Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa
File: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (raw, json)
Hash identifier: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=
Subject key identifier: 18:98:12:EF:18:05:AA:0F:D3:D4:1A:EF:E5:3D:D9:DD:54:87:49:0B
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0196335E99A9D16A7E9A71B6E7E97819DE6E
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa
Signing time: Mon 14 Apr 2025 08:15:59 +0000
ROA not before: Mon 14 Apr 2025 08:15:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 1.179.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:5e:99:a9:d1:6a:7e:9a:71:b6:e7:e9:78:19:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Apr 14 08:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=189812ef1805aa0fd3d41aefe53dd9dd5487490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:05:2e:aa:55:72:1e:26:9f:05:a9:97:2f:
ef:2b:6f:38:4b:fd:38:1d:b4:1b:24:58:fc:59:5d:
58:28:b6:58:9d:1d:00:d9:a0:c0:ad:60:21:92:39:
ee:ef:f3:61:5f:1e:ea:18:3e:4c:d6:4a:1c:fe:f1:
4d:10:23:95:1a:8e:fa:9e:89:f1:09:d1:d0:7f:ce:
51:7a:9f:40:f2:42:71:2f:65:85:48:a4:0d:26:7b:
db:60:68:57:17:f5:01:c8:16:d7:b5:c4:84:b4:64:
34:7d:e2:95:f8:9d:2e:b3:82:10:11:5e:aa:4b:8a:
2e:43:8d:3b:1a:af:6b:11:3a:85:2f:fc:39:82:d8:
88:4f:ea:d0:61:cb:1e:3b:31:a7:38:9d:95:39:b4:
76:b6:3a:2f:b7:0e:77:8c:68:12:1d:7f:d6:69:87:
71:ac:28:6f:e1:65:06:56:c9:36:0c:74:11:a6:65:
12:dc:12:fa:79:c5:61:82:d7:c7:52:b4:11:81:2d:
7c:b1:6a:9e:90:0c:c1:d8:8c:5c:98:b5:9b:2d:53:
76:3a:92:78:bd:90:b5:f5:34:f1:ff:7d:54:b4:ff:
37:b7:1b:07:fc:9b:fd:7e:ec:f1:2b:1b:ac:d9:e2:
ee:c1:c9:55:6c:3b:21:f2:a1:3f:a3:0b:e6:50:ff:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:12:EF:18:05:AA:0F:D3:D4:1A:EF:E5:3D:D9:DD:54:87:49:0B
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.112.0/20
Signature Algorithm: sha256WithRSAEncryption
44:2b:54:c7:e5:db:ea:70:83:bc:53:36:4e:a1:76:40:38:10:
53:b2:23:f9:c3:6b:fb:a5:75:13:12:56:d4:02:20:07:ac:05:
d9:7c:e6:f8:1b:40:e9:92:fc:c8:4d:84:8b:f7:a8:f3:32:6e:
26:16:2f:7a:fa:c4:15:6e:f0:da:37:d6:c6:de:28:6a:4b:46:
79:87:c5:df:30:ac:26:38:ab:9c:28:99:ee:e8:ad:3b:8e:8f:
27:86:3a:7c:82:60:18:1d:fb:5b:af:6c:2d:16:cd:35:79:ae:
da:02:2a:b5:86:e0:52:16:26:8d:e1:d3:5e:ee:dc:77:05:83:
f2:7b:6a:be:34:db:66:d8:f5:25:a9:2f:23:da:90:5b:8f:0b:
81:34:c8:37:5d:32:86:8e:f7:bb:cc:b1:85:d4:5e:ac:74:22:
2f:0b:aa:8e:21:9a:67:b8:e7:c7:9b:1c:7a:5c:34:e1:73:26:
dc:47:f2:f5:0b:06:93:73:02:23:41:84:05:69:12:37:2e:45:
d0:13:8d:f1:f9:e7:f8:4b:9c:dd:8c:d2:a6:93:be:66:96:0a:
f3:c9:0f:be:9d:62:89:61:33:dc:72:c4:3f:36:6b:2e:e9:ce:
de:95:66:0d:d2:4d:4a:c3:ea:49:34:4f:e8:89:40:c4:8e:1d:
44:90:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:06 2025 by rpki-client