Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GfkPpG3jVt2n60zPJ9s5Vy8yhaQ.roa
File: GfkPpG3jVt2n60zPJ9s5Vy8yhaQ.roa (raw, json)
Hash identifier: YVH0rUcnRZ2SRO66Xv0indDasza2lTxZOu9QMKBokA8=
Subject key identifier: 19:F9:0F:A4:6D:E3:56:DD:A7:EB:4C:CF:27:DB:39:57:2F:32:85:A4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC2110279D67DF4A03A777260DF804
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GfkPpG3jVt2n60zPJ9s5Vy8yhaQ.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209396
IP address blocks: 45.86.20.0/22 maxlen: 24
45.151.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:10:27:9d:67:df:4a:03:a7:77:26:0d:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19f90fa46de356dda7eb4ccf27db39572f3285a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:82:ee:7b:23:b0:c3:68:f9:68:e3:1d:05:
45:02:10:d5:21:4e:9b:7c:8f:d9:bb:03:41:4a:49:
e2:7d:6d:3b:01:20:3f:0a:5b:39:87:e8:5d:c7:6a:
a8:72:68:23:71:3f:ae:df:b5:50:a7:d8:62:5d:5e:
08:01:45:35:ee:de:56:82:4d:0b:5a:57:c5:39:4a:
be:76:9b:1c:26:c5:ec:2b:1c:54:8b:b4:7e:14:32:
ae:8c:37:be:2f:25:de:95:57:7a:cd:85:ee:47:b9:
c8:1e:32:8f:2c:14:22:04:b7:50:e3:c9:e1:e1:34:
dd:69:88:29:e0:4b:2e:e2:13:80:fa:fa:eb:15:e6:
fc:b2:14:70:86:ec:df:f4:4a:20:0f:fa:13:0a:11:
bc:9c:c5:65:e9:d5:c6:0d:c7:8b:84:13:a8:1f:3e:
9b:ee:28:88:2a:e5:aa:ab:4c:39:e8:e4:3a:cf:a9:
8c:de:bb:28:3e:b1:be:a6:ad:8d:cd:2c:0d:a6:ab:
8f:3b:d6:9c:a9:af:ff:19:34:04:fb:00:ca:b8:ef:
23:ca:71:79:9c:50:f0:60:ec:35:39:0d:8b:14:d3:
3d:13:b3:fa:ba:3e:2c:bd:fa:b0:f9:57:a2:3b:a6:
26:37:01:bc:b5:bf:2e:9a:12:fc:66:e4:20:26:68:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:0F:A4:6D:E3:56:DD:A7:EB:4C:CF:27:DB:39:57:2F:32:85:A4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GfkPpG3jVt2n60zPJ9s5Vy8yhaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.20.0/22
45.151.196.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c9:32:ee:19:81:f4:2a:59:5a:42:cd:98:51:2c:01:41:bc:
86:1a:c8:e0:c9:aa:9a:3f:1e:91:7a:fd:e6:ca:8b:41:40:dc:
50:3b:55:9c:53:1c:f8:0f:94:d4:37:eb:86:96:03:fc:46:2d:
37:ab:89:fd:29:a7:4b:06:92:c3:f1:a9:82:5d:70:06:07:cd:
de:2d:56:b7:0e:b5:fb:0f:80:d3:a3:59:0b:b1:a5:2d:f3:74:
90:b7:70:03:24:2b:84:52:8f:b6:82:16:a6:fa:be:90:12:a9:
d1:75:6d:18:96:5d:01:47:3e:38:d8:d7:17:5e:8e:fa:64:59:
65:83:0b:b1:63:54:55:a3:fc:a2:1a:bc:0a:14:eb:a0:bb:b0:
11:41:7d:dc:95:54:d5:70:2a:a2:ae:af:3e:ab:1e:5e:ff:70:
09:76:62:a9:d0:4d:84:0b:bc:7a:d3:cc:54:e4:66:dc:85:79:
c3:5c:8e:45:93:8c:34:37:d0:69:9d:40:90:30:cb:47:32:55:
31:ed:9d:d0:07:37:d4:31:31:76:5d:be:a8:29:3c:4a:45:86:
03:af:69:7e:1b:d0:a2:71:c0:6d:ff:34:6e:0b:de:cd:6f:3b:
68:29:ef:5f:ec:37:86:2d:67:67:f9:89:a5:46:0c:6e:0b:26:
cf:6e:12:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi/CEQJ51n30oDp3cmDfgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY5MGZhNDZkZTM1NmRkYTdlYjRjY2YyN2RiMzk1NzJmMzI4NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC2C7nsjsMNo+WjjHQVFAhDVIU6b
fI/ZuwNBSknifW07ASA/Cls5h+hdx2qocmgjcT+u37VQp9hiXV4IAUU17t5Wgk0L
WlfFOUq+dpscJsXsKxxUi7R+FDKujDe+LyXelVd6zYXuR7nIHjKPLBQiBLdQ48nh
4TTdaYgp4Esu4hOA+vrrFeb8shRwhuzf9EogD/oTChG8nMVl6dXGDceLhBOoHz6b
7iiIKuWqq0w56OQ6z6mM3rsoPrG+pq2NzSwNpquPO9acqa//GTQE+wDKuO8jynF5
nFDwYOw1OQ2LFNM9E7P6uj4svfqw+VeiO6YmNwG8tb8umhL8ZuQgJmjmjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBn5D6Rt41bdp+tMzyfbOVcvMoWkMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvR2ZrUHBHM2pWdDJuNjB6UEo5czVWeTh5aGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVYUAwQC
LZfEMA0GCSqGSIb3DQEBCwUAA4IBAQBkyTLuGYH0KllaQs2YUSwBQbyGGsjgyaqa
Px6Rev3myotBQNxQO1WcUxz4D5TUN+uGlgP8Ri03q4n9KadLBpLD8amCXXAGB83e
LVa3DrX7D4DTo1kLsaUt83SQt3ADJCuEUo+2gham+r6QEqnRdW0Yll0BRz442NcX
Xo76ZFllgwuxY1RVo/yiGrwKFOugu7ARQX3clVTVcCqirq8+qx5e/3AJdmKp0E2E
C7x608xU5GbchXnDXI5Fk4w0N9BpnUCQMMtHMlUx7Z3QBzfUMTF2Xb6oKTxKRYYD
r2l+G9CiccBt/zRuC97NbztoKe9f7DeGLWdn+YmlRgxuCybPbhKH
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:47 2025 by rpki-client