Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/GCeJWQXp53i0_T9Els2HFdD580c.roa
File: GCeJWQXp53i0_T9Els2HFdD580c.roa (raw, json)
Hash identifier: F4jM2A6o7cg7dalyRSsXPRHMxAUn8dJXwNlkzBZKjRk=
Subject key identifier: 18:27:89:59:05:E9:E7:78:B4:FD:3F:44:96:CD:87:15:D0:F9:F3:47
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 019666B7E8E5D2F4AA079A5BC06315838914
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/GCeJWQXp53i0_T9Els2HFdD580c.roa
Signing time: Thu 24 Apr 2025 07:34:10 +0000
ROA not before: Thu 24 Apr 2025 07:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395403
IP address blocks: 163.114.197.0/24 maxlen: 24
163.114.198.0/24 maxlen: 24
163.114.224.0/24 maxlen: 24
163.114.225.0/24 maxlen: 24
163.114.226.0/24 maxlen: 24
163.114.227.0/24 maxlen: 24
163.114.228.0/24 maxlen: 24
163.114.229.0/24 maxlen: 24
163.114.230.0/24 maxlen: 24
163.114.231.0/24 maxlen: 24
163.114.232.0/24 maxlen: 24
163.114.254.0/24 maxlen: 24
163.114.255.0/24 maxlen: 24
2a00:edc0:1007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:b7:e8:e5:d2:f4:aa:07:9a:5b:c0:63:15:83:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Apr 24 07:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1827895905e9e778b4fd3f4496cd8715d0f9f347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:e6:b2:e1:b1:9d:86:05:35:a4:ab:28:2a:
a6:d3:86:90:a4:74:6c:6f:61:ea:cf:92:4c:a3:9b:
25:29:b9:49:6a:a6:b0:ae:24:d3:3f:55:42:55:6c:
14:d3:41:9f:1d:a6:70:b2:04:eb:ad:f5:a5:a9:f4:
0e:1d:4d:6c:9a:56:40:51:8b:ab:85:74:10:14:ec:
9b:b4:bc:f9:9b:16:8f:12:8b:14:18:94:7c:3f:1c:
7f:81:08:de:00:8f:c4:84:fd:ee:e8:e9:f2:0a:51:
0c:79:0b:e5:3b:e9:f3:9a:d7:f0:91:65:ef:5f:db:
e2:f8:3e:5c:7e:eb:7c:c4:42:a3:31:dc:35:7e:aa:
45:2e:7c:16:47:42:12:20:35:aa:f5:00:eb:aa:69:
de:b0:e9:22:26:70:15:74:7c:30:9b:6c:90:2f:0f:
5f:30:68:05:e6:b6:ab:25:f9:e9:86:fe:a0:19:98:
b4:9f:4b:7e:f7:cc:f3:e5:76:96:d7:e6:9e:61:d8:
88:7a:3f:06:7b:d7:ba:61:8d:6f:34:cc:2d:cd:78:
df:b9:ee:fe:d7:0c:3c:2d:5d:d1:7a:8d:c8:29:f4:
c3:06:24:38:2e:b4:15:e2:7b:79:22:fb:3b:7f:79:
c4:c2:a4:2b:f5:89:f9:63:31:8c:75:c7:be:53:85:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:89:59:05:E9:E7:78:B4:FD:3F:44:96:CD:87:15:D0:F9:F3:47
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/GCeJWQXp53i0_T9Els2HFdD580c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.114.197.0-163.114.198.255
163.114.224.0-163.114.232.255
163.114.254.0/23
IPv6:
2a00:edc0:1007::/48
Signature Algorithm: sha256WithRSAEncryption
81:53:0b:03:aa:d6:d8:2f:ad:67:0e:b7:a5:1c:4c:71:af:ef:
dd:63:d5:31:84:87:34:c0:41:1b:ee:18:68:a4:e0:16:45:99:
ba:96:05:24:75:62:bc:04:2e:a0:21:f2:de:21:04:78:16:19:
7d:14:0b:05:fa:2b:a1:60:88:c5:d1:96:84:09:a9:79:c5:82:
e1:89:e7:13:c0:f8:ee:56:d3:d4:44:41:e0:9a:8a:8a:5a:6c:
be:38:6b:10:59:e7:7c:91:8b:fa:4c:26:73:eb:6f:3b:d8:f4:
c2:9d:52:96:2f:cf:60:ce:67:2f:8f:a3:00:55:99:df:7a:e7:
35:3e:40:32:05:98:d9:28:1f:8b:fe:83:6e:b2:ef:39:3d:0d:
de:13:ad:31:c4:fc:6d:ac:8e:29:15:f7:5a:ba:2b:93:fc:f0:
a6:a5:5a:13:26:2d:82:96:69:43:99:60:d8:49:2a:e3:df:a9:
87:7c:31:70:9b:38:80:99:5f:2a:91:17:88:d5:f2:69:59:62:
09:e8:4d:50:d4:fb:8f:f0:1e:2c:df:94:d1:7f:fb:20:cc:f8:
48:fa:72:b0:b9:b5:b5:1e:44:69:c9:e6:19:20:d7:00:df:4a:
09:d9:a2:d5:84:ae:c7:2e:88:bf:b4:12:10:ec:f0:03:ab:7b:
34:e6:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:09:11 2025 by rpki-client