Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GB4vtqTXSwKp7zeWzOQndrqFgF8.roa
File: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (raw, json)
Hash identifier: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=
Subject key identifier: 18:1E:2F:B6:A4:D7:4B:02:A9:EF:37:96:CC:E4:27:76:BA:85:80:5F
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0195DCAEFB64E10EF187888AAC6A28BF64D1
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GB4vtqTXSwKp7zeWzOQndrqFgF8.roa
Signing time: Fri 28 Mar 2025 12:16:49 +0000
ROA not before: Fri 28 Mar 2025 12:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.152.32.0/24 maxlen: 24
45.152.33.0/24 maxlen: 24
2a10:5a81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:ae:fb:64:e1:0e:f1:87:88:8a:ac:6a:28:bf:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Mar 28 12:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181e2fb6a4d74b02a9ef3796cce42776ba85805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:c9:3f:18:72:db:e1:be:ff:a2:b9:f4:1c:
b4:15:e8:bc:dd:74:e6:0f:c5:88:a3:11:77:5c:f5:
85:38:fb:8f:4f:b3:5c:e5:af:dd:6e:10:38:4f:42:
8f:63:c2:d9:ce:b3:09:34:18:c4:b6:d6:58:f7:49:
e3:70:10:a3:d0:a3:4f:1c:40:6f:37:d5:2d:e5:56:
6f:3b:8c:c5:42:67:72:e6:80:24:83:c5:fe:35:07:
23:3b:6b:55:79:ee:94:01:cd:e3:51:5f:a7:c4:eb:
26:ce:ad:27:fd:97:d0:d7:1b:71:bc:6f:0a:6e:2a:
3e:a0:7f:1d:c1:89:fb:de:84:7b:87:16:72:37:48:
7c:5d:e0:f1:04:a5:b4:9e:ed:e9:e8:12:24:36:06:
99:95:5f:34:bc:a1:68:cd:f1:a0:6a:0d:65:7d:fc:
95:0d:10:6c:6c:4a:7e:91:16:0d:87:74:b9:34:ac:
e8:67:27:4c:56:f0:1e:8a:5b:da:60:bf:6b:a5:74:
ab:08:24:fa:6c:7b:40:09:1c:47:9c:75:0c:3b:ee:
22:6a:54:a8:4e:58:ec:fb:66:7f:19:dd:23:27:b0:
53:03:f9:94:25:b8:be:fa:53:f3:b2:45:65:ac:a0:
ad:a3:0a:78:c7:af:63:c9:b7:e2:a6:97:4a:3c:36:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:2F:B6:A4:D7:4B:02:A9:EF:37:96:CC:E4:27:76:BA:85:80:5F
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/GB4vtqTXSwKp7zeWzOQndrqFgF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.32.0/23
IPv6:
2a10:5a81::/32
Signature Algorithm: sha256WithRSAEncryption
8b:0f:bf:39:9a:ff:26:a9:79:46:8c:e9:77:84:7c:5b:2a:b8:
ef:53:46:6c:4f:f6:bf:0c:0a:b7:20:ba:e7:c7:a0:5c:be:8e:
2e:c9:f6:9c:19:de:4d:91:24:07:84:a0:9c:38:5c:28:03:f2:
5c:aa:51:0c:87:9d:7d:c3:cd:4d:2c:c3:54:f4:27:60:e0:87:
4d:68:0c:ee:eb:91:d3:4c:0e:4d:af:97:b3:37:bf:16:f3:a5:
5b:e3:4e:16:05:8d:50:e9:e5:5c:a4:29:ae:88:41:bc:74:65:
d0:f3:f2:96:02:10:d3:48:26:ea:77:ff:4f:de:3b:15:60:3e:
72:f3:a9:21:63:cc:26:2c:8c:d5:82:07:56:5a:4e:8e:77:8d:
2e:e5:97:1f:5a:63:ea:1f:5b:7b:c6:0f:4c:7b:45:99:3f:a8:
c6:36:15:19:5f:3c:3d:91:81:91:c5:5e:ba:0e:e2:24:1c:77:
76:59:a9:18:a1:ec:40:ec:75:4e:83:82:67:5e:5c:2a:d4:1a:
c1:3f:56:5c:bb:00:72:8d:e1:fb:4d:e4:96:a9:fa:5f:a2:69:
f9:30:7b:9a:ea:59:06:b0:47:e3:72:9b:2e:19:1c:44:bf:73:
f2:74:8f:29:82:d8:d7:6d:d8:cd:13:a7:ac:0e:b9:83:da:da:
d4:73:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:22 2025 by rpki-client