Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gMn5pV_lkahxIskbP9PiDtgekRI.roa
File: gMn5pV_lkahxIskbP9PiDtgekRI.roa (raw, json)
Hash identifier: 9ABPtV0XEY4pEHWa+phoQxq/60F3p0mEABFrR+J0eZw=
Subject key identifier: 80:C9:F9:A5:5F:E5:91:A8:71:22:C9:1B:3F:D3:E2:0E:D8:1E:91:12
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F7419EBD293A11F9031B62379892B9D2
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gMn5pV_lkahxIskbP9PiDtgekRI.roa
Signing time: Thu 22 May 2025 09:09:54 +0000
ROA not before: Thu 22 May 2025 09:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 84.37.20.0/23 maxlen: 24
84.37.64.0/23 maxlen: 24
84.37.70.0/23 maxlen: 24
84.37.106.0/23 maxlen: 23
84.37.108.0/23 maxlen: 24
84.37.114.0/23 maxlen: 24
84.37.118.0/23 maxlen: 24
84.37.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:41:9e:bd:29:3a:11:f9:03:1b:62:37:98:92:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 09:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80c9f9a55fe591a87122c91b3fd3e20ed81e9112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:fd:66:fe:07:33:a1:62:93:e5:4e:33:a7:
41:23:75:d7:f7:19:46:f5:e9:2b:58:43:e6:03:1c:
5e:3b:55:59:cb:31:62:36:d4:26:48:28:db:37:a3:
c0:c9:07:88:2f:4b:85:b5:16:04:9b:dd:39:d7:ee:
1f:8f:a4:3e:d0:8a:b0:02:1a:c2:ed:60:80:9e:d4:
8e:5c:bb:af:e6:85:55:7d:42:70:22:c4:5b:e9:ea:
ac:b1:1c:d4:a6:14:13:13:6c:5b:0f:a3:93:c5:76:
76:48:df:1a:0c:53:49:16:38:85:0c:3f:08:c8:6d:
45:bf:0c:bd:99:ff:f3:57:14:78:21:ba:b0:61:d6:
ad:fb:68:48:10:01:fb:71:ea:b4:a4:0d:e5:47:ed:
c3:17:00:61:a6:e3:82:23:2b:70:97:66:0c:59:df:
f7:15:07:b8:96:f6:58:f2:03:29:e3:30:9e:45:71:
19:ec:c6:96:0c:34:f7:21:cb:45:3a:38:9a:7c:e1:
c0:a9:98:4a:c0:98:57:33:5f:a5:a1:10:9f:8b:36:
ac:40:36:3b:28:d3:52:08:74:26:a4:fe:ff:e4:18:
54:87:26:38:b7:f8:a9:f8:bb:e8:7f:6b:dd:31:f4:
e0:f7:57:49:b6:9c:c6:8e:e7:16:70:ea:8a:f6:1a:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:F9:A5:5F:E5:91:A8:71:22:C9:1B:3F:D3:E2:0E:D8:1E:91:12
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gMn5pV_lkahxIskbP9PiDtgekRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.20.0/23
84.37.64.0/23
84.37.70.0/23
84.37.106.0-84.37.109.255
84.37.114.0/23
84.37.118.0/23
84.37.132.0/23
Signature Algorithm: sha256WithRSAEncryption
59:ea:22:05:14:af:8f:d3:7a:dd:65:77:fe:55:ec:ea:9e:ea:
a6:aa:8e:35:fa:7f:19:ee:d7:ec:05:86:b7:6e:0a:68:23:36:
0a:bd:55:bc:1c:69:e6:60:57:7e:ca:ab:2c:7d:0a:71:00:c7:
88:df:a2:aa:69:ba:b0:83:89:94:58:a5:0b:b6:68:a9:aa:6b:
75:f5:9b:f5:3b:6d:2c:bc:8c:a7:0b:a2:c1:55:29:ef:90:f5:
a1:2a:03:81:f1:0b:1f:3a:d0:a7:d8:3e:4e:c1:e4:2b:6a:be:
74:8c:29:36:d4:6d:51:59:6b:fe:b3:31:06:c4:7c:19:37:53:
1e:27:ef:1b:ba:85:07:a1:ab:f6:4d:15:5b:6e:c2:3d:51:44:
84:e0:7b:49:24:cf:11:e9:fd:b8:37:7a:5b:02:90:fd:2d:b7:
88:a5:55:44:a4:bc:27:b9:3a:5b:94:92:81:56:3b:ad:af:5d:
ae:2e:f4:62:ac:ee:1c:99:de:72:fc:45:4d:ae:ae:a6:6e:5d:
f2:68:8b:50:21:f4:14:43:43:9a:b7:c3:01:be:a5:fb:61:4d:
40:5b:db:2a:b5:5d:2e:07:77:ab:fd:32:83:23:1e:90:a8:9e:
a1:19:c4:3d:a9:f7:34:80:9d:ac:09:c9:bf:0f:3b:a8:76:c5:
c4:ea:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:21 2025 by rpki-client