Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/GfCkDNWZJC7tTqAONgQkcSI9t8c.roa
File: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (raw, json)
Hash identifier: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=
Subject key identifier: 19:F0:A4:0C:D5:99:24:2E:ED:4E:A0:0E:36:04:24:71:22:3D:B7:C7
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 0196D85549C69DD764FFFF8C72BDE1C7F937
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/GfCkDNWZJC7tTqAONgQkcSI9t8c.roa
Signing time: Fri 16 May 2025 09:03:10 +0000
ROA not before: Fri 16 May 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49406
IP address blocks: 89.18.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:55:49:c6:9d:d7:64:ff:ff:8c:72:bd:e1:c7:f9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: May 16 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19f0a40cd599242eed4ea00e36042471223db7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:9f:44:07:e4:3b:a9:69:de:0f:38:da:11:
5e:f9:ff:ac:6b:de:77:39:8e:5a:ee:c0:04:d8:51:
cf:c7:63:b3:e6:c5:df:b5:bc:6b:70:7b:a3:4f:f9:
0a:76:75:31:c3:c0:75:b8:4f:b3:78:1e:f4:f7:5c:
73:89:2a:65:2b:f0:3e:ff:60:b5:ba:c3:d4:83:9b:
3d:29:7b:73:41:b4:5d:95:e2:b3:ed:51:5c:d9:09:
8c:88:37:e0:12:4b:b7:4f:37:ea:42:5d:ce:e5:c3:
ae:97:1f:f8:17:7f:3f:c4:28:79:ce:3a:12:46:32:
f9:8c:c6:ab:04:bd:77:ea:7c:af:89:c0:76:c3:16:
50:e3:fc:87:50:ab:fa:17:a9:f6:5d:1b:08:36:9b:
97:c9:61:bc:03:5a:1a:30:a0:be:92:e7:15:9c:83:
b3:f3:0a:be:e3:d2:66:61:75:1f:d7:75:78:53:1e:
7c:20:b5:57:f7:af:da:33:f0:c0:0a:45:31:9f:93:
e2:5a:a4:8c:88:9c:fa:5c:9f:e1:f0:41:c8:e0:75:
f9:36:84:b0:cd:3d:a2:e5:0a:d2:05:a3:23:b2:9c:
64:a4:cd:71:d3:ba:75:ce:c3:6c:11:43:9e:8d:38:
9f:6b:5e:4f:c7:a1:69:4f:e3:96:38:18:29:4b:33:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:A4:0C:D5:99:24:2E:ED:4E:A0:0E:36:04:24:71:22:3D:B7:C7
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/GfCkDNWZJC7tTqAONgQkcSI9t8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:dd:68:df:a6:f3:e1:b8:73:b0:84:ad:51:ef:7c:11:32:b3:
59:02:11:c1:36:2f:c2:ed:72:8e:94:a8:f8:f5:22:d5:20:42:
f6:b3:c6:21:fd:a1:bb:6b:63:16:2b:eb:87:a9:91:1a:a2:0f:
13:65:d9:c3:ba:ed:a0:aa:3f:72:86:1a:fd:d3:c3:4e:9b:e4:
ff:00:0b:c1:0a:95:c0:f3:cb:57:b5:37:75:ae:a1:87:cf:4c:
99:56:d7:00:f6:e0:5c:a7:a4:74:22:6d:66:b9:48:43:54:97:
39:85:0d:65:68:5f:27:1b:97:50:1b:5e:a1:4f:92:00:41:b4:
99:5a:fd:d2:f2:eb:ce:20:e6:53:00:a4:c3:e3:5d:0a:6d:1a:
5c:7e:f7:8d:8e:11:c5:40:8c:9a:f8:c7:51:ce:59:be:97:e5:
f9:23:0e:ad:9f:2e:73:ae:47:c8:eb:80:e0:35:e7:1c:cb:65:
59:20:73:af:65:b5:57:34:d6:69:f8:0a:9f:b0:f3:ba:9f:a0:
de:b6:13:49:d7:91:99:14:a8:47:8a:78:20:58:52:5e:38:05:
79:13:32:36:56:0f:6c:2e:ac:e5:00:c3:ea:c0:39:bc:78:fe:
ae:d6:b2:0e:b9:12:b7:20:02:de:83:eb:44:28:9c:5d:d5:6e:
e3:7a:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:30:28 2025 by rpki-client