Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa
File: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (raw, json)
Hash identifier: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=
Subject key identifier: 1A:75:71:0D:03:51:CB:89:59:FF:A7:46:46:D8:D5:0F:71:B8:70:74
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0197DBAFD2F147256BB37CBEFE7C192AF57B
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa
Signing time: Sat 05 Jul 2025 17:43:42 +0000
ROA not before: Sat 05 Jul 2025 17:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211421
IP address blocks: 213.109.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:af:d2:f1:47:25:6b:b3:7c:be:fe:7c:19:2a:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jul 5 17:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a75710d0351cb8959ffa74646d8d50f71b87074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:a6:1a:92:2d:03:04:50:52:7e:0c:c3:82:
ac:d8:c0:50:6b:8f:70:14:c7:59:a8:04:1c:df:05:
cd:47:6a:b6:a3:bb:d3:e2:d2:57:1a:b5:b9:24:7f:
51:70:c5:40:f6:85:68:47:65:d7:53:e2:bf:71:4d:
8b:c8:8d:fb:4a:d6:3f:77:7b:b4:42:cb:16:60:71:
eb:8a:4c:20:3a:4d:5f:9a:a2:ec:42:5f:28:d9:33:
52:27:35:d1:aa:c8:13:04:4e:6c:7c:50:d4:65:f6:
a0:18:d4:dc:ba:1c:4c:0a:a1:81:a3:38:ef:31:0b:
e6:d1:58:70:05:93:86:1c:b6:cc:5a:38:56:15:ea:
63:84:fa:70:5b:f1:4f:d2:d9:29:9b:49:55:92:57:
33:b6:2d:9e:b3:62:98:b4:10:03:05:c8:b2:66:d5:
3d:67:f4:ae:0a:7d:65:3a:bf:4d:4c:94:5a:98:22:
40:c3:86:8f:2d:bb:1b:46:29:0c:d1:f0:1a:08:51:
57:41:cd:03:5c:8e:7a:dd:98:7f:26:02:8d:e4:be:
8b:c8:0a:16:71:10:86:1d:2d:fa:10:b0:31:45:35:
74:3a:33:1c:65:9f:26:0c:94:8b:f1:85:c5:74:d9:
8e:90:5f:94:5c:d7:2c:79:22:6a:ec:b7:93:87:51:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:71:0D:03:51:CB:89:59:FF:A7:46:46:D8:D5:0F:71:B8:70:74
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ae:e8:74:20:a2:a3:e4:ca:c8:89:ef:78:01:05:c5:c7:68:
0b:ef:9a:aa:84:b9:55:ae:ec:02:96:88:45:c9:92:a1:a1:bb:
d0:c1:bf:d2:c7:7b:f2:d9:89:20:84:4a:79:33:f4:fd:23:5e:
1f:bc:3d:51:d5:e4:b9:49:e9:79:87:0b:45:a3:8e:0c:c2:77:
da:e1:fd:dd:48:73:e2:42:0a:a2:70:c9:f8:fb:5a:a1:e5:e6:
95:92:ad:2e:f6:46:81:05:73:10:d2:81:af:8c:8b:0c:da:9a:
6a:b7:83:99:55:88:fa:40:4e:60:05:3b:5c:3e:6d:20:2d:ae:
e8:63:bd:9b:dc:cc:d9:f0:8f:cf:c4:d2:6e:07:17:a5:1e:11:
3f:4e:56:f0:1e:ff:55:9c:74:4d:ae:6d:9c:42:51:8c:40:6c:
a9:13:01:3c:2f:b9:c3:17:5a:94:93:50:9d:e1:6b:25:f9:5d:
d1:4d:b8:9b:53:95:d2:25:a5:a6:b1:f4:3d:25:33:c0:64:8b:
31:a1:5c:bb:10:a5:47:17:7b:97:ff:d9:b8:f0:8a:d1:dd:46:
d6:f3:36:e1:0d:04:a0:11:0a:0d:95:50:ad:72:00:28:6b:99:
15:93:3a:20:ed:9c:5b:7e:e7:cc:77:78:87:d8:8b:d7:4d:7d:
83:67:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:18:43 2025 by rpki-client