Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/GBhjKbS-fcKacs4QagSv_dPJry4.roa
File: GBhjKbS-fcKacs4QagSv_dPJry4.roa (raw, json)
Hash identifier: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=
Subject key identifier: 18:18:63:29:B4:BE:7D:C2:9A:72:CE:10:6A:04:AF:FD:D3:C9:AF:2E
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019728556624BC4C26E5456131F6B7E5C4FC
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/GBhjKbS-fcKacs4QagSv_dPJry4.roa
Signing time: Sat 31 May 2025 21:52:54 +0000
ROA not before: Sat 31 May 2025 21:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 91.200.248.0/22 maxlen: 24
94.45.32.0/21 maxlen: 24
94.45.32.0/22 maxlen: 24
94.45.36.0/22 maxlen: 24
94.45.60.0/22 maxlen: 24
193.43.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:28:55:66:24:bc:4c:26:e5:45:61:31:f6:b7:e5:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: May 31 21:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18186329b4be7dc29a72ce106a04affdd3c9af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:6e:e9:18:84:45:df:51:db:17:98:01:dc:
38:0f:91:2c:a2:87:8b:60:34:e6:82:60:e8:b4:42:
81:eb:97:11:3d:c6:59:e9:60:d2:d7:d9:12:fd:f5:
1d:07:f4:8a:43:11:a1:a1:4c:90:e1:f4:f3:3c:3f:
21:ee:b5:ce:a3:9d:e7:57:5a:0d:ae:1f:6f:b1:24:
f0:5f:81:1c:cd:5c:a7:ae:ad:5f:cd:df:a6:e9:54:
8f:b5:57:12:07:11:61:6b:9a:7b:12:1c:dc:8f:55:
5c:39:01:4b:41:78:cf:ff:8e:7d:4b:cd:73:42:8c:
e5:95:47:15:6c:e8:79:07:4b:ea:90:31:a1:e7:ab:
68:53:07:ce:69:35:3a:58:d1:2f:0d:78:f6:dd:ee:
51:5e:0e:bb:b3:1b:e3:39:ed:44:30:92:82:7b:3a:
ad:1a:08:e4:77:a6:64:ad:61:a2:78:d7:62:8b:b4:
78:81:7a:df:80:92:0c:50:dc:c3:d6:11:62:9b:9a:
0a:a0:09:55:77:30:14:c1:7a:35:6e:03:b3:5d:b8:
dd:be:c7:7e:fd:d9:af:42:21:cd:57:8e:8c:af:04:
1c:73:73:96:6d:fe:0e:a2:8b:08:56:e2:6e:ac:bb:
b6:f2:b9:21:f3:bb:85:e9:ff:a1:2a:4c:8d:15:6a:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:63:29:B4:BE:7D:C2:9A:72:CE:10:6A:04:AF:FD:D3:C9:AF:2E
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/GBhjKbS-fcKacs4QagSv_dPJry4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.248.0/22
94.45.32.0/21
94.45.60.0/22
193.43.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:05:df:c4:55:a8:5e:c5:f5:2b:88:c0:96:ab:16:af:c8:2c:
8a:03:cf:e5:17:af:79:06:ab:f3:81:b1:cf:47:74:78:b6:02:
bd:a4:f5:7d:a3:c3:5a:bd:da:9d:9a:cb:6f:d9:c4:09:4f:a5:
e6:de:03:4d:0b:a5:6c:2d:68:40:65:01:0c:f1:e6:56:ba:d1:
b7:e9:c2:88:48:70:d9:51:b7:d1:67:7c:28:27:6d:8a:b2:62:
19:75:ec:b1:66:32:c1:42:12:9e:b5:56:fe:6a:c8:27:f1:d7:
e4:0f:4e:84:df:f4:81:c0:5e:b0:d9:a6:6d:1e:25:0e:c8:fb:
e8:13:24:fb:9e:72:67:07:26:01:73:22:9f:7b:38:e3:f7:0e:
20:34:de:92:11:b1:4e:35:f0:98:88:fb:f8:2d:d2:c1:53:e4:
88:6a:2e:c7:2a:67:33:07:6e:f6:66:3f:ae:2e:db:74:91:b3:
48:89:3c:47:67:84:da:dc:c4:dc:0f:8f:cd:aa:9a:92:ed:a9:
e6:26:4b:a5:07:c7:35:24:90:42:db:fc:b0:cb:63:e8:f6:8d:
3a:b8:03:fe:ec:a3:5b:cf:3b:2a:87:55:d6:80:6d:a9:63:c9:
e0:ec:8d:35:ca:cd:ff:8f:7f:ef:6e:21:b6:b5:e8:0b:a3:25:
5c:1a:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:49:16 2025 by rpki-client