Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/gZMQxr61w0P4Si-B6lBsVj_b8vM.roa
File: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (raw, json)
Hash identifier: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=
Subject key identifier: 81:93:10:C6:BE:B5:C3:43:F8:4A:2F:81:EA:50:6C:56:3F:DB:F2:F3
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 0194221FF757E8C1C833B21E9EEF5E0C5B5D
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/gZMQxr61w0P4Si-B6lBsVj_b8vM.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49911
IP address blocks: 185.76.48.0/22 maxlen: 22
185.76.48.0/24 maxlen: 24
185.76.49.0/24 maxlen: 24
185.76.51.0/24 maxlen: 24
2a13:7200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f7:57:e8:c1:c8:33:b2:1e:9e:ef:5e:0c:5b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819310c6beb5c343f84a2f81ea506c563fdbf2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:84:6b:8e:5a:8a:1c:cb:02:13:39:e7:e1:
66:8d:c5:1f:5d:47:8e:05:b4:da:48:a0:f3:fd:9c:
a4:fd:fb:5c:d9:db:fa:d9:69:31:7f:d8:5d:93:fa:
bc:1c:75:2b:04:2f:a3:de:cf:c3:d8:35:96:dd:9d:
13:9d:16:76:bd:dd:c0:5c:e6:ea:fa:82:f5:79:43:
6e:09:5f:96:b2:67:89:79:21:68:31:a8:06:a1:a9:
88:9b:5e:2d:f8:77:bf:77:9c:ec:04:34:95:04:f1:
f9:be:1d:c8:10:ae:0c:13:1a:af:74:2b:94:7a:25:
90:fa:e7:71:48:d7:46:70:32:cf:e0:df:a0:a2:3f:
78:db:2f:89:6e:d2:3e:6f:1d:3e:1b:2f:60:61:20:
ef:8b:3b:de:65:ee:cd:08:33:20:0c:b4:41:56:3d:
ca:c5:24:d0:f1:0b:ad:48:b9:91:87:29:35:b6:25:
ce:ba:fa:5f:85:0b:35:bb:f6:8b:f6:f7:c4:88:97:
0d:b2:c3:16:68:d8:33:37:38:45:a1:52:9a:b1:67:
7e:7f:9c:58:ae:67:ea:c6:c9:84:9b:c2:d1:21:69:
8c:7a:54:b6:ad:c4:2a:f3:08:ed:71:34:8d:99:6f:
ac:e0:49:a0:25:34:e4:85:5d:30:8a:15:5c:1c:0f:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:93:10:C6:BE:B5:C3:43:F8:4A:2F:81:EA:50:6C:56:3F:DB:F2:F3
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/gZMQxr61w0P4Si-B6lBsVj_b8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.48.0/22
IPv6:
2a13:7200::/29
Signature Algorithm: sha256WithRSAEncryption
ae:42:e7:00:e7:44:c1:1a:57:cf:a9:9a:3f:44:b1:6d:d2:e1:
e5:50:9b:2b:32:20:b9:d9:e0:94:a3:66:5c:94:aa:e7:a8:bc:
d9:fd:2d:1b:29:5a:66:24:fe:b5:55:42:2b:9c:5d:71:c7:17:
93:aa:b5:02:4e:44:e7:46:dd:3a:94:13:c0:48:9b:ec:93:98:
b0:92:72:d4:42:d4:0d:52:5b:5c:dc:a0:1e:de:06:c4:92:73:
a4:f3:85:2f:a8:c7:5b:39:db:78:8e:3d:41:06:d5:cd:a8:c9:
f0:b1:ad:3c:25:a5:79:d7:2e:48:38:46:b2:31:9b:63:33:e9:
72:56:26:95:1a:e7:cc:ec:5d:76:83:97:05:b8:84:2a:03:59:
05:1c:c7:b3:7e:34:2b:a2:c8:db:95:f3:42:00:72:b9:ca:2f:
28:d1:65:b6:92:a6:02:ec:a0:28:14:86:65:fe:e7:e5:71:f9:
a6:59:e2:c2:d6:56:9a:24:02:30:b6:41:32:9b:c8:b4:a9:b5:
e4:0e:ec:83:55:6d:9f:c8:9b:50:1d:63:e9:2d:17:d3:f3:8f:
44:d6:27:96:8d:61:a3:04:b4:f5:84:ed:77:4c:5b:19:14:7a:
6b:54:2d:73:2a:e1:e8:22:e5:c4:37:29:d9:9a:2b:81:1e:93:
f0:b4:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:28 2025 by rpki-client