Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GGVh53_h3jEFViTMOCBSqrjiCgY.roa
File: GGVh53_h3jEFViTMOCBSqrjiCgY.roa (raw, json)
Hash identifier: mKO/RnC0rsHPAvaD28Y6R98PCJ8/+12jK+XoppNJFzQ=
Subject key identifier: 18:65:61:E7:7F:E1:DE:31:05:56:24:CC:38:20:52:AA:B8:E2:0A:06
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA72EB38C7D431C9B8FF6B742B7623
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GGVh53_h3jEFViTMOCBSqrjiCgY.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7489
IP address blocks: 2a0c:b642:1a07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:eb:38:c7:d4:31:c9:b8:ff:6b:74:2b:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=186561e77fe1de31055624cc382052aab8e20a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:d6:04:ad:4d:15:68:6c:a3:19:03:8d:3b:
f1:3e:08:d5:97:4d:05:73:cf:78:53:d2:5a:5b:e9:
36:70:8b:af:ba:2d:02:d0:5f:80:b3:ca:4e:28:86:
4b:f9:21:79:33:5b:62:2d:cb:8b:a9:fc:e7:ca:12:
14:1e:57:53:29:68:3d:8a:9f:85:a5:64:c1:46:a1:
bc:85:5f:be:ee:63:44:e7:c0:78:44:d2:19:c2:23:
e1:9d:42:f1:de:ad:de:f5:f1:1b:3a:85:0d:47:2a:
6e:44:6f:b9:72:9e:00:1c:3f:7d:3c:bd:aa:19:c9:
fd:c5:a8:3e:01:20:23:13:bb:7c:55:64:a2:34:ac:
a6:d6:9e:93:32:d3:ba:a2:a5:ab:92:9d:5b:69:90:
54:66:a4:f4:f1:c5:9f:cf:21:71:5d:19:48:8e:e6:
da:b9:32:e1:61:c5:ea:c5:c7:27:db:3f:78:bc:2b:
76:7a:45:d7:aa:d3:4e:5e:f3:0f:fb:f6:be:18:6d:
ec:a0:03:92:32:1c:7f:2c:19:49:86:5f:73:96:12:
c0:9b:85:fb:ed:29:31:e1:56:c2:df:a4:a9:7c:77:
4f:96:56:1f:77:b1:f2:6c:05:41:68:d9:d2:4e:65:
9a:ce:fb:ac:37:c1:29:35:d7:a8:41:cb:1b:c0:b8:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:61:E7:7F:E1:DE:31:05:56:24:CC:38:20:52:AA:B8:E2:0A:06
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GGVh53_h3jEFViTMOCBSqrjiCgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a07::/48
Signature Algorithm: sha256WithRSAEncryption
4b:58:87:49:f3:91:b6:cf:61:a7:a5:f0:56:fd:1c:18:12:03:
18:6b:fb:72:8a:ed:70:6d:11:70:17:8e:3f:11:0d:df:f0:20:
f5:21:b7:d5:fb:8a:d4:82:42:bb:0d:5e:07:a6:55:7d:dc:e0:
ee:57:f0:49:01:d8:97:ed:e3:ce:b6:23:71:12:3d:ee:02:57:
83:2f:a0:2b:84:5a:43:be:7f:94:b9:46:ab:f1:32:e8:8e:93:
e5:98:81:40:13:ab:d5:45:60:fe:99:c5:a9:62:c0:60:53:c5:
de:a8:fa:46:a6:b8:e4:f3:31:a9:43:1f:f4:11:40:78:f6:eb:
aa:8b:25:e4:55:c7:d7:b7:78:ee:a5:83:5a:af:90:34:10:8d:
84:2b:90:36:d9:eb:ac:ac:b1:69:6c:ac:54:f5:5a:65:57:68:
39:4d:68:12:22:ea:e3:ab:fd:5c:84:fb:b0:44:64:94:63:c0:
7c:3f:ae:29:fc:e5:c5:ce:c1:a0:c4:ad:7f:82:c4:5e:34:65:
2e:6b:94:b4:33:4f:87:a2:8e:5f:7f:12:54:de:e2:b8:6e:d9:
8e:cb:57:c4:25:14:8e:27:bb:dd:ef:6c:42:05:56:45:f1:2c:
5b:fd:e3:70:b5:22:84:ae:a0:9c:f2:9a:8c:57:ea:7f:65:46:
77:b5:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:08:51 2025 by rpki-client