Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GPQpLDssO6fTD1dGaJR05RFssa4.roa
File: GPQpLDssO6fTD1dGaJR05RFssa4.roa (raw, json)
Hash identifier: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=
Subject key identifier: 18:F4:29:2C:3B:2C:3B:A7:D3:0F:57:46:68:94:74:E5:11:6C:B1:AE
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40B4FA834B0D0A8267C0F03D165A0
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GPQpLDssO6fTD1dGaJR05RFssa4.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.237.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0b:4f:a8:34:b0:d0:a8:26:7c:0f:03:d1:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f4292c3b2c3ba7d30f5746689474e5116cb1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:37:8d:6e:d6:41:72:89:fb:ab:de:cb:a3:
f1:bf:2f:4c:b9:12:24:c9:45:47:3b:e3:a7:60:a1:
3a:f8:29:af:ca:03:97:f8:bd:02:d8:5c:47:01:b1:
d3:e8:a8:d5:ed:55:1c:d4:32:35:0d:07:56:83:e7:
92:e5:0b:93:69:8c:00:5b:ee:73:0e:3c:fa:2c:aa:
9f:0b:62:48:c8:63:27:8e:4d:15:f7:99:12:aa:a6:
e7:98:f6:36:c1:52:40:d2:d5:6d:f2:1d:f2:bd:07:
38:0f:0e:e6:65:c5:72:82:2f:4d:4f:a6:95:b7:74:
36:5a:64:a6:70:f1:d5:13:2f:b3:41:49:e3:ed:a6:
64:34:68:cd:eb:18:fa:7d:46:fc:4e:bb:c0:1a:aa:
55:a7:82:19:c4:70:4e:e4:25:c3:27:ee:75:60:9c:
56:49:c2:84:9e:51:72:b1:0a:c3:74:70:20:e8:d7:
a7:55:c5:ca:2d:10:98:95:34:44:ca:8c:6d:4d:60:
40:9a:98:ea:37:78:dd:b0:c4:8b:0b:42:8b:f0:3b:
e6:da:0d:e5:4a:dc:b2:c4:76:74:7a:54:41:2b:57:
b3:07:8f:3d:ab:19:8b:e4:48:66:68:9f:02:27:47:
32:77:82:e4:ee:ab:e0:64:8f:9f:9a:52:5c:d7:46:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:29:2C:3B:2C:3B:A7:D3:0F:57:46:68:94:74:E5:11:6C:B1:AE
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GPQpLDssO6fTD1dGaJR05RFssa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0/21
Signature Algorithm: sha256WithRSAEncryption
13:cf:f0:a6:07:22:5b:0a:5d:e1:f7:e8:e8:d1:a3:71:f4:3c:
d7:b8:d7:36:41:55:10:71:25:11:19:ca:c6:99:ef:2a:4b:45:
7c:94:d2:20:f9:37:14:7d:01:8a:c0:d0:cf:9f:2f:b4:e9:2c:
8a:8a:14:29:64:fb:2a:d1:e5:63:8e:5b:e8:41:92:fa:ff:22:
79:84:eb:37:6e:39:34:0e:2a:1c:87:f3:70:02:59:17:e0:c8:
e0:5b:d3:b5:22:ef:f5:77:3f:f8:15:97:08:dd:9e:c4:08:50:
b2:27:26:06:37:94:85:c4:67:fd:c7:7a:12:df:3f:07:37:2a:
c4:62:18:d3:02:00:58:fa:4d:83:73:9d:a8:d4:ba:51:10:1a:
cc:6e:3b:1c:d5:8c:d7:4c:49:d7:28:50:80:72:01:29:e8:45:
ea:19:1f:02:ba:06:b3:05:13:aa:bb:66:1a:60:99:ad:a5:ed:
e4:cd:dc:74:d0:6e:1c:41:d7:3e:fc:9b:fe:a0:17:5c:46:ae:
37:4b:a0:2f:6d:87:f5:f2:ee:e1:4c:6e:c0:ed:2d:3a:98:da:
8b:8d:b1:4e:34:36:02:6f:1f:86:14:02:6e:a0:ae:e5:be:1d:
1f:e1:df:55:89:91:cc:30:6a:17:69:d0:6e:e7:fc:aa:3b:c2:
ee:4c:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:48 2025 by rpki-client