Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GzbjpWWbs-1PqotRsV09E9K9Lz4.roa
File: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (raw, json)
Hash identifier: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=
Subject key identifier: 1B:36:E3:A5:65:9B:B3:ED:4F:AA:8B:51:B1:5D:3D:13:D2:BD:2F:3E
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F44679D1B9719C75832D0279C56C7F9A
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GzbjpWWbs-1PqotRsV09E9K9Lz4.roa
Signing time: Thu 10 Jul 2025 12:19:08 +0000
ROA not before: Thu 10 Jul 2025 12:19:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 95.164.77.0/24 maxlen: 24
95.164.160.0/22 maxlen: 24
95.164.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:46:79:d1:b9:71:9c:75:83:2d:02:79:c5:6c:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:19:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b36e3a5659bb3ed4faa8b51b15d3d13d2bd2f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:43:5a:bc:b0:09:a1:fb:6f:9b:5c:da:76:
0e:a4:98:06:97:85:91:23:16:56:41:a7:05:05:30:
29:25:87:cf:26:31:f3:1b:12:26:c2:21:14:91:14:
79:ed:f5:4b:6c:2b:02:2d:2f:9e:75:54:d8:ca:1a:
82:f4:c0:8b:33:aa:3c:47:9b:d1:2c:30:0e:9e:5e:
79:02:4a:60:fe:a7:fa:76:2b:cb:dc:84:05:93:0e:
14:fe:bb:fe:c9:73:4e:46:9e:0b:0c:ff:9f:50:29:
b1:fd:0e:6f:59:25:24:e9:2e:40:29:84:ea:a0:11:
b1:f6:d7:aa:1c:08:ff:f8:fe:8e:6b:ca:a2:3a:10:
a7:de:a3:90:57:33:a0:ed:fe:a6:1f:29:ab:ea:ca:
91:4d:79:00:85:14:f1:89:03:d0:c2:08:e9:f9:66:
f3:51:2e:a2:56:87:ed:d9:bc:6a:92:2d:8a:43:c1:
73:3e:af:53:4f:32:b3:e9:bb:f8:93:4c:83:59:2e:
f3:97:e5:db:15:69:ef:bd:d4:ec:31:be:ae:26:78:
47:cc:e4:5b:5d:af:47:6b:06:2f:c4:3d:cc:db:6e:
e8:0a:b4:da:d4:1b:88:99:df:eb:f7:b0:59:6a:6f:
00:f8:b2:5b:e3:66:dd:b1:96:b5:7d:ac:de:fc:22:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:E3:A5:65:9B:B3:ED:4F:AA:8B:51:B1:5D:3D:13:D2:BD:2F:3E
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GzbjpWWbs-1PqotRsV09E9K9Lz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.77.0/24
95.164.160.0/22
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:76:88:af:a8:51:cf:5e:30:6e:83:4a:c3:2a:0d:a1:6c:2b:
4f:a4:cd:4b:42:53:77:1c:75:b4:0b:44:60:8e:43:57:17:aa:
9d:0c:62:4e:9f:4d:b5:8b:23:3b:47:b3:36:f5:df:dd:3f:f2:
a5:63:7e:18:a6:00:c0:ac:de:2d:56:fa:c5:fd:28:c1:d4:75:
63:5a:a6:f1:a3:29:fc:27:70:12:4f:c3:55:53:b4:5e:4d:5c:
48:67:44:4e:51:e2:57:42:b3:88:fe:98:02:2b:39:1c:ff:6a:
cf:50:bd:f8:90:6a:3d:42:76:e0:71:84:b7:7a:e2:82:fd:ae:
3c:e2:99:a4:b3:9e:9c:c6:26:7f:4e:df:a7:13:75:65:53:df:
95:e9:d4:01:c0:f6:9b:e9:05:15:11:2a:ee:5f:90:5d:0f:37:
73:66:05:da:ea:99:74:db:83:db:b3:93:7b:7f:70:5b:9e:df:
71:d2:79:10:1e:46:56:2c:12:75:92:cb:b6:dd:3f:29:45:5e:
85:49:c9:2f:1c:a3:4a:8f:02:db:91:8c:03:6b:43:d9:b1:ae:
dc:ed:75:20:5e:91:b4:a6:50:fd:df:6e:c9:55:10:5e:1b:c4:
c6:c1:64:0c:5f:fe:40:99:8d:45:99:74:bc:14:5e:08:33:97:
2f:ea:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:02 2025 by rpki-client