Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gprH44AplwwXGaOOjeCuLFfIu_g.roa
File: gprH44AplwwXGaOOjeCuLFfIu_g.roa (raw, json)
Hash identifier: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=
Subject key identifier: 82:9A:C7:E3:80:29:97:0C:17:19:A3:8E:8D:E0:AE:2C:57:C8:BB:F8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019624F24805DFFE7AFB8B73B656E2CD1FEC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gprH44AplwwXGaOOjeCuLFfIu_g.roa
Signing time: Fri 11 Apr 2025 13:02:59 +0000
ROA not before: Fri 11 Apr 2025 13:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.144.30.0/24 maxlen: 24
45.144.31.0/24 maxlen: 24
45.150.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f2:48:05:df:fe:7a:fb:8b:73:b6:56:e2:cd:1f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 11 13:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829ac7e38029970c1719a38e8de0ae2c57c8bbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:39:01:da:87:4a:ea:76:19:30:f5:0e:40:
a0:8c:6d:a2:d0:53:2a:26:3d:5d:bb:b1:09:95:d3:
e9:e9:cc:09:5b:c7:0a:aa:1e:f1:cb:f5:f5:ac:63:
aa:91:e7:08:57:36:f9:a2:77:da:55:15:7d:a8:6c:
38:6d:70:da:88:54:2b:cc:8c:cf:1b:e8:13:37:8a:
f0:b9:1b:dd:7c:55:93:29:17:32:a3:f1:ba:35:12:
e0:de:36:5f:6f:4e:b3:bb:97:54:2e:4e:25:53:c3:
ce:ec:76:0c:1d:16:a1:df:0c:26:c9:48:06:76:05:
3e:c0:82:9e:27:56:a1:a5:33:f2:4c:ee:10:e1:01:
0a:22:c2:d4:77:23:7d:9c:e1:d2:76:0e:4d:5d:d2:
83:27:f7:ce:5d:e4:6a:59:dc:3e:cf:65:16:76:1a:
ac:21:5d:28:d3:1c:59:5c:c8:d1:81:e0:87:3a:a2:
40:e7:f6:37:59:7e:4b:da:22:51:e8:52:4e:e8:77:
28:16:40:ab:b6:5f:47:eb:54:14:4a:63:7a:ab:19:
fe:e8:1d:7c:1d:2f:71:d4:08:d9:04:0f:8d:07:ae:
15:7c:8a:f5:4a:9e:81:c3:a0:09:c9:79:90:3a:49:
fe:c7:cd:a5:b8:fe:f7:38:78:d3:12:75:68:46:88:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:C7:E3:80:29:97:0C:17:19:A3:8E:8D:E0:AE:2C:57:C8:BB:F8
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gprH44AplwwXGaOOjeCuLFfIu_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.30.0/23
45.150.64.0/24
Signature Algorithm: sha256WithRSAEncryption
29:70:78:e1:39:28:e3:9f:46:96:61:23:f1:a3:75:cb:8e:7d:
d6:8a:37:38:83:88:8f:cd:d4:e6:0b:9b:05:a5:a5:c0:43:26:
14:83:89:99:0b:79:8e:66:b6:c2:dd:29:5f:55:0b:3b:3a:66:
f1:32:10:d2:ae:8f:b4:6a:bc:ed:94:78:bd:df:40:ad:99:e0:
a8:0c:ef:f3:5e:6a:e4:75:77:ff:e5:25:ff:d4:24:97:cf:36:
77:02:0d:b7:b4:23:46:b1:e2:94:c0:13:4f:61:42:7c:3f:25:
2e:9f:cf:d9:5f:23:00:b4:2b:20:8d:b9:d9:9c:cc:2a:83:19:
cd:ec:8b:85:d3:ed:a8:fa:5a:24:b2:9d:50:21:cb:c9:7e:38:
29:63:79:ec:b4:2a:c5:f4:c2:62:83:38:6f:a2:44:4c:da:d4:
73:3a:50:2a:40:cb:e9:45:ec:9c:2a:81:97:fb:24:52:b1:77:
ec:63:5d:13:b6:00:2b:b1:05:a3:8a:0e:c6:ea:63:1f:b8:55:
2d:8b:5a:48:a4:ec:4f:56:d0:20:b8:b1:af:f4:99:4e:81:87:
f4:85:80:ec:50:2b:0d:c1:27:01:00:eb:d0:02:ca:6b:6c:98:
59:8b:79:1c:84:82:9f:52:c4:2e:a0:db:93:50:83:a5:fe:82:
71:2b:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:18:29 2025 by rpki-client