Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa
File: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (raw, json)
Hash identifier: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=
Subject key identifier: 19:DB:BC:1E:F4:74:19:D9:CB:13:2E:EF:E0:3D:D8:ED:FB:B5:C2:12
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 01942067D56DF0A349EEEFEC726191D29629
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:6d:f0:a3:49:ee:ef:ec:72:61:91:d2:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19dbbc1ef47419d9cb132eefe03dd8edfbb5c212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:c2:d1:80:f1:7c:a5:00:cc:41:5f:1b:fa:
a1:bb:24:9d:01:80:4f:fe:3d:ea:4b:40:44:48:1d:
e4:92:48:eb:89:e6:f4:de:94:cd:b4:6f:41:66:d2:
24:b5:53:53:c4:89:d8:88:38:9b:8d:34:9e:36:5b:
42:37:d7:97:72:d2:66:91:4c:86:20:0c:d7:fc:a8:
b7:79:0b:dc:d2:28:4e:0b:70:4c:a7:41:1c:58:1c:
20:e8:69:d3:ea:42:53:1b:23:0d:fa:ad:7d:da:49:
38:ac:00:92:8e:0e:e3:4a:95:a5:07:8f:66:d6:21:
6b:ba:2e:bb:4f:f5:e9:22:0f:06:37:16:3f:01:32:
62:57:f9:55:d8:c2:46:9c:c4:7b:92:9d:50:9a:15:
93:a6:63:dc:80:57:70:fb:11:a4:82:82:98:c5:48:
c5:74:91:42:0b:f3:4f:b6:bd:88:85:31:2a:7d:f6:
f7:b5:16:77:73:fc:25:76:78:2a:71:0b:95:82:e6:
f6:1b:4d:aa:fb:55:5e:43:ee:67:46:6e:a4:91:93:
ef:d5:d2:fa:b1:9e:ac:c1:d4:dd:8b:12:60:cd:5e:
4f:79:73:c8:1e:b2:2c:30:fa:e6:6d:77:7e:9b:97:
b6:5e:38:6f:b4:75:46:2e:cb:ea:ff:89:30:cd:e4:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:BC:1E:F4:74:19:D9:CB:13:2E:EF:E0:3D:D8:ED:FB:B5:C2:12
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2c:0d:4b:1e:7a:5e:98:74:70:8a:21:ee:df:19:d5:dd:e8:
70:36:df:2a:ee:a0:53:4c:38:b0:d7:6c:41:4c:20:73:34:18:
01:80:92:d1:7d:7b:a4:b1:60:84:19:fd:c3:9c:61:65:20:96:
ed:25:10:7e:8e:cc:d5:f1:d5:4e:8a:c8:8c:95:37:2d:cb:41:
b4:02:8e:67:87:5d:aa:a8:ae:32:70:5d:66:8c:db:16:eb:68:
37:ce:6e:2b:a5:62:ab:d0:0b:16:12:6c:d2:9b:7a:28:43:fd:
86:fe:c6:54:b2:95:df:33:57:45:7c:e7:06:cb:e1:01:c9:2a:
c1:af:24:a5:97:35:e7:39:df:a7:45:64:0d:65:a7:5c:f7:e1:
e2:99:d0:2d:3b:2b:c1:d3:8a:8d:a0:70:c3:52:a4:4e:c1:58:
6b:2a:1f:58:7b:2c:1f:ac:cd:0f:78:39:5f:cd:0c:ee:13:8b:
5a:c0:4a:53:92:85:a8:a4:67:d9:6c:4c:7e:56:23:10:7a:0f:
c7:9b:8d:b4:1b:c2:6c:47:1c:cc:b5:97:4d:af:9d:d9:2c:37:
0d:64:f3:95:a9:aa:6b:76:45:a6:97:8a:c2:51:18:fa:1c:6b:
ef:2d:fe:14:dc:dc:60:01:84:41:d5:2b:27:b2:e4:f4:4e:48:
91:74:3a:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9Vt8KNJ7u/scmGR0pYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3
OTFkYjQwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWRiYmMxZWY0NzQxOWQ5Y2IxMzJlZWZlMDNkZDhlZGZiYjVjMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q7C0YDxfKUAzEFfG/qhuySdAYBP
/j3qS0BESB3kkkjrieb03pTNtG9BZtIktVNTxInYiDibjTSeNltCN9eXctJmkUyG
IAzX/Ki3eQvc0ihOC3BMp0EcWBwg6GnT6kJTGyMN+q192kk4rACSjg7jSpWlB49m
1iFrui67T/XpIg8GNxY/ATJiV/lV2MJGnMR7kp1QmhWTpmPcgFdw+xGkgoKYxUjF
dJFCC/NPtr2IhTEqffb3tRZ3c/wldngqcQuVgub2G02q+1VeQ+5nRm6kkZPv1dL6
sZ6swdTdixJgzV5PeXPIHrIsMPrmbXd+m5e2XjhvtHVGLsvq/4kwzeSzbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnbvB70dBnZyxMu7+A92O37tcISMB8GA1UdIwQY
MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt
M2E2MTFjMDkzYTJjLzEvR2R1OEh2UjBHZG5MRXk3djREM1k3ZnUxd2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj
LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm+duMA0G
CSqGSIb3DQEBCwUAA4IBAQArLA1LHnpemHRwiiHu3xnV3ehwNt8q7qBTTDiw12xB
TCBzNBgBgJLRfXuksWCEGf3DnGFlIJbtJRB+jszV8dVOisiMlTcty0G0Ao5nh12q
qK4ycF1mjNsW62g3zm4rpWKr0AsWEmzSm3ooQ/2G/sZUspXfM1dFfOcGy+EBySrB
rySllzXnOd+nRWQNZadc9+HimdAtOyvB04qNoHDDUqROwVhrKh9YeywfrM0PeDlf
zQzuE4tawEpTkoWopGfZbEx+ViMQeg/Hm420G8JsRxzMtZdNr53ZLDcNZPOVqapr
dkWml4rCURj6HGvvLf4U3NxgAYRB1SsnsuT0TkiRdDpj
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:19 2025 by rpki-client