Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa
File: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (raw, json)
Hash identifier: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=
Subject key identifier: 18:3D:57:5F:48:08:84:04:28:3B:08:70:34:39:E7:9C:E2:50:48:E7
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01941F8C90897D8FB423730DC7419B3677FD
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16168
IP address blocks: 82.144.96.0/19 maxlen: 19
82.144.110.0/24 maxlen: 24
193.41.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:90:89:7d:8f:b4:23:73:0d:c7:41:9b:36:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=183d575f48088404283b08703439e79ce25048e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:8b:8b:0a:50:68:3b:b0:3d:ae:70:14:81:
90:89:4a:02:2c:fd:60:23:80:c8:1f:24:bd:ba:5c:
0b:6b:d0:27:b4:54:26:15:8a:47:7b:a3:5c:1a:76:
65:6c:65:b1:94:18:02:af:f2:16:c3:ec:e5:42:79:
bf:ee:ac:db:ac:9a:da:94:40:b1:e7:1c:0b:6f:95:
eb:f4:21:de:eb:b0:ca:ac:91:bc:3b:ac:f9:ac:46:
e8:fd:eb:f8:50:2b:48:75:2a:95:1c:a3:0d:69:97:
fe:e1:0f:d3:5a:bd:0a:3c:41:22:3e:a2:5f:4d:02:
0d:67:fc:2e:0d:8c:08:df:99:ca:ff:96:a5:2c:53:
16:cf:ec:33:d8:24:56:55:e5:92:4d:52:6a:a7:c3:
47:fd:f4:5c:bc:23:de:7a:7e:80:0e:fc:04:c8:3b:
65:e7:ec:8c:2e:8d:92:7f:56:b7:79:fe:2a:d5:91:
b3:41:63:42:77:35:4a:aa:8a:63:85:20:db:db:9a:
35:92:63:5f:92:77:0a:07:fb:23:4d:40:9f:6c:1a:
74:ff:4b:c3:7d:dd:b6:96:65:d6:2f:1a:ad:cf:56:
25:5d:e0:25:c9:b5:7a:b2:99:1e:22:e9:2f:fd:2a:
01:eb:2f:2f:d2:7a:6f:1b:b2:a4:02:99:6b:8a:b8:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:57:5F:48:08:84:04:28:3B:08:70:34:39:E7:9C:E2:50:48:E7
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.96.0/19
193.41.240.0/22
Signature Algorithm: sha256WithRSAEncryption
79:c8:64:32:8b:5e:58:16:b3:8b:e5:be:4e:21:53:dd:3e:11:
ab:79:b2:b9:13:b9:91:09:ae:5c:01:d1:88:a6:b2:1a:7f:27:
a6:8d:12:1a:16:f6:ad:7c:cd:5b:d8:04:ec:ab:bb:ed:4d:9b:
23:39:79:ed:c6:2e:7d:b3:54:d8:99:2d:10:30:d7:fa:77:10:
3a:05:4c:cc:89:e9:86:b0:6f:46:06:9f:c1:ff:17:5e:a1:af:
68:03:be:76:f2:17:7a:a2:d2:70:f6:cc:92:53:5b:f5:93:33:
64:a9:87:2e:30:84:97:69:2a:5b:92:cd:a8:e6:74:20:52:af:
b2:cf:4f:24:b5:6d:93:52:ef:1c:1b:74:42:e3:8b:e2:c1:a2:
1d:df:dc:65:79:d2:8f:93:03:2c:dd:fe:a3:06:e8:b2:f5:a8:
50:2d:ef:52:33:7a:b5:6f:c3:07:16:e1:e7:cb:e3:98:6d:df:
8c:59:ff:bc:f5:d5:93:2e:8c:a2:4f:40:25:89:ac:22:70:c0:
3e:5b:56:df:f4:9e:2e:bd:d9:08:9f:c8:38:dd:a8:2a:f8:d4:
34:06:2f:3c:d1:f6:f1:0c:d5:51:08:60:5d:fa:6a:9e:21:34:
f2:fc:8b:c9:fb:8e:e0:0c:67:a3:98:1f:e2:00:b4:85:f2:df:
2e:3f:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:50:38 2025 by rpki-client