Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GQRXBMJLMJNUUoma4HkgBT7BJxo.roa
File: GQRXBMJLMJNUUoma4HkgBT7BJxo.roa (raw, json)
Hash identifier: vKY8BuLe5EuiohNF61YwmiR0yQcH0fmBnvvbjEVqHls=
Subject key identifier: 19:04:57:04:C2:4B:30:93:54:52:89:9A:E0:79:20:05:3E:C1:27:1A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01951AE66B076E0C6C550420619B7F15C60C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GQRXBMJLMJNUUoma4HkgBT7BJxo.roa
Signing time: Tue 18 Feb 2025 21:11:02 +0000
ROA not before: Tue 18 Feb 2025 21:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397044
IP address blocks: 94.131.48.0/20 maxlen: 24
95.164.228.0/22 maxlen: 24
95.164.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:e6:6b:07:6e:0c:6c:55:04:20:61:9b:7f:15:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 18 21:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19045704c24b30935452899ae07920053ec1271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:f4:ac:5c:6e:4a:e2:45:36:df:e1:11:81:
42:11:82:55:1d:5c:f5:b3:37:40:ed:6d:5e:3e:2e:
34:8d:f8:18:22:a7:0f:ff:48:22:b4:65:cc:d9:26:
94:05:63:17:08:86:b4:b0:ff:98:30:6c:68:52:5d:
e4:33:2b:e2:67:de:ed:59:59:cb:23:f9:59:d5:74:
cb:85:d1:9c:f3:4c:00:24:35:95:5a:89:49:ac:88:
33:34:65:a0:dd:3a:d6:c8:97:35:0f:9e:af:5a:af:
4d:90:7f:dd:25:39:5b:9c:1e:cc:52:c1:6d:4c:46:
fc:41:03:89:d1:70:7c:e6:46:be:76:b9:94:da:06:
41:c6:0b:4c:60:dc:c8:a5:83:2e:e2:d4:0c:92:a3:
e4:42:0b:9c:77:11:4b:ea:bf:c8:40:3b:eb:f3:01:
76:2a:11:a4:ae:13:fe:c4:4b:a7:96:2e:42:d3:94:
28:7b:22:b2:ce:c0:59:11:0e:98:05:f7:65:36:be:
4e:29:b3:e6:2a:79:ba:ea:d0:ee:78:f2:b6:a1:11:
6a:4c:7b:0f:8b:bf:a3:7b:9c:e5:ce:bc:87:f5:ce:
44:66:df:23:0a:13:ed:34:51:62:e1:66:64:13:5d:
95:f1:f5:d1:f3:32:8b:af:6c:ae:27:5e:f4:f6:66:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:57:04:C2:4B:30:93:54:52:89:9A:E0:79:20:05:3E:C1:27:1A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GQRXBMJLMJNUUoma4HkgBT7BJxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.48.0/20
95.164.228.0-95.164.235.255
Signature Algorithm: sha256WithRSAEncryption
3e:99:be:85:0e:98:9f:e2:b0:6d:2b:a0:c8:18:40:b9:0b:88:
59:35:3a:5f:f7:33:5e:43:d8:5f:93:d6:68:2a:61:89:fc:d6:
49:a6:62:2a:cd:43:54:5a:44:7f:12:05:e7:48:e0:87:60:bb:
b1:8f:33:6c:eb:8c:89:fd:87:c2:ba:a9:4f:28:c3:e7:a4:b3:
a4:bf:3d:41:18:3d:1f:a0:4a:4b:88:00:d9:2e:9c:39:45:bf:
98:ab:22:b2:8d:2d:44:2d:8e:ab:d7:18:25:ad:fc:57:bb:b9:
83:37:b0:e7:8a:bf:8f:60:de:60:f7:4d:ec:17:b8:5d:5c:52:
9b:e0:13:c7:7a:c8:12:27:83:39:7e:c8:da:77:e5:7e:4f:2c:
bb:f9:98:f8:4b:99:2c:61:a8:5e:a8:b2:e3:42:3b:ec:c8:55:
ae:a6:ff:52:65:ba:2f:f5:bb:ed:71:c3:36:cb:4e:fa:62:71:
54:8a:52:09:5a:42:dc:ab:53:6d:57:c8:4d:b8:8b:0f:28:a7:
43:1c:fb:1c:7a:5d:b6:eb:a3:91:d7:22:55:b3:3c:d5:a2:92:
b6:db:d0:9a:06:1a:3a:9c:15:d2:49:2a:58:24:db:f2:61:35:
28:b4:73:cc:0c:61:8d:ac:58:53:22:7a:eb:66:70:5b:9e:7c:
1d:5d:27:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:53:00 2025 by rpki-client