Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_Gbw1avnbRnQSpqlepKaXATocSI.roa
File: _Gbw1avnbRnQSpqlepKaXATocSI.roa (raw, json)
Hash identifier: +f+iXtxgj+ZinDREW5+lwTY/6QpvBxNr7/Ar2BvG9rE=
Subject key identifier: FC:66:F0:D5:AB:E7:6D:19:D0:4A:9A:A5:7A:92:9A:5C:04:E8:71:22
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01971241DB079C3524CA5F42864622771059
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_Gbw1avnbRnQSpqlepKaXATocSI.roa
Signing time: Tue 27 May 2025 14:59:55 +0000
ROA not before: Tue 27 May 2025 14:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:41:db:07:9c:35:24:ca:5f:42:86:46:22:77:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 27 14:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc66f0d5abe76d19d04a9aa57a929a5c04e87122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:67:0d:82:ac:7a:e5:b6:f5:de:d8:03:4d:
3b:20:e4:bc:24:62:f8:0e:61:47:30:cc:69:76:29:
9f:75:84:3d:db:da:ae:03:65:31:10:2b:69:0e:56:
15:7c:97:73:03:e5:ab:1d:26:10:16:46:73:41:e5:
67:dc:a5:f3:e7:45:07:8d:93:fc:14:4a:f0:09:ad:
c5:4f:e4:cb:aa:12:bf:7c:3f:19:16:a8:c2:b1:69:
d7:ee:f8:f3:76:de:ac:d3:06:ad:99:9d:ef:7f:28:
87:d6:31:a4:98:6b:1f:f0:e6:1c:9a:bf:fc:57:44:
46:c3:42:0e:9b:6d:96:4b:d5:44:62:29:6c:63:3b:
a4:c0:7b:da:9a:d5:52:d1:0e:d1:5b:4f:eb:5f:fd:
b4:1b:68:d9:b6:c0:bf:e1:76:95:c4:66:37:34:6e:
11:b6:5a:ac:10:8a:b2:90:7f:53:72:9d:46:7a:73:
aa:97:59:b3:fd:d7:c4:db:ed:23:8b:19:d5:4c:93:
72:e2:62:3c:76:7c:96:a2:d1:52:82:18:66:a5:e5:
47:7a:2b:eb:ae:25:6f:85:d7:bc:c7:53:b9:d4:35:
54:b3:7e:88:45:85:10:3e:1d:31:2f:97:69:1b:f3:
5d:19:00:ce:c3:1a:34:2a:a6:63:fd:59:7c:c6:d3:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:F0:D5:AB:E7:6D:19:D0:4A:9A:A5:7A:92:9A:5C:04:E8:71:22
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_Gbw1avnbRnQSpqlepKaXATocSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
83:83:0c:a2:01:ba:83:f3:fc:ec:eb:cb:41:14:45:a3:15:31:
74:05:12:66:2c:43:03:3c:df:37:8f:02:38:f0:99:3c:d6:52:
5b:17:b9:75:95:eb:b2:4c:9a:ad:58:53:e3:05:0d:9e:e9:88:
a5:b2:0e:9f:b4:53:bd:45:3a:5b:e8:2a:c2:73:e3:93:4f:de:
51:e1:a9:c3:36:da:0e:8d:1b:f1:ed:e5:68:48:da:81:19:fa:
35:22:88:2f:0f:bd:b9:cc:cc:43:aa:22:fa:6f:cd:b2:db:7e:
89:69:97:80:16:60:92:a0:40:42:19:4c:97:af:85:c6:9f:41:
0c:d9:8d:ad:0a:82:9f:6f:ca:b1:b8:a4:c7:b5:05:f4:5c:26:
30:67:6f:20:26:80:5c:bd:8a:08:2e:c2:ed:6c:a7:bc:04:66:
e4:bb:64:1d:ff:82:d6:ec:4b:47:ad:30:2b:36:12:2f:54:02:
78:da:19:0b:9e:52:59:13:ea:cf:84:0f:06:74:42:1f:6c:d4:
c3:4f:90:e0:d2:e3:14:3c:b5:37:66:1d:e3:e9:4d:76:45:fb:
57:ab:ad:63:c4:2f:35:35:b7:68:de:0a:d7:75:91:9c:85:9d:
d2:f5:8b:cd:ef:98:cb:34:5f:8e:56:c6:00:4f:f1:9a:7e:08:
30:ff:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:07:54 2025 by rpki-client