Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gkgg0Lfpcc-sO5jf9eABHYhTiMc.roa
File: Gkgg0Lfpcc-sO5jf9eABHYhTiMc.roa (raw, json)
Hash identifier: IwyVOEDa9b+impUPbrkLDPybytKDGxs44BRXwrgnym4=
Subject key identifier: 1A:48:20:D0:B7:E9:71:CF:AC:3B:98:DF:F5:E0:01:1D:88:53:88:C7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF7C0E5C85A9F1CCF8E170D2A9FAB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gkgg0Lfpcc-sO5jf9eABHYhTiMc.roa
Signing time: Thu 02 Jan 2025 05:49:39 +0000
ROA not before: Thu 02 Jan 2025 05:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207154
IP address blocks: 92.253.192.0/22 maxlen: 24
93.170.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f7:c0:e5:c8:5a:9f:1c:cf:8e:17:0d:2a:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4820d0b7e971cfac3b98dff5e0011d885388c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:17:1d:0e:e7:ff:5f:96:e5:7a:1a:35:c9:
12:85:26:9d:65:44:81:85:88:c5:da:dc:bf:7c:cf:
7c:85:4f:4d:b6:eb:62:df:4d:5c:81:01:89:3a:7d:
5b:b7:91:54:77:da:48:72:46:c2:d0:94:68:1d:e5:
b9:65:92:3a:21:ec:a5:c3:29:1d:87:44:dc:54:14:
34:36:a2:b3:a2:85:6a:3b:52:75:59:62:50:33:bc:
8d:d1:ac:24:13:e3:8b:d9:ef:88:4b:6c:74:47:c8:
01:65:1e:99:69:e0:c0:2e:0e:11:e8:55:e1:a4:94:
1f:e7:23:62:49:11:50:40:f3:3b:67:31:6d:c4:73:
3b:3f:46:89:fb:dd:60:94:79:7d:5f:62:86:12:58:
9e:a6:50:cc:6d:ee:95:2e:60:14:f1:a9:83:60:e8:
b5:5b:86:c7:cd:48:bc:2b:4f:44:44:75:f8:10:56:
ab:9e:eb:be:b7:fc:5c:33:e3:b6:35:e9:a3:1b:e7:
4d:a8:cf:c5:1e:e1:52:4e:6b:06:f2:ea:df:4c:b9:
3c:9c:4b:23:ef:ff:e4:4f:45:31:34:4a:5c:51:94:
58:1c:b7:0b:aa:8a:b8:3a:05:b0:7e:20:a3:5b:59:
ec:8f:10:9f:47:d2:74:51:9b:ba:b6:92:38:7c:97:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:20:D0:B7:E9:71:CF:AC:3B:98:DF:F5:E0:01:1D:88:53:88:C7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Gkgg0Lfpcc-sO5jf9eABHYhTiMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.192.0/22
93.170.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:12:5d:0e:5c:ef:a7:a6:9c:b9:e5:3d:e8:c3:f8:7a:4a:c4:
c6:80:86:c3:c0:7c:7b:12:38:63:8b:7f:8b:7b:90:5f:ab:9c:
63:32:5b:07:4e:03:38:d3:02:a5:66:72:83:59:d6:f7:31:91:
a6:08:a5:d2:92:2d:37:9f:b6:5a:ed:bb:82:3c:61:61:09:de:
1b:3b:cd:b4:70:48:0f:81:65:84:aa:84:da:a5:82:77:7d:87:
c3:36:07:f9:6e:bf:57:f3:4a:13:86:62:dc:cb:d9:e1:97:ac:
1d:78:b1:26:6b:d6:cb:45:12:59:c7:25:ca:ee:60:5f:45:6c:
5a:a6:66:cd:2d:fe:04:78:6c:4b:d0:1e:b2:f2:2f:7a:03:dc:
ce:a5:52:81:e3:a6:2e:79:75:f1:cd:ca:64:67:42:13:95:34:
8c:7e:67:2b:6c:70:d3:a1:ea:95:fe:fd:9e:ca:1e:bf:8a:34:
12:54:d3:4b:09:e2:83:1e:4a:f6:4b:c2:c9:36:b8:13:26:67:
94:9c:ff:f8:c6:d5:76:7f:71:0b:62:bd:e1:2f:c4:73:df:b0:
71:0d:56:46:2a:c7:91:4a:3e:35:51:10:42:e1:36:74:84:1d:
a5:8d:2d:d5:ec:6b:4c:cd:0f:ce:dd:c9:cc:25:5d:4e:cc:fb:
7a:78:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:17 2025 by rpki-client