Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/GYTVmNtXsClBN2_m1uRr3vF4R2k.roa
File: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (raw, json)
Hash identifier: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=
Subject key identifier: 19:84:D5:98:DB:57:B0:29:41:37:6F:E6:D6:E4:6B:DE:F1:78:47:69
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019426D9CEE49651C5E7278CECC1AF20B00F
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/GYTVmNtXsClBN2_m1uRr3vF4R2k.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 91.220.122.0/24 maxlen: 24
185.99.176.0/22 maxlen: 22
185.241.220.0/22 maxlen: 32
2a00:8e80::/29 maxlen: 29
2a0c:b180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:e4:96:51:c5:e7:27:8c:ec:c1:af:20:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1984d598db57b02941376fe6d6e46bdef1784769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:b9:22:40:57:35:74:fc:3b:66:0e:99:cd:
d2:99:52:be:0e:7f:7e:94:46:5d:80:9c:8c:f7:ca:
97:f5:33:5e:08:4b:35:70:5c:00:25:95:f4:98:83:
db:54:a5:fe:c7:d0:16:ff:d0:be:b5:45:7f:f9:53:
49:90:0d:32:92:f5:b2:06:85:d0:d4:8e:2f:ab:68:
f0:9a:be:c2:9b:1e:6d:1a:c4:83:ad:82:75:e0:c7:
19:74:16:dc:f2:68:d3:ea:5f:23:bb:83:ba:38:ac:
3a:e0:0b:a9:68:f8:af:25:aa:b0:17:08:d9:6e:12:
26:93:d8:ec:d2:74:9a:76:44:63:e7:ad:47:99:26:
5a:17:7f:79:a9:46:3c:7c:e8:9d:4b:40:ff:49:16:
cc:cd:eb:38:7b:ee:b3:dc:d1:dc:cf:b8:d4:86:fc:
de:38:3f:04:18:2f:d0:dc:7f:5b:22:48:3d:c8:2d:
61:8e:43:37:27:84:ce:ea:cb:d0:bf:e6:21:84:ce:
3d:40:f8:4c:46:48:c1:e5:cf:c1:06:15:2e:ad:78:
65:bb:d0:e1:04:7e:1c:ac:31:0b:fb:e1:ea:ce:f7:
2f:fb:28:7b:f7:4f:82:91:88:64:79:fb:2c:ff:cb:
83:b8:55:ed:4c:00:7f:bb:c1:03:22:ce:a2:7c:53:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:D5:98:DB:57:B0:29:41:37:6F:E6:D6:E4:6B:DE:F1:78:47:69
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/GYTVmNtXsClBN2_m1uRr3vF4R2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.122.0/24
185.99.176.0/22
185.241.220.0/22
IPv6:
2a00:8e80::/29
2a0c:b180::/29
Signature Algorithm: sha256WithRSAEncryption
30:b6:1f:d9:20:0f:b0:69:cc:d8:5e:5d:e8:7f:b7:61:51:b5:
9b:6c:28:ef:f2:73:f6:da:b2:3a:22:94:88:11:44:c1:ba:4c:
ca:eb:d6:ce:44:b4:b4:56:e0:2b:1a:a9:c2:8c:8b:9e:76:94:
6e:74:3f:7b:09:94:26:22:3f:08:8f:9b:fd:90:e2:00:f1:a4:
98:28:7f:fc:53:65:2f:f0:9f:39:7f:c5:e5:89:90:89:db:3a:
2c:7b:3c:ae:56:4f:51:17:b8:f8:47:0f:f3:6f:9a:bd:ad:a0:
50:26:10:0f:de:55:16:86:6d:f1:e6:6d:85:65:39:db:0e:9f:
6f:fe:40:99:2f:09:6f:a9:12:09:9b:2f:44:a6:b6:71:b5:6a:
20:f6:9c:cf:f4:27:17:0f:65:b1:5c:73:a5:f3:a2:0f:b8:84:
5f:02:d8:97:1b:0a:93:83:05:6c:8f:c1:98:cb:d5:e9:d4:b2:
65:49:3c:ff:7f:53:73:96:54:d4:17:57:7a:02:54:14:ea:a9:
9c:8e:d3:c6:3d:eb:1f:3a:d6:c8:df:32:f0:eb:29:68:b8:cc:
59:46:9f:ea:e6:38:f1:20:c7:3a:89:48:53:f2:85:b0:b7:1b:
85:b2:6b:07:57:bd:0d:ba:9a:d9:18:f4:cd:19:55:83:e2:eb:
26:fb:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:38:02 2025 by rpki-client