Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa
File: GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa (raw, json)
Hash identifier: /WVZb52tGGnvS1Lpmu++5VCxojp2nMgaocCDFVDfPQY=
Subject key identifier: 18:FA:74:08:0E:1D:24:49:97:3E:DD:C5:BC:A3:AE:07:A6:35:02:3A
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01969F995E92E4C72050998102F26B5692B5
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa
Signing time: Mon 05 May 2025 08:39:10 +0000
ROA not before: Mon 05 May 2025 08:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 91.198.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:99:5e:92:e4:c7:20:50:99:81:02:f2:6b:56:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: May 5 08:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18fa74080e1d2449973eddc5bca3ae07a635023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:43:e4:0d:47:41:d3:f9:bf:51:f3:a8:fc:
31:52:cc:56:71:a9:dc:85:3e:8d:6b:67:27:84:9a:
2a:5d:0a:3a:81:c1:44:d9:d3:35:42:d3:10:6a:39:
93:f2:95:b6:a8:47:5d:da:e6:88:4e:31:04:69:2f:
77:fe:80:d5:56:74:36:71:ef:2d:7d:1b:89:f7:cb:
e9:cf:20:4e:0d:e2:04:54:83:11:2c:e3:c6:64:9c:
5c:51:ec:88:c4:cf:f0:15:80:99:aa:64:78:8b:a6:
0b:1e:86:40:5e:45:10:13:3a:4d:d6:c6:75:22:18:
16:80:81:51:c9:0e:04:e9:3d:8a:90:c4:66:29:8f:
fa:00:8f:cf:9f:e6:9e:52:78:7e:1c:b4:07:4c:7c:
82:8c:00:bd:42:d2:34:ee:06:57:86:66:42:e0:e9:
97:f0:a7:22:de:66:8d:7f:8f:e1:49:7f:c7:7e:8c:
5b:53:ce:5e:95:8c:5e:9e:0a:df:4d:cc:28:fb:52:
65:6c:a8:e0:06:ed:db:9e:bd:20:1b:32:63:fa:ad:
51:b2:2a:4f:20:04:13:bb:00:f1:37:aa:57:c3:aa:
78:9e:73:05:0e:b9:0e:52:ff:fc:2c:f1:92:46:2f:
1d:8e:02:bc:73:ff:7b:d9:3c:78:37:73:72:21:8a:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:74:08:0E:1D:24:49:97:3E:DD:C5:BC:A3:AE:07:A6:35:02:3A
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.8.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ba:6f:40:a3:d0:b9:78:9a:b1:e6:63:a8:9c:c5:66:85:7d:
47:4b:8f:3e:9f:9a:41:7c:aa:38:d1:56:26:45:65:76:d7:dd:
52:2a:33:44:3e:0a:fd:f0:37:a4:56:78:e0:d4:b3:54:ab:69:
c8:68:dc:9e:97:a1:7e:55:84:72:90:8f:07:df:1b:16:9d:53:
fc:71:ca:fe:e5:3e:33:63:a8:62:8e:23:59:36:7b:4a:54:a9:
36:78:df:1f:c0:8a:6f:bb:ec:bd:d4:ba:25:a7:c4:f0:47:1b:
95:d9:c4:16:24:17:58:76:12:b5:47:81:8f:c3:13:d4:09:c8:
c4:8c:f6:53:a1:c3:19:1b:36:f3:75:95:0c:0d:fe:45:6d:6f:
0f:41:dd:97:7d:2e:dd:06:66:7c:d3:b3:15:da:34:93:6f:69:
44:49:b1:10:bb:a5:6e:6f:a1:f6:d2:88:f4:0d:d7:81:c3:58:
fb:9a:21:7c:fd:b0:9c:60:78:b6:ec:fc:9c:0c:77:f8:3b:36:
1a:1e:67:b4:3b:8c:e8:8f:64:54:be:46:35:c0:f3:13:96:09:
92:2d:cf:7b:8c:08:30:6a:67:52:14:58:2b:50:b6:05:de:e5:
33:28:ca:14:fd:6d:ee:76:bd:90:db:f0:9e:12:66:7e:91:a3:
8f:9d:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:09:15 2025 by rpki-client