:52:fb:2e:0f:07:70:e1:53:28:93:
a6:14:01:da:eb:a4:28:eb:70:54:3c:5e:66:9a:78:d5:22:33:
c7:92:b3:07:36:ae:c6:08:77:a5:f9:2b:61:c5:5a:e2:4a:de:
7b:56:f5:6c:9c:5e:90:b1:69:cf:58:37:9b:f0:de:77:a9:bc:
30:40:39:0e:5f:97:1a:32:58:58:30:ba:34:06:6b:09:da:9b:
9c:e5:f4:ea:92:ed:0f:f1:c6:0f:e3:e0:35:75:c1:62:2f:4b:
54:f9:9a:32:01:40:44:7a:4b:48:e3:71:a8:dd:5b:87:dc:3f:
95:de:67:65:55:08:91:75:7f:2a:68:c6:fb:a9:b6:f5:5b:37:
d2:0b:0e:de:da:28:26:aa:0f:22:d1:42:b6:12:c2:16:45:2f:
d7:e8:68:3a:98:5b:32:99:e7:a3:59:75:a6:42:e1:0d:03:0a:
6a:7f:09:ba:62:b7:47:c0:53:79:94:bc:11:98:50:e4:36:82:
41:2c:66:44:16:b6:23:76:8a:00:01:62:98:13:b9:bf:e8:ba:
22:d6:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:36 2025 by rpki-client