Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GKisAxYBXaDeAskgbc6Wc3fNUeE.roa
File: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (raw, json)
Hash identifier: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=
Subject key identifier: 18:A8:AC:03:16:01:5D:A0:DE:02:C9:20:6D:CE:96:73:77:CD:51:E1
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019420D645E232AACFFEE3DB440B5FB8DEF6
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GKisAxYBXaDeAskgbc6Wc3fNUeE.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42316
IP address blocks: 45.159.128.0/22 maxlen: 24
176.113.47.0/24 maxlen: 24
185.187.160.0/22 maxlen: 24
2a0b:a880::/29 maxlen: 48
2a0c:9280::/29 maxlen: 48
2a0f:7680::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:45:e2:32:aa:cf:fe:e3:db:44:0b:5f:b8:de:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18a8ac0316015da0de02c9206dce967377cd51e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:48:99:a8:65:65:52:92:a6:c2:26:ea:53:
38:43:fa:cb:52:5e:ef:4c:a8:38:e9:b6:0b:db:e6:
99:6f:41:44:ee:bb:91:26:a2:9a:a3:58:1b:71:49:
7e:0b:41:c8:85:84:8c:46:d6:5c:7a:ae:c0:d8:28:
7c:8b:27:22:dc:b0:e2:5a:91:2f:c7:a4:33:01:6c:
58:e5:3e:56:de:c0:6e:e9:dc:c8:d2:5b:1a:a4:ae:
ee:c0:6a:73:25:1a:09:c7:dd:c3:6b:ba:7c:ef:42:
a2:84:98:75:e3:36:43:3f:b3:3a:a7:05:5a:c0:b8:
68:74:3b:a8:8c:6f:26:d4:e7:f0:c5:51:84:fe:53:
9f:36:ab:86:4c:41:b9:5a:42:74:2d:15:d2:41:9d:
15:ec:3a:43:7d:b2:2e:15:96:7c:91:ef:9a:26:0c:
4b:34:f7:a7:0c:9a:8e:e0:8b:13:99:e9:2b:c7:0a:
48:f0:4a:29:00:a5:4a:68:c4:37:a4:b6:f9:ff:3d:
c7:26:ce:dd:db:70:f1:15:90:25:56:59:07:e8:e5:
03:7a:5f:c7:24:96:e9:63:1a:09:71:81:9f:15:84:
f6:a5:0d:73:3e:ab:bd:4b:20:d3:af:04:d7:d9:86:
2c:6f:a8:18:5d:cc:21:6f:77:27:78:53:8e:33:32:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:AC:03:16:01:5D:A0:DE:02:C9:20:6D:CE:96:73:77:CD:51:E1
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GKisAxYBXaDeAskgbc6Wc3fNUeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.128.0/22
176.113.47.0/24
185.187.160.0/22
IPv6:
2a0b:a880::/29
2a0c:9280::/29
2a0f:7680::/29
Signature Algorithm: sha256WithRSAEncryption
ab:c8:82:56:75:b5:bf:20:20:f8:d0:c1:9e:07:bc:23:d3:a2:
dc:f0:1e:d2:cd:17:90:5c:98:6f:2b:a1:37:20:a1:67:60:93:
3f:d2:45:2a:5b:4e:b8:21:2b:19:83:9a:a1:be:cc:b2:c6:5c:
3e:2b:90:df:7f:78:33:99:42:eb:b5:42:59:67:16:8b:37:88:
73:61:40:7e:a2:d5:3d:51:d6:4d:fb:c4:22:c5:98:33:9b:5b:
1d:04:dc:54:70:a8:19:4c:cf:68:7e:b5:c7:3d:73:ac:63:68:
af:b7:52:0e:fd:3e:d9:d4:03:e0:2c:96:b1:36:ca:b1:f5:88:
94:77:d7:07:ce:72:30:90:eb:e6:2b:63:e5:89:54:75:82:27:
07:da:cf:d1:d0:68:f9:85:bc:ea:4d:ae:cb:9c:e8:88:60:31:
00:86:41:93:d4:ff:3a:76:ab:50:d9:bf:7a:f6:74:38:92:c9:
97:8d:6f:aa:67:bf:0e:63:24:60:d8:eb:9f:00:a8:fe:d6:76:
b4:0d:b2:37:5c:fd:0e:4f:a0:c8:92:88:13:b8:5b:bd:e6:3d:
fe:b9:34:74:c4:59:9c:26:38:33:4c:f4:eb:26:f3:cc:1b:9d:
18:74:4c:31:f2:4d:6e:ed:4e:fb:98:ef:60:82:ec:ee:71:73:
1b:dc:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:13 2025 by rpki-client