Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa
File: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (raw, json)
Hash identifier: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=
Subject key identifier: 1A:F3:3B:A8:CB:06:19:8D:0D:07:43:1D:C2:A7:7D:29:90:C8:87:AE
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019528F90301418AE9124DB08658F51B1DCD
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa
Signing time: Fri 21 Feb 2025 14:46:02 +0000
ROA not before: Fri 21 Feb 2025 14:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 185.81.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:f9:03:01:41:8a:e9:12:4d:b0:86:58:f5:1b:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 21 14:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af33ba8cb06198d0d07431dc2a77d2990c887ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:bb:df:42:03:f6:10:cd:8b:da:8a:08:f8:
8c:ee:b2:8d:be:c6:8b:c7:66:ed:b7:f1:2d:bb:25:
e7:a8:5c:e6:77:99:d2:12:a2:2c:fb:d9:f3:6a:77:
68:68:71:fc:fb:4b:7f:e6:19:77:a0:0c:58:96:36:
fd:97:fa:84:85:cc:10:3c:ba:79:23:4f:ba:9b:31:
8a:28:3f:dd:a5:b5:5d:a7:17:30:08:72:16:cf:25:
d6:85:a6:0f:8b:f2:6f:68:b3:d5:6d:fb:48:72:dd:
7b:4b:bb:81:21:0e:9d:38:59:60:a5:24:4a:1f:0f:
6e:73:07:72:78:f5:20:66:52:fe:6d:98:0f:a6:17:
84:e0:41:80:11:8c:ca:a0:e9:ec:7f:0f:12:11:c9:
fc:d6:b3:b7:c1:b5:06:1f:d9:92:54:0b:0a:8b:76:
b9:5a:4c:26:1a:7c:35:08:5f:9c:ef:a1:4f:70:d7:
08:03:8c:b8:02:f3:14:06:12:e9:aa:41:e1:45:d1:
47:d1:11:d8:db:ae:b5:80:b9:02:00:05:bf:e8:55:
a7:f8:06:e6:e2:87:35:81:cf:86:7a:90:db:39:94:
ba:f0:6c:1b:33:5b:f0:f6:dd:d5:24:2c:d6:8c:ea:
e4:ad:72:cd:e9:25:d2:6f:6a:5d:e2:54:b1:a1:dc:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:3B:A8:CB:06:19:8D:0D:07:43:1D:C2:A7:7D:29:90:C8:87:AE
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4a:18:b5:b8:15:e7:c5:7b:20:cd:18:68:bb:e0:50:72:a2:
2c:a7:f3:96:73:e5:bf:d9:49:13:3b:19:52:fa:4f:cb:f9:f0:
b2:6a:a0:d6:df:85:7a:4d:e3:6c:e5:e4:a0:22:5d:73:23:1a:
b3:e9:d2:00:a3:7c:2c:e8:95:c2:53:25:ad:98:af:b6:55:91:
49:62:7d:0f:c4:6e:1a:aa:fa:18:de:d2:67:23:0c:48:b1:ac:
21:78:b9:80:c2:d0:49:8c:e0:6b:b7:c3:c0:99:9b:3e:f0:d9:
e2:ee:db:34:7a:91:71:e4:f7:9c:20:17:f6:5d:1c:d8:91:23:
e5:e5:09:e1:35:15:3a:dc:7e:ab:a8:16:43:04:9f:e5:92:61:
5d:7b:33:2b:2e:8c:7b:8a:2c:36:70:f3:a4:ea:b3:84:9e:91:
a4:a7:41:21:ab:72:49:4b:a6:87:e7:9a:20:72:4c:0d:c2:0e:
19:a5:a3:d9:b1:a4:f1:1d:a6:4f:8d:cc:7c:bb:f7:dd:4d:e2:
33:28:b0:cd:83:c5:dc:44:43:8d:f8:92:2a:f0:9b:a5:f2:64:
e4:b4:c8:82:b3:66:bc:dc:75:18:53:16:6b:7f:4e:7a:d9:81:
f9:ae:9a:da:2f:d8:d7:2e:15:c1:87:a0:b4:7c:eb:b6:5e:92:
ae:ef:84:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:18 2025 by rpki-client