Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_GtticsJYfVQoe0D3zav_vzfdBI.roa
File: _GtticsJYfVQoe0D3zav_vzfdBI.roa (raw, json)
Hash identifier: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=
Subject key identifier: FC:6B:6D:89:CB:09:61:F5:50:A1:ED:03:DF:36:AF:FE:FC:DF:74:12
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1D599B47C970771036091880DFC0A
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_GtticsJYfVQoe0D3zav_vzfdBI.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205754
IP address blocks: 95.85.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d5:99:b4:7c:97:07:71:03:60:91:88:0d:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6b6d89cb0961f550a1ed03df36affefcdf7412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:27:b8:23:30:ac:d8:55:b3:ed:a2:e1:d9:
a3:a3:83:29:ab:95:e2:e1:d2:62:81:35:49:05:fa:
b9:d5:50:47:d3:0e:49:e9:8c:5d:f9:c1:40:3c:f5:
71:fc:94:0a:2c:b8:1e:16:ee:9d:ad:84:e0:0e:91:
01:48:b5:f6:90:2b:05:fb:5c:f7:51:d2:47:b5:80:
66:af:29:0f:2a:0a:b3:ea:73:e5:da:7c:be:e6:4b:
e5:45:2f:45:c6:ee:96:7f:db:66:b5:de:e6:41:ce:
50:aa:40:ba:2f:3a:31:f6:47:85:a7:4f:cf:8a:77:
59:49:d9:03:f0:fd:79:00:39:a4:3a:6b:76:35:cf:
8e:24:6a:a4:47:7f:0b:d7:c5:6e:a2:01:17:ac:f4:
dc:f5:4c:6d:98:06:74:f6:07:71:38:dd:5f:53:39:
00:fd:c7:8f:94:b6:9c:1d:05:6c:82:38:08:ea:e2:
bb:42:c7:0d:26:b3:b9:9d:49:95:61:05:a3:c9:b8:
45:47:4e:c3:93:53:6f:be:95:ab:ac:b6:e5:e3:60:
97:0d:b8:21:fb:7f:7c:95:6d:be:d5:02:25:34:d0:
80:40:42:c9:b6:8f:9f:c5:8e:3f:fa:49:0a:88:1a:
d7:a2:7c:8a:aa:cb:98:77:2f:73:27:6c:c2:b5:15:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6B:6D:89:CB:09:61:F5:50:A1:ED:03:DF:36:AF:FE:FC:DF:74:12
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_GtticsJYfVQoe0D3zav_vzfdBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:97:ae:2f:da:27:ed:32:b8:6f:69:85:84:b1:6f:6d:c3:f5:
cd:cc:ea:43:14:6a:19:c8:08:b1:46:38:db:2c:b3:4d:07:dc:
77:76:27:a6:a8:ea:36:5b:f9:6e:00:ba:0d:ec:2c:c2:49:c0:
ac:c6:69:ed:46:66:9d:8a:01:08:d0:c4:c6:a8:2f:e6:84:8a:
b2:4a:29:a6:59:bd:d3:64:11:c4:71:80:8b:a6:2f:e8:f7:76:
c7:61:63:07:f9:01:e0:7a:65:73:c7:ae:11:6b:be:14:e0:89:
ee:58:49:98:a0:1d:03:20:79:1c:e9:3b:c8:2e:53:96:60:da:
f4:58:0e:ca:99:92:40:7f:3b:80:5e:f4:2d:98:1d:d5:c3:34:
1d:70:ed:69:05:3f:38:b0:43:7d:49:2a:23:7b:09:1d:6e:51:
7e:2a:53:c4:5b:13:ad:89:56:f6:e8:29:2f:db:ca:e8:e8:cb:
89:a7:71:6e:74:e2:96:45:b8:26:6c:a4:22:87:23:43:75:d4:
55:49:d6:b4:ed:ef:6c:4b:25:01:27:ca:46:74:16:df:29:1c:
f1:38:f3:21:33:3f:fa:e1:12:4e:4d:b9:a5:73:94:bc:3f:9e:
6a:93:83:ac:77:62:28:9f:b1:4c:43:39:1f:3f:79:96:81:bc:
b8:b4:41:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdWZtHyXB3EDYJGIDfwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwMTAxMTE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzZiNmQ4OWNiMDk2MWY1NTBhMWVkMDNkZjM2YWZmZWZjZGY3NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BMnuCMwrNhVs+2i4dmjo4Mpq5Xi
4dJigTVJBfq51VBH0w5J6Yxd+cFAPPVx/JQKLLgeFu6drYTgDpEBSLX2kCsF+1z3
UdJHtYBmrykPKgqz6nPl2ny+5kvlRS9Fxu6Wf9tmtd7mQc5QqkC6Lzox9keFp0/P
indZSdkD8P15ADmkOmt2Nc+OJGqkR38L18VuogEXrPTc9UxtmAZ09gdxON1fUzkA
/cePlLacHQVsgjgI6uK7QscNJrO5nUmVYQWjybhFR07Dk1NvvpWrrLbl42CXDbgh
+398lW2+1QIlNNCAQELJto+fxY4/+kkKiBrXonyKqsuYdy9zJ2zCtRWx6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxrbYnLCWH1UKHtA982r/7833QSMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvX0d0dGljc0pZZlZRb2UwRDN6YXZfdnpmZEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1VUMA0G
CSqGSIb3DQEBCwUAA4IBAQBPl64v2iftMrhvaYWEsW9tw/XNzOpDFGoZyAixRjjb
LLNNB9x3diemqOo2W/luALoN7CzCScCsxmntRmadigEI0MTGqC/mhIqySimmWb3T
ZBHEcYCLpi/o93bHYWMH+QHgemVzx64Ra74U4InuWEmYoB0DIHkc6TvILlOWYNr0
WA7KmZJAfzuAXvQtmB3VwzQdcO1pBT84sEN9SSojewkdblF+KlPEWxOtiVb26Ckv
28ro6MuJp3FudOKWRbgmbKQihyNDddRVSda07e9sSyUBJ8pGdBbfKRzxOPMhMz/6
4RJOTbmlc5S8P55qk4Osd2Ion7FMQzkfP3mWgby4tEGE
-----END CERTIFICATE-----
Generated at Tue Apr 15 21:27:18 2025 by rpki-client