Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/GK_repQ6rwK9wKBexoj_8KHn0ps.roa
File: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (raw, json)
Hash identifier: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=
Subject key identifier: 18:AF:EB:7A:94:3A:AF:02:BD:C0:A0:5E:C6:88:FF:F0:A1:E7:D2:9B
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019423D6C765A57ED98B0FCAD705F87FF1A5
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/GK_repQ6rwK9wKBexoj_8KHn0ps.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214678
IP address blocks: 45.148.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c7:65:a5:7e:d9:8b:0f:ca:d7:05:f8:7f:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18afeb7a943aaf02bdc0a05ec688fff0a1e7d29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:4f:59:2c:96:fa:7d:31:a4:f0:3b:5c:cd:
68:37:5f:5e:ec:b1:dd:b7:bc:bd:9f:e7:64:6a:41:
a4:38:85:98:d4:2f:6b:b5:b8:eb:25:20:a9:25:b2:
f8:1f:74:ca:97:f5:82:b8:2e:91:02:85:2a:57:4c:
bd:aa:7f:df:6b:15:b6:d1:7b:f8:4f:e9:64:b8:6d:
b9:72:48:56:25:c1:c4:a8:8b:14:ac:1c:13:59:62:
49:4f:9c:21:c2:8d:57:ea:84:bb:b4:a0:82:80:ec:
e6:51:1f:02:68:3b:b7:c3:08:ca:f3:2a:18:89:bc:
5b:76:69:47:3d:38:42:28:ee:b0:e4:18:43:3b:42:
8f:ef:20:3a:e0:5c:a1:98:a4:be:0f:dd:15:c4:9c:
f1:b7:36:c3:ec:6e:92:e2:9b:36:4d:05:0a:1b:5f:
da:ff:f9:dd:71:c4:4a:a0:15:49:1f:5e:fe:ed:b4:
ac:68:b9:c0:21:df:fd:93:58:95:e1:e7:c2:de:2c:
9c:f3:12:76:fd:b1:63:92:60:1c:ba:6e:83:af:ae:
53:27:24:d8:cf:d3:05:13:bf:f1:85:c3:4e:28:b2:
8d:53:6a:cf:ab:19:89:e9:af:7d:d8:ba:2a:bb:1b:
78:8e:e8:31:61:3f:a8:50:34:c5:96:61:f1:92:b0:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:EB:7A:94:3A:AF:02:BD:C0:A0:5E:C6:88:FF:F0:A1:E7:D2:9B
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/GK_repQ6rwK9wKBexoj_8KHn0ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.74.0/23
Signature Algorithm: sha256WithRSAEncryption
07:55:43:e1:ae:b5:dc:52:37:cc:e0:40:54:f6:d6:65:99:49:
26:18:6a:a6:35:d6:64:b7:1e:77:95:ef:7c:80:fa:01:39:cf:
db:d9:76:93:87:52:5f:4b:45:fe:43:a9:50:2c:6d:cf:7e:cb:
fc:e1:8c:48:4d:b0:b0:63:55:07:39:50:90:1b:0d:98:ce:52:
87:47:e0:9d:59:4c:63:e2:c5:2a:9d:a7:5b:cc:73:0b:c5:b0:
ec:36:54:0e:3c:6a:0d:00:0d:d2:ad:58:80:e1:05:04:96:cc:
98:7c:04:70:e7:40:cd:d4:38:b5:9e:ea:f8:3f:9c:f9:c7:36:
ba:03:b9:4a:56:c7:b9:8d:33:2f:12:7e:24:7b:eb:5b:bd:22:
9c:63:ca:7c:42:df:d6:43:dc:aa:e5:9e:49:d0:73:12:40:5b:
53:46:bb:13:ca:84:28:ec:57:a3:12:b8:5b:da:46:25:99:60:
49:a2:87:a6:ef:86:68:4a:5b:6b:ed:2d:67:8f:d2:69:e1:46:
8d:88:6f:21:f2:a7:aa:21:cf:d1:af:03:60:ac:85:c9:8c:95:
d6:6d:db:b3:5e:a3:35:22:b8:70:e2:ed:78:8b:ef:dc:c3:f8:
2a:53:99:05:60:57:fe:a5:f1:09:68:ec:77:e9:ef:9a:41:72:
40:80:88:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1sdlpX7Ziw/K1wX4f/GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjUwMTAxMjE0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGFmZWI3YTk0M2FhZjAyYmRjMGEwNWVjNjg4ZmZmMGExZTdkMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLdPWSyW+n0xpPA7XM1oN19e7LHd
t7y9n+dkakGkOIWY1C9rtbjrJSCpJbL4H3TKl/WCuC6RAoUqV0y9qn/faxW20Xv4
T+lkuG25ckhWJcHEqIsUrBwTWWJJT5whwo1X6oS7tKCCgOzmUR8CaDu3wwjK8yoY
ibxbdmlHPThCKO6w5BhDO0KP7yA64FyhmKS+D90VxJzxtzbD7G6S4ps2TQUKG1/a
//ndccRKoBVJH17+7bSsaLnAId/9k1iV4efC3iyc8xJ2/bFjkmAcum6Dr65TJyTY
z9MFE7/xhcNOKLKNU2rPqxmJ6a992Loquxt4jugxYT+oUDTFlmHxkrCKXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBiv63qUOq8CvcCgXsaI//Ch59KbMB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvR0tfcmVwUTZyd0s5d0tCZXhval84S0huMHBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZRKMA0G
CSqGSIb3DQEBCwUAA4IBAQAHVUPhrrXcUjfM4EBU9tZlmUkmGGqmNdZktx53le98
gPoBOc/b2XaTh1JfS0X+Q6lQLG3Pfsv84YxITbCwY1UHOVCQGw2YzlKHR+CdWUxj
4sUqnadbzHMLxbDsNlQOPGoNAA3SrViA4QUElsyYfARw50DN1Di1nur4P5z5xza6
A7lKVse5jTMvEn4ke+tbvSKcY8p8Qt/WQ9yq5Z5J0HMSQFtTRrsTyoQo7FejErhb
2kYlmWBJooem74ZoSltr7S1nj9Jp4UaNiG8h8qeqIc/RrwNgrIXJjJXWbduzXqM1
Irhw4u14i+/cw/gqU5kFYFf+pfEJaOx36e+aQXJAgIj/
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:48 2025 by rpki-client