Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa
File: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (raw, json)
Hash identifier: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=
Subject key identifier: 1A:69:4F:AA:66:20:A6:0E:B5:A0:2A:ED:4C:6F:51:CE:68:13:65:14
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0195B25BB6D026F1C44F561DA4CFE8662DA2
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa
Signing time: Thu 20 Mar 2025 07:01:49 +0000
ROA not before: Thu 20 Mar 2025 07:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 45.67.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:5b:b6:d0:26:f1:c4:4f:56:1d:a4:cf:e8:66:2d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Mar 20 07:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a694faa6620a60eb5a02aed4c6f51ce68136514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:7d:69:1e:bc:c0:b3:5c:ed:ac:ea:3a:86:
42:1a:3a:d9:4f:b9:7b:5f:00:0d:b1:4f:77:3b:b4:
6e:fd:6b:49:95:18:b8:36:5c:a0:87:b0:8a:bc:bc:
25:85:88:36:2a:58:76:bd:01:40:f2:33:0a:c0:fd:
ec:a3:48:0c:fe:1b:e3:6a:a1:18:13:8e:35:d3:c0:
f2:82:4a:2e:d7:86:3a:38:cf:8c:80:9b:ba:4d:32:
76:23:32:78:74:c5:89:99:e3:2f:42:e6:61:e7:af:
bb:72:73:3c:4b:91:5c:bb:39:ce:73:4a:83:89:58:
ea:d8:2c:21:b4:25:1b:3f:09:0c:41:61:93:3b:6e:
0c:10:93:68:0c:29:38:a3:28:9b:c9:27:7a:aa:21:
b3:89:3b:10:86:42:d7:4e:3f:76:84:d0:2b:2c:ed:
38:c3:fb:9a:7c:2b:46:b4:cc:cf:71:f8:c3:c4:52:
1a:f5:c3:49:1a:9c:c8:03:85:68:b9:2a:f6:75:1b:
52:69:d7:6d:d9:1a:45:3a:e0:a5:63:0e:06:50:b6:
60:b6:f2:fa:87:7c:cc:00:66:af:90:b1:d0:c9:a4:
01:fe:59:cb:b7:c0:79:2d:20:3f:c7:01:50:22:08:
e8:7a:74:b0:d8:d3:cb:90:0e:79:81:be:99:d2:43:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:4F:AA:66:20:A6:0E:B5:A0:2A:ED:4C:6F:51:CE:68:13:65:14
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.37.0/24
Signature Algorithm: sha256WithRSAEncryption
27:33:98:ab:30:1c:b9:ff:88:27:80:11:50:59:1c:77:0f:1d:
83:c4:33:23:8c:43:fb:8a:c0:85:1c:d6:01:60:d4:d4:93:d7:
be:de:79:61:b4:36:15:82:76:d8:33:a7:78:6b:af:03:71:de:
3e:29:de:de:7a:0d:ed:7a:0a:f3:ad:37:86:b5:20:a9:28:69:
4d:6a:d9:cd:98:98:c4:de:1d:98:58:12:ff:2c:01:f7:68:1f:
bd:3f:99:ee:c8:1b:e1:89:33:cf:44:16:e1:21:0c:4c:e7:cb:
e8:42:2d:02:89:73:04:69:4f:48:1d:48:d7:8b:8d:1f:ec:71:
c1:9d:82:c0:48:88:05:bb:4d:1d:02:49:d7:09:cb:72:ed:1d:
33:10:5c:8e:c3:29:a5:ed:bc:81:f5:b8:4b:2f:3a:df:91:c3:
10:48:31:8f:a7:54:36:ca:11:4d:52:1b:16:c2:42:a7:bc:76:
83:8b:43:0b:43:2b:c0:ad:a5:e8:d4:24:a2:6e:54:c1:8a:ab:
b3:14:a7:fa:9d:c7:3c:da:cf:59:d8:af:ee:a4:b5:5f:33:d7:
00:48:d9:69:35:94:ae:b5:49:24:b5:75:90:05:2e:07:0d:b4:
01:66:bc:18:75:52:5c:f9:43:2c:48:6f:31:e0:f2:da:a6:3b:
2a:79:7e:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWyW7bQJvHET1YdpM/oZi2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMzIwMDcwMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTY5NGZhYTY2MjBhNjBlYjVhMDJhZWQ0YzZmNTFjZTY4MTM2NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNt9aR68wLNc7azqOoZCGjrZT7l7
XwANsU93O7Ru/WtJlRi4Nlygh7CKvLwlhYg2Klh2vQFA8jMKwP3so0gM/hvjaqEY
E44108Dygkou14Y6OM+MgJu6TTJ2IzJ4dMWJmeMvQuZh56+7cnM8S5FcuznOc0qD
iVjq2CwhtCUbPwkMQWGTO24MEJNoDCk4oyibySd6qiGziTsQhkLXTj92hNArLO04
w/uafCtGtMzPcfjDxFIa9cNJGpzIA4VouSr2dRtSaddt2RpFOuClYw4GULZgtvL6
h3zMAGavkLHQyaQB/lnLt8B5LSA/xwFQIgjoenSw2NPLkA55gb6Z0kNp6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBppT6pmIKYOtaAq7UxvUc5oE2UUMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvR21sUHFtWWdwZzYxb0NydFRHOVJ6bWdUWlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMlMA0G
CSqGSIb3DQEBCwUAA4IBAQAnM5irMBy5/4gngBFQWRx3Dx2DxDMjjEP7isCFHNYB
YNTUk9e+3nlhtDYVgnbYM6d4a68Dcd4+Kd7eeg3tegrzrTeGtSCpKGlNatnNmJjE
3h2YWBL/LAH3aB+9P5nuyBvhiTPPRBbhIQxM58voQi0CiXMEaU9IHUjXi40f7HHB
nYLASIgFu00dAknXCcty7R0zEFyOwyml7byB9bhLLzrfkcMQSDGPp1Q2yhFNUhsW
wkKnvHaDi0MLQyvAraXo1CSiblTBiquzFKf6ncc82s9Z2K/upLVfM9cASNlpNZSu
tUkktXWQBS4HDbQBZrwYdVJc+UMsSG8x4PLapjsqeX7U
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:30 2025 by rpki-client