Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa
File: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (raw, json)
Hash identifier: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=
Subject key identifier: 18:11:81:94:01:52:CC:BB:8D:16:03:71:DB:1F:F4:0F:FE:43:42:68
Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial: 01952A638FF99DC4AF159917BBF7F27D2129
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa
Signing time: Fri 21 Feb 2025 21:22:02 +0000
ROA not before: Fri 21 Feb 2025 21:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207733
IP address blocks: 178.250.134.0/23 maxlen: 24
2a0c:bd40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2a:63:8f:f9:9d:c4:af:15:99:17:bb:f7:f2:7d:21:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
Validity
Not Before: Feb 21 21:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181181940152ccbb8d160371db1ff40ffe434268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:90:c2:0a:ea:3a:2f:ed:92:5f:ba:fb:37:
a3:c8:fa:39:10:08:b8:ae:9f:d2:4b:3b:7d:60:8f:
00:68:7d:5e:0f:fa:9d:56:79:32:f2:43:b2:2d:37:
86:f6:11:1a:d8:2c:31:27:91:7b:2c:d4:e5:5f:b8:
88:1b:ea:fe:10:05:82:36:47:c6:ef:ba:23:da:9f:
17:de:ef:7b:00:c6:3e:42:42:bd:34:43:1a:61:4b:
29:ec:95:58:65:d9:f3:26:2c:c9:2b:07:3a:42:57:
4a:33:da:23:9b:73:e6:fd:58:49:31:1f:32:a1:fe:
09:f5:63:42:8c:30:25:d4:d6:93:7c:b6:68:58:70:
86:04:4a:3d:ca:c2:b5:69:4a:18:e8:79:4f:70:58:
b2:20:e7:77:69:0f:3b:6e:18:51:aa:8e:a2:0b:22:
f6:8d:30:5d:b4:06:5e:3a:34:c7:b0:0e:6c:de:e6:
d8:bb:74:e4:4b:12:94:eb:a3:59:e6:d4:16:43:cd:
65:bf:0c:b7:ed:b2:04:a0:98:23:25:49:a9:49:9b:
a8:f4:9d:56:d0:ea:da:02:db:85:a3:11:2f:51:59:
0c:ef:e4:c5:ae:d4:10:0f:49:c8:ba:b1:f2:7d:d4:
48:8d:05:be:3b:dc:64:59:2d:0d:7f:74:b5:4d:46:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:81:94:01:52:CC:BB:8D:16:03:71:DB:1F:F4:0F:FE:43:42:68
X509v3 Authority Key Identifier:
keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.134.0/23
IPv6:
2a0c:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
bc:4c:60:67:80:29:5b:f9:5a:ea:e1:b1:c4:b3:a7:4a:19:5d:
e2:0d:eb:04:d6:16:82:a3:2a:b2:50:29:db:be:1c:d5:a1:2f:
d4:a5:b2:70:27:ca:88:82:cb:ba:f9:b8:aa:f1:f5:4f:9d:41:
09:a5:43:80:19:ea:90:72:62:49:63:96:88:fd:21:32:ef:12:
1a:d0:62:b1:95:c7:13:2f:e1:f0:f2:96:2f:a9:58:d9:dd:c1:
5b:4e:d0:48:a3:a4:06:5a:c9:af:44:33:c7:34:2f:ca:0f:eb:
ff:4e:d6:9c:f7:5e:34:17:89:8c:29:7a:3d:20:65:09:8e:a8:
06:35:8e:f5:99:f1:94:34:bc:49:e2:29:4d:6d:4f:45:70:a8:
7c:34:02:66:5c:84:5d:77:7e:da:cf:74:1a:ea:53:ab:27:b6:
bd:1c:b1:d3:48:00:a9:c2:7a:7c:85:8f:94:e0:85:4d:57:a9:
3f:2f:78:80:67:d4:48:26:b3:62:1a:0a:c1:f4:32:a0:01:78:
26:5a:b4:26:69:bc:13:28:41:41:17:9a:c2:72:8f:67:00:66:
5a:e5:28:f4:bc:55:d2:54:16:d5:06:b4:1f:f9:06:51:3e:a9:
6f:4b:bb:7e:82:b0:d9:d3:5c:7e:67:14:8c:3f:3d:ba:83:5c:
82:56:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:13:49 2025 by rpki-client