Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa
File: gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa (raw, json)
Hash identifier: jArVzj+o9obydS84VxQoY0cNnD9X7oy7c/gnENfE4s8=
Subject key identifier: 82:96:4D:6C:A0:8F:AA:AE:4B:7F:F8:B7:CD:80:A5:D3:38:33:25:A2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0197006D07BD8BDBC3D7E9882D16A466EB05
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa
Signing time: Sat 24 May 2025 03:53:54 +0000
ROA not before: Sat 24 May 2025 03:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 62.60.163.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:6d:07:bd:8b:db:c3:d7:e9:88:2d:16:a4:66:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 24 03:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82964d6ca08faaae4b7ff8b7cd80a5d3383325a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:f1:2a:59:bd:ad:97:d1:fc:a7:51:de:fc:
ba:36:5a:ec:7c:17:f7:d4:60:3f:3f:dd:5f:5f:0c:
63:8e:1e:88:7c:e1:d3:7c:a9:54:05:7b:43:6d:e7:
95:a9:69:b5:1c:94:2f:cb:70:b8:a4:ab:10:e3:b2:
fb:c3:12:b2:04:73:40:03:e4:6a:35:30:4a:68:75:
5c:43:a0:b1:9b:71:7e:07:2d:c1:d8:fd:f8:5f:2a:
03:53:d5:29:e0:3c:f5:1d:51:6b:60:84:d6:0d:1e:
1b:2f:24:2b:c0:3e:bb:a2:65:73:37:32:60:55:8e:
76:4c:cb:9d:cd:0a:6f:5d:38:da:27:c8:93:47:a2:
37:02:3a:35:7d:00:9f:ff:ac:06:6f:2a:9a:b4:90:
24:89:7d:52:3d:f9:75:3b:3b:24:a9:fe:00:83:7a:
fe:37:f0:1f:25:b3:01:c2:bc:c2:0e:11:99:91:65:
fd:58:0e:ce:1f:7f:69:b4:5c:f6:34:0a:c1:a3:2c:
5a:55:1d:c3:1b:fd:a3:9d:d5:5c:dd:c6:8e:ee:f2:
49:49:c2:fe:8d:fd:27:af:c3:a9:41:04:76:82:da:
85:75:70:92:2f:02:e6:24:f1:a6:6b:6d:43:1a:24:
9d:38:a9:e6:ca:a9:ae:54:d1:82:46:c8:85:52:7b:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:4D:6C:A0:8F:AA:AE:4B:7F:F8:B7:CD:80:A5:D3:38:33:25:A2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5e:08:dd:55:d3:45:ce:fa:15:f6:67:e7:56:e4:fd:12:3e:
91:89:c6:95:c6:7a:e6:f4:77:96:8f:c3:ee:1d:f2:4f:c2:be:
af:7c:cb:db:f1:18:47:d3:39:c8:2a:0e:86:a8:c1:98:93:2b:
80:95:4a:d9:bd:fd:24:84:ca:4f:f9:bc:42:68:b2:ff:80:6b:
53:b1:3f:7e:24:14:c5:54:52:2f:f6:42:42:6c:a2:a3:85:75:
c5:01:43:12:81:db:45:17:c6:f9:5d:b6:b1:e5:0b:06:e6:c6:
77:72:23:03:f8:01:c4:23:e8:7b:4f:1f:e5:a0:b6:6c:80:b6:
ba:e3:61:a2:97:3f:68:c5:48:4b:67:21:b4:7f:11:32:cd:47:
24:32:d5:34:76:e1:a4:71:b0:48:ac:62:cd:7b:c4:76:ea:a1:
ed:5a:af:c1:0f:af:f9:4c:70:bf:fb:13:0d:60:63:96:ca:9b:
fd:c2:a3:40:61:ba:ca:6f:1a:17:c4:ba:1a:72:1a:83:7f:83:
5b:22:c3:bb:32:0a:b0:42:81:43:80:2d:7f:48:83:84:f7:6f:
88:87:e3:04:1c:ff:5f:98:04:42:f5:92:52:e2:8b:8e:96:4f:
d3:45:da:99:77:48:0e:a9:9d:25:6f:a2:c2:1e:2b:f8:d3:64:
53:75:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:33 2025 by rpki-client