Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa
File: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (raw, json)
Hash identifier: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=
Subject key identifier: 18:AD:01:A7:A4:CF:F4:AE:3E:AB:07:44:82:C0:E4:40:76:9D:D0:9C
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019425FD0EDD056740ECBB84BB4FBC053F4D
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa
Signing time: Thu 02 Jan 2025 07:48:48 +0000
ROA not before: Thu 02 Jan 2025 07:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42035
IP address blocks: 185.199.140.0/22 maxlen: 22
2a0b:2b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:0e:dd:05:67:40:ec:bb:84:bb:4f:bc:05:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jan 2 07:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18ad01a7a4cff4ae3eab074482c0e440769dd09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:40:da:38:32:3a:28:ae:72:fb:89:20:6c:
e6:6d:61:be:81:cd:30:34:f8:c6:01:67:d9:e8:b6:
8f:91:22:b6:ed:5b:a4:cb:fa:e0:1f:79:aa:2e:8b:
db:98:0b:41:1a:c9:c0:84:32:23:a7:95:f7:13:f1:
c5:e9:7f:b5:4d:2d:7f:49:fe:a8:e3:72:dc:31:61:
9b:c3:72:6a:1c:72:51:ab:af:6b:f6:8b:f4:e3:5a:
6b:b1:4f:b4:91:d7:0d:5a:b5:39:12:67:4e:9d:be:
e5:66:4f:f9:9e:5a:0e:b5:a3:16:b6:72:63:27:6d:
f3:35:8e:1b:0a:6a:ad:7a:1e:17:40:d1:12:cc:33:
d8:0f:1b:21:31:63:42:09:ea:38:a6:d8:38:5d:d3:
8e:5d:ae:f8:7c:77:fa:e4:b2:12:7d:a5:34:5c:59:
70:9f:d0:21:76:c1:5a:f3:8e:07:b1:cc:80:f0:02:
cd:03:07:20:b6:55:74:eb:4b:3d:81:c5:a5:dd:ad:
2e:a2:07:ce:9b:1d:50:7a:44:67:f5:21:d5:61:5f:
f6:0e:f4:42:6a:62:c3:a8:54:9f:73:29:a1:c6:0b:
22:9d:0d:6b:e1:f2:cb:ae:69:70:ba:cc:61:5a:69:
50:78:6a:61:16:2d:24:3c:a0:ec:3e:dd:9e:1f:df:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:01:A7:A4:CF:F4:AE:3E:AB:07:44:82:C0:E4:40:76:9D:D0:9C
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.140.0/22
IPv6:
2a0b:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:70:c2:29:37:3c:15:93:23:85:43:2d:e8:b3:c1:c6:a9:46:
f6:0d:a8:5a:3c:2f:ed:4b:cf:18:8d:0f:2c:94:a1:69:04:22:
18:b7:c2:70:64:ad:78:eb:b6:be:c7:18:34:32:11:ef:6d:1a:
f5:8c:fb:a0:d3:99:90:a0:ab:52:cd:51:bf:07:f9:19:c0:64:
25:cc:ec:c1:c2:fa:c6:98:b5:5e:03:16:0e:c9:56:44:82:aa:
d8:8b:7a:12:c4:ea:85:88:4a:df:05:13:67:7c:57:4a:d1:0e:
0e:eb:04:1a:49:6d:31:c5:2b:33:45:b9:53:65:7a:4b:14:84:
44:26:dc:c1:85:f4:f2:c4:82:15:4c:d9:d5:eb:46:33:72:61:
f1:5b:be:1f:7b:76:01:ec:36:e8:c6:80:9e:8c:04:d6:2e:8c:
4f:a9:2b:d4:0a:82:a3:2c:94:68:ad:c9:e7:0e:47:1a:2f:cd:
fd:de:1f:c3:50:90:e4:9f:96:43:93:f4:2e:8e:ad:ee:59:9e:
13:ab:7c:5a:54:34:25:54:66:dc:ca:98:60:05:63:73:43:8e:
55:8d:7f:e4:77:c5:59:6b:81:d0:6d:6e:7f:45:f9:16:3c:1d:
2d:ff:3c:ea:8e:21:22:99:98:24:3d:bc:93:11:94:57:af:31:
d0:59:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:29:15 2025 by rpki-client