Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/glpdHMRUe--_MG3TqcToADTZm2g.roa
File: glpdHMRUe--_MG3TqcToADTZm2g.roa (raw, json)
Hash identifier: nYyFnTdPiSLG8Bu+HPTjJb4kOHlPj2DnjVnWwqRkp6Y=
Subject key identifier: 82:5A:5D:1C:C4:54:7B:EF:BF:30:6D:D3:A9:C4:E8:00:34:D9:9B:68
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 01942067C044CF73ED781EFA9FFE842E6A83
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/glpdHMRUe--_MG3TqcToADTZm2g.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61094
IP address blocks: 185.103.216.0/22 maxlen: 24
185.111.190.0/23 maxlen: 24
185.245.12.0/22 maxlen: 24
2a02:e220::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c0:44:cf:73:ed:78:1e:fa:9f:fe:84:2e:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=825a5d1cc4547befbf306dd3a9c4e80034d99b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:60:e5:3c:2e:d3:df:b4:d5:1a:00:be:30:
78:5c:74:25:95:9f:a4:ad:ae:ac:81:55:62:a6:e7:
4a:c8:99:d8:71:0c:45:a3:8e:17:49:28:c6:54:5d:
79:a8:cc:43:6c:79:14:1a:9d:37:fd:a6:27:5d:3c:
d3:36:78:07:3f:23:8a:e2:f0:bc:5e:e7:d5:9e:f2:
03:15:6c:4d:39:64:c6:6c:65:5b:9b:aa:81:cb:c2:
88:fe:bc:1a:a2:34:e2:ec:f4:bc:3a:d6:c5:49:8a:
b3:a4:34:50:18:4e:15:5f:bf:6a:39:8e:bc:3e:b8:
b1:6a:6a:d8:55:42:4e:f2:84:e2:f1:9e:8a:d5:cb:
02:bc:9a:29:ae:b8:31:c8:5e:97:99:ce:7b:e3:57:
8b:2f:72:c3:da:18:a6:f6:2f:37:06:98:56:a1:3d:
0b:99:3e:cb:cd:03:9d:09:83:65:48:dd:24:d1:51:
97:34:87:21:64:19:2f:7c:55:94:cf:96:55:17:9d:
bf:72:61:a8:c0:e0:41:c1:c2:b9:e8:78:5a:ff:36:
6c:d4:93:c6:e2:43:13:22:5f:a3:35:3d:8d:e5:52:
f2:68:9d:ba:0a:fe:4e:6a:f2:db:b6:e4:da:4f:23:
62:84:41:91:51:f5:ef:d9:cc:82:56:f5:46:b5:42:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:5D:1C:C4:54:7B:EF:BF:30:6D:D3:A9:C4:E8:00:34:D9:9B:68
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/glpdHMRUe--_MG3TqcToADTZm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.216.0/22
185.111.190.0/23
185.245.12.0/22
IPv6:
2a02:e220::/30
Signature Algorithm: sha256WithRSAEncryption
45:17:21:4d:db:10:5e:98:63:22:a1:a3:aa:4c:36:10:65:6c:
d5:0d:bb:33:90:89:f1:53:6f:50:6e:8b:4e:c4:70:dd:55:cf:
c9:34:45:0b:db:f8:3b:cc:c8:de:e5:84:e0:39:d3:a9:74:a5:
94:ab:6a:5f:4c:4d:87:65:e2:4a:7f:4c:85:cf:9c:42:16:79:
ec:3d:43:5e:95:76:9b:eb:a3:9a:b1:cd:1d:72:33:87:05:d6:
68:6e:5e:66:c5:5e:e3:b2:19:10:18:5d:69:2a:30:5e:f5:dc:
be:00:96:90:33:7f:2f:05:1d:0f:11:de:d6:64:1f:f3:2a:2f:
7f:8f:0b:17:68:be:13:ca:a2:7e:82:d3:cf:cc:af:76:31:ce:
0e:d6:0b:c6:3d:d3:15:20:5d:cd:00:a2:11:7b:1c:6f:62:53:
ac:13:4f:be:39:95:9f:b4:b0:d6:5b:2d:95:e0:91:1b:47:2c:
1e:dc:6e:b7:a0:99:39:80:6e:86:ba:7b:c0:00:ca:0a:3b:0a:
c4:8b:f0:0d:22:3a:27:d0:dc:0d:91:3e:26:6e:d8:97:33:29:
c8:7a:cb:45:1b:5c:7b:de:68:39:98:02:b2:1e:7a:6d:d1:2a:
e6:a7:df:dc:7f:c7:e3:36:85:2f:2b:ae:9c:a2:a4:0d:17:41:
a7:a0:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:11 2025 by rpki-client