Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa
File: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (raw, json)
Hash identifier: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=
Subject key identifier: 80:51:99:D8:11:6C:F2:EC:0C:AB:31:39:7B:E7:DA:FB:A5:55:08:D2
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 01967C8235E1C71FDA2CAC9608D239398066
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa
Signing time: Mon 28 Apr 2025 13:07:10 +0000
ROA not before: Mon 28 Apr 2025 13:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209772
IP address blocks: 91.210.124.0/24 maxlen: 24
185.68.128.0/23 maxlen: 23
185.68.128.0/24 maxlen: 24
185.68.129.0/24 maxlen: 24
185.68.130.0/23 maxlen: 23
185.68.130.0/24 maxlen: 24
185.68.131.0/24 maxlen: 24
185.207.160.0/23 maxlen: 23
185.207.160.0/24 maxlen: 24
185.207.161.0/24 maxlen: 24
185.207.162.0/23 maxlen: 23
185.207.162.0/24 maxlen: 24
185.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:82:35:e1:c7:1f:da:2c:ac:96:08:d2:39:39:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Apr 28 13:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805199d8116cf2ec0cab31397be7dafba55508d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:99:db:6d:80:d8:ea:67:7c:d4:7f:49:47:
65:3c:a9:d6:19:b5:54:92:1c:29:1d:2a:8a:b6:d0:
54:d2:6f:bf:2e:11:fb:ae:89:95:7f:dc:05:c7:75:
0a:0b:eb:82:40:29:c6:44:f0:38:a2:64:d6:e7:9a:
84:16:10:e4:12:4b:38:a0:a8:63:e4:15:5e:b2:98:
62:c4:b4:dc:6e:89:16:20:5d:e8:47:ec:a3:6b:4d:
15:c0:8d:83:44:3a:20:00:d9:8f:88:0b:3f:89:49:
41:cd:07:82:b2:75:ef:38:c6:12:a9:4a:0e:c0:66:
af:a4:5e:e5:e9:83:17:17:bd:1a:be:6f:73:05:4f:
d8:a2:dd:35:8f:36:2d:0e:79:12:bd:56:e7:8f:79:
44:81:20:38:69:58:f0:b6:30:21:05:da:58:14:4b:
f1:85:a6:b7:e4:59:e0:ec:72:b1:48:3b:e7:5d:ac:
6c:34:e2:7b:fc:26:48:68:27:13:cf:eb:4a:e5:9b:
43:9d:50:81:e9:b4:70:ff:81:43:ad:96:53:05:54:
33:9e:64:24:15:cd:7c:d4:ca:62:56:67:7f:fe:38:
5e:63:bc:b9:46:e2:ba:88:09:7f:41:21:e5:bb:0c:
2c:b1:d6:f1:aa:a2:77:8d:45:ca:88:d5:37:2e:ae:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:99:D8:11:6C:F2:EC:0C:AB:31:39:7B:E7:DA:FB:A5:55:08:D2
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.124.0/24
185.68.128.0/22
185.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
50:0d:c8:76:b2:38:ff:e6:2d:d6:2a:64:23:61:87:8f:f5:3e:
1a:b7:01:57:65:3a:6c:1f:ce:e2:4a:83:aa:68:2d:f1:9c:b5:
5f:b3:f1:68:35:d1:31:82:fb:66:b2:85:5f:91:71:3a:32:4b:
f2:f0:73:0f:af:d2:b6:8a:32:b9:5f:0e:dd:3c:b9:99:e2:43:
16:27:d9:fa:7f:63:5a:cd:98:5a:a3:08:78:b2:3c:f7:e7:75:
93:30:67:9e:ea:d0:01:65:f2:12:31:74:69:0e:c0:f8:1c:e5:
a9:51:3f:36:b8:2d:23:25:4f:75:8f:68:ed:60:50:bf:d4:ef:
38:69:f8:61:a7:1f:9d:06:11:d8:11:0c:ab:46:ea:4a:b1:97:
15:1d:dd:ae:5b:b6:b5:3d:24:5b:57:66:17:a0:db:69:a5:26:
46:95:c0:f8:14:d9:84:7a:2c:27:dd:67:87:d0:1c:c2:56:1c:
03:6a:eb:3b:cb:55:29:52:68:14:e5:87:b2:c1:ea:8d:9f:bf:
be:5c:76:a3:9b:f9:e9:62:88:29:3b:91:1c:7e:f7:13:f0:51:
32:8c:41:d4:e1:dd:24:ad:f9:c1:e9:65:ac:4f:3a:60:b2:5a:
90:10:a0:18:36:7b:28:9d:45:48:95:2f:31:46:1c:99:26:8a:
eb:ab:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:54 2025 by rpki-client