Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa
File: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (raw, json)
Hash identifier: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=
Subject key identifier: 18:1B:68:2E:CC:2E:C6:E4:FD:AB:E0:AD:E8:E5:CD:E6:FC:10:FE:3E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206800CFFF0D5E6DB7754D7F96618320
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 2a0b:3c41:2::/48 maxlen: 48
2a0c:9e02::/32 maxlen: 40
2a0e:cbc4::/32 maxlen: 32
2a0e:cbc5::/32 maxlen: 32
2a0e:cbc6::/32 maxlen: 32
2a0e:cbc7::/32 maxlen: 32
2a0e:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:cf:ff:0d:5e:6d:b7:75:4d:7f:96:61:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181b682ecc2ec6e4fdabe0ade8e5cde6fc10fe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:c9:db:57:fb:f1:de:87:ca:a0:12:8b:8f:
d5:17:5a:db:48:10:2e:e7:09:81:82:35:b1:f1:22:
30:bd:24:f1:1f:93:84:d5:1e:6e:f3:4b:7a:7b:3d:
4b:c4:cd:74:97:1c:17:a5:8a:c0:f6:05:a5:5b:2f:
9d:cf:10:8a:66:45:48:70:f9:ba:2b:7c:6b:47:9a:
2e:03:14:d0:fa:74:d9:64:11:0d:13:40:61:6c:47:
d0:90:3b:d0:36:34:ae:c4:55:dd:f3:8b:c1:48:e4:
e0:7f:bb:73:f9:b6:9c:5a:60:df:19:17:93:e6:c3:
06:1d:91:08:75:df:d4:6c:f2:0d:8e:d5:5e:1c:03:
85:1a:ab:f3:79:ae:ca:18:90:9e:66:8e:ab:39:ff:
30:26:bd:92:65:c6:cf:14:76:2a:a2:a3:f8:02:2d:
98:d8:e1:2c:d4:11:36:9d:69:ea:fd:f2:2b:82:c4:
52:84:cd:33:61:9e:9c:d1:66:a0:fc:22:5f:97:73:
ea:fc:d4:d2:3a:f9:6e:a3:5f:01:24:c1:90:90:4a:
c3:92:fb:d7:b9:b6:89:47:6b:97:ca:55:b1:cb:05:
d4:34:46:dd:60:35:49:86:33:cd:c4:2b:2f:06:81:
75:32:fd:38:4d:9e:2f:80:77:60:5b:44:4b:4b:a0:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:68:2E:CC:2E:C6:E4:FD:AB:E0:AD:E8:E5:CD:E6:FC:10:FE:3E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c41:2::/48
2a0c:9e02::/32
2a0e:cbc4::/30
2a0e:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
83:21:c7:d3:dd:35:9c:a8:73:05:47:fa:04:fb:33:66:17:86:
84:b5:dc:f9:59:3c:21:af:81:5d:66:9e:78:f8:83:34:3c:a5:
b2:23:35:07:ac:50:3b:6d:f7:4a:02:60:bb:8f:59:84:37:bf:
87:f7:3d:25:e9:9e:c1:07:f4:c0:f8:6e:4b:e6:6a:64:e1:71:
af:fb:db:8d:45:5f:c0:c5:da:69:f6:5b:d0:7e:d5:2e:de:f4:
52:a1:73:35:d4:b7:eb:d0:fc:e9:a8:6a:b8:c3:43:9a:5a:9f:
34:0f:37:aa:11:14:9e:4c:5e:7d:cf:50:2c:8f:ed:cb:c8:c7:
c8:f9:5b:0b:81:b2:3d:4b:25:ff:92:83:82:17:24:7b:f7:77:
d8:39:5c:16:59:50:5c:f0:e7:48:99:35:fe:2f:31:b3:92:3b:
62:56:66:de:67:58:3f:b5:04:6e:d9:28:70:33:e4:2a:1e:ed:
92:1f:c4:25:78:97:9f:32:b0:cf:ac:7f:8a:07:7c:e6:b4:fa:
5e:d6:2a:90:59:b3:04:22:fe:92:e7:99:f6:6b:5c:20:f0:60:
eb:7d:ff:f2:2c:07:ef:71:a2:d4:dc:6b:e3:fb:f4:58:f5:9f:
ab:a4:89:31:a3:1a:51:8c:79:74:d3:5b:54:a4:f3:c9:a4:3b:
25:14:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:17 2025 by rpki-client