Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/gGSxPt2Sh4M8i7J8HJfnceMCe00.roa
File: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (raw, json)
Hash identifier: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=
Subject key identifier: 80:64:B1:3E:DD:92:87:83:3C:8B:B2:7C:1C:97:E7:71:E3:02:7B:4D
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4C7009119B6E07918AD4AE53AB94
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/gGSxPt2Sh4M8i7J8HJfnceMCe00.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47518
IP address blocks: 83.133.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4c:70:09:11:9b:6e:07:91:8a:d4:ae:53:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8064b13edd9287833c8bb27c1c97e771e3027b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:c7:a0:28:af:22:11:32:6a:93:30:cd:c2:
cf:67:91:ce:bc:67:4d:db:f4:10:d1:17:40:7f:19:
74:0d:6e:68:1f:3f:ef:57:ad:9b:ee:fd:d2:b0:a0:
e4:74:23:67:b8:19:a7:9e:ac:fd:51:a0:f5:42:17:
1f:91:af:d9:d9:59:c9:d1:9e:ad:7d:b4:95:76:63:
d3:83:84:80:54:0d:57:b7:05:e7:fb:26:4e:60:b7:
4c:85:c4:2b:49:ff:05:4c:be:2d:8c:49:33:da:65:
12:66:69:8d:2d:3a:2c:43:21:c9:5a:5a:90:57:a7:
1a:de:a7:f9:96:23:bb:bb:cb:38:43:e0:02:8e:49:
fb:58:ec:39:da:e8:14:df:4b:43:e4:e8:bf:e9:ac:
f9:a4:36:8a:d4:ea:24:04:38:2e:a8:9e:bd:b0:01:
be:f2:49:8f:a0:cf:fa:77:6c:2a:30:ff:39:30:25:
36:75:b8:e6:40:30:3c:bc:a2:00:ce:e3:c8:7c:58:
d9:69:f8:e2:7f:a1:90:d7:de:57:ff:95:97:5c:28:
f5:26:29:07:ab:88:5b:62:e9:ea:d8:cd:6d:45:c7:
44:99:69:b5:c4:39:21:de:13:70:f1:3b:3a:82:d4:
0b:45:91:c6:82:44:8e:4b:d7:03:d3:fc:92:e0:f9:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:B1:3E:DD:92:87:83:3C:8B:B2:7C:1C:97:E7:71:E3:02:7B:4D
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/gGSxPt2Sh4M8i7J8HJfnceMCe00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.133.69.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ed:83:1f:04:85:4d:19:b1:cb:e5:d1:a1:4b:58:dc:14:ca:
d3:37:14:19:81:f0:82:cb:53:fc:b5:36:cc:b7:2a:18:5d:6b:
86:db:33:24:f7:9d:e2:7e:14:5b:76:b2:58:3f:77:01:86:d9:
7b:f9:d4:b8:61:da:d8:76:f8:a2:fd:7d:a9:c7:d8:cf:c2:b0:
ad:4c:56:6a:bb:02:34:2b:f1:7a:d7:4e:38:61:9a:c8:31:4d:
f7:f7:e6:cd:d1:1b:1b:65:a0:be:a7:5e:c0:91:27:f0:a6:b5:
f4:a3:3b:1f:93:10:49:73:83:bd:59:cc:6d:04:c0:52:05:53:
6b:65:b6:3a:31:65:33:43:d4:7c:8c:76:5c:d3:5c:a0:d8:7c:
68:39:2c:7d:5c:4e:a4:98:d7:5f:d9:a1:ba:73:ce:29:38:2a:
f4:43:7a:0f:80:07:74:24:44:b6:8d:71:e9:8f:ce:e9:c2:aa:
07:01:84:4a:9c:a3:f3:d6:ea:0d:ad:77:50:e6:49:80:4b:8b:
0f:e0:d1:66:64:0b:58:cf:c9:fd:fb:04:16:fd:07:11:de:b8:
28:a0:2b:d4:a7:28:8e:06:34:cc:82:62:28:cb:49:3c:2b:b0:
0b:af:8d:5c:f8:c2:bb:48:b0:02:39:ee:87:b1:53:2a:26:cf:
43:8b:c0:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kxwCRGbbgeRitSuU6uUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDY0YjEzZWRkOTI4NzgzM2M4YmIyN2MxYzk3ZTc3MWUzMDI3YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSDHoCivIhEyapMwzcLPZ5HOvGdN
2/QQ0RdAfxl0DW5oHz/vV62b7v3SsKDkdCNnuBmnnqz9UaD1Qhcfka/Z2VnJ0Z6t
fbSVdmPTg4SAVA1XtwXn+yZOYLdMhcQrSf8FTL4tjEkz2mUSZmmNLTosQyHJWlqQ
V6ca3qf5liO7u8s4Q+ACjkn7WOw52ugU30tD5Oi/6az5pDaK1OokBDguqJ69sAG+
8kmPoM/6d2wqMP85MCU2dbjmQDA8vKIAzuPIfFjZafjif6GQ195X/5WXXCj1JikH
q4hbYunq2M1tRcdEmWm1xDkh3hNw8Ts6gtQLRZHGgkSOS9cD0/yS4PmzpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBksT7dkoeDPIuyfByX53HjAntNMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvZ0dTeFB0MlNoNE04aTdKOEhKZm5jZU1DZTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4VFMA0G
CSqGSIb3DQEBCwUAA4IBAQCR7YMfBIVNGbHL5dGhS1jcFMrTNxQZgfCCy1P8tTbM
tyoYXWuG2zMk953ifhRbdrJYP3cBhtl7+dS4YdrYdvii/X2px9jPwrCtTFZquwI0
K/F61044YZrIMU339+bN0RsbZaC+p17AkSfwprX0ozsfkxBJc4O9WcxtBMBSBVNr
ZbY6MWUzQ9R8jHZc01yg2HxoOSx9XE6kmNdf2aG6c84pOCr0Q3oPgAd0JES2jXHp
j87pwqoHAYRKnKPz1uoNrXdQ5kmAS4sP4NFmZAtYz8n9+wQW/QcR3rgooCvUpyiO
BjTMgmIoy0k8K7ALr41c+MK7SLACOe6HsVMqJs9Di8BD
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:57:49 2025 by rpki-client