Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GP1Cesa5LS14FJBqDWsMjIckzAI.roa
File: GP1Cesa5LS14FJBqDWsMjIckzAI.roa (raw, json)
Hash identifier: vc/pAYpqFI6+gWwwFh+jiqzj1QLBBkB1WyCakRdnhf8=
Subject key identifier: 18:FD:42:7A:C6:B9:2D:2D:78:14:90:6A:0D:6B:0C:8C:87:24:CC:02
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197E5E5236FF5A9ABFC1EDE8D99C9FB2055
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GP1Cesa5LS14FJBqDWsMjIckzAI.roa
Signing time: Mon 07 Jul 2025 17:18:08 +0000
ROA not before: Mon 07 Jul 2025 17:18:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 178.239.114.0/24 maxlen: 24
178.239.121.0/24 maxlen: 24
178.239.122.0/24 maxlen: 24
178.239.123.0/24 maxlen: 24
178.239.124.0/24 maxlen: 24
178.239.125.0/24 maxlen: 24
178.239.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:e5:23:6f:f5:a9:ab:fc:1e:de:8d:99:c9:fb:20:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 7 17:18:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18fd427ac6b92d2d7814906a0d6b0c8c8724cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:d0:73:92:6a:04:15:7d:f0:f5:b0:06:22:
1e:55:b3:05:22:68:19:35:2c:56:c0:2e:9f:07:19:
48:f1:ce:ab:e7:36:4b:11:40:fc:dd:8b:5c:6a:85:
5f:7b:4e:17:31:c1:31:3c:5b:0f:a6:ed:be:df:8f:
7d:99:75:a0:e6:93:6d:96:33:94:82:b5:e3:e0:b7:
e3:83:ad:8a:35:32:d8:96:57:2f:91:ee:95:57:f8:
d0:60:b8:9d:c7:cc:22:4c:30:41:9f:11:f3:b0:c3:
92:2a:fa:86:9a:60:bd:9d:0a:7d:f8:9d:cd:9c:13:
ad:b4:27:63:a9:33:c4:a9:4c:fb:fb:60:2d:70:a6:
6d:70:d4:85:46:6f:87:c8:90:63:b8:05:8c:e7:2c:
7e:3d:83:dd:09:ea:42:25:ca:37:b3:06:25:02:74:
bc:77:68:ae:67:45:f5:78:6f:df:5b:4f:47:74:0e:
ad:09:9f:6a:44:58:16:23:a6:1b:1d:ad:85:f4:58:
2c:09:bb:08:db:cd:4c:fc:ed:96:77:a6:61:b0:7c:
10:26:bb:5a:da:90:24:91:7d:69:5e:0d:e0:0f:15:
24:d8:59:f3:a3:2d:c2:7b:ec:15:e7:1f:db:56:7f:
26:94:8e:76:5c:13:5d:db:b8:a7:c5:62:37:42:6c:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:42:7A:C6:B9:2D:2D:78:14:90:6A:0D:6B:0C:8C:87:24:CC:02
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GP1Cesa5LS14FJBqDWsMjIckzAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.114.0/24
178.239.121.0-178.239.126.255
Signature Algorithm: sha256WithRSAEncryption
33:fe:7f:a1:56:8e:79:98:bf:d7:87:14:16:11:1f:c0:f6:7d:
c9:2e:ca:2f:c4:a4:01:ae:11:c4:66:2a:6c:aa:5c:4e:76:ab:
d7:7c:80:20:1c:60:fe:b8:f8:d8:fb:93:7b:94:da:e5:3b:bd:
e0:34:92:ef:15:31:31:f8:39:76:df:6b:6e:ed:7c:c0:5a:1b:
a8:d4:a9:4d:ba:a2:92:be:b4:83:66:81:d5:d0:e5:e7:93:4c:
d1:90:e0:5b:49:96:d0:28:1c:06:dc:68:d9:87:93:30:0c:fd:
88:b0:f4:8a:54:af:85:79:4a:12:f8:a6:77:9a:d1:e9:33:1e:
47:20:1e:a2:e2:ad:05:83:77:dc:78:0c:ec:87:9f:58:de:de:
44:74:3b:cd:52:86:d2:c5:34:84:dd:fe:76:b5:59:d4:6e:5b:
06:60:4c:63:db:58:01:f2:75:6c:a7:9a:da:41:a9:aa:81:5c:
b7:cc:ce:56:f7:7a:6c:91:52:a3:2d:99:bf:13:71:f2:24:82:
3c:4a:04:94:05:a9:27:df:46:60:71:cc:af:b5:6f:09:fe:e1:
f8:a0:3b:9e:b1:74:e1:0d:4a:97:fb:15:3f:84:62:f2:82:35:
09:0c:84:35:92:fb:99:cd:2d:35:42:6b:d8:0e:0d:5a:c5:6c:
b7:c1:86:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 19:37:18 2025 by rpki-client