Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Gyz6a3KXlcszmeD4XP7JYSSJB98.roa
File: Gyz6a3KXlcszmeD4XP7JYSSJB98.roa (raw, json)
Hash identifier: AzG7hu1mJnSnaE2NJTDYkswyaDmFnEmOHi9jFFpjg7U=
Subject key identifier: 1B:2C:FA:6B:72:97:95:CB:33:99:E0:F8:5C:FE:C9:61:24:89:07:DF
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D76F4C609D314214C913F1B48F190
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Gyz6a3KXlcszmeD4XP7JYSSJB98.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41001
IP address blocks: 86.105.118.0/24 maxlen: 24
89.45.232.0/22 maxlen: 22
89.47.184.0/23 maxlen: 23
2001:6b0:5a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:76:f4:c6:09:d3:14:21:4c:91:3f:1b:48:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b2cfa6b729795cb3399e0f85cfec961248907df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:82:47:a2:4c:c6:fd:f8:64:2a:f6:14:a2:
e1:a0:03:d9:28:c0:93:95:1a:d6:c0:4d:2e:ed:6e:
bb:9f:72:6e:a0:ce:96:ad:ac:be:01:a3:94:86:54:
c8:bd:ab:4e:ef:a9:7b:2c:03:8f:1d:b6:f6:fb:93:
d0:2c:97:00:ed:ee:67:1c:c9:c5:76:d4:11:61:b8:
b8:c7:b4:13:22:3d:41:6b:b8:a6:f6:0b:52:a3:c4:
2f:f7:ce:ea:05:23:1c:7e:93:24:49:88:49:83:f1:
af:7f:d7:23:01:ce:51:ea:1a:57:07:ed:be:e2:d4:
08:32:c0:54:58:80:b8:0e:f4:10:0a:fc:01:5f:b5:
0f:0f:f5:b9:11:f6:82:dd:45:88:f6:ac:db:15:1a:
bb:af:41:6a:f7:a9:7f:10:46:9d:1d:ab:ab:0d:c9:
92:90:89:dd:c9:1a:9e:bb:32:fe:10:13:3b:1f:2e:
3a:cb:83:2f:6b:26:e9:07:f9:d1:37:cb:ee:0e:19:
07:7b:93:50:a0:30:a2:f9:65:23:a7:e8:b5:b8:3a:
98:5f:f5:7c:9c:62:c7:e0:ef:de:c0:0c:f8:5e:98:
e8:8b:c2:cf:16:38:8c:79:b4:ff:89:1b:6c:95:1a:
c0:3a:9d:9f:69:0b:01:4d:c0:ca:22:8a:a6:46:0a:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:FA:6B:72:97:95:CB:33:99:E0:F8:5C:FE:C9:61:24:89:07:DF
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Gyz6a3KXlcszmeD4XP7JYSSJB98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.118.0/24
89.45.232.0/22
89.47.184.0/23
IPv6:
2001:6b0:5a::/48
Signature Algorithm: sha256WithRSAEncryption
67:fd:29:01:65:91:21:82:e1:c2:2b:1b:c0:30:84:31:43:e7:
e7:3a:00:30:e3:44:3b:3f:b3:02:8f:b7:19:cb:28:90:2d:32:
69:77:ab:49:74:3c:e5:56:93:80:a0:f3:b1:b4:20:20:b8:b4:
bd:c3:11:63:f3:d6:fd:4e:5a:eb:cc:2e:f6:62:61:ac:5f:54:
cd:9e:43:f3:78:ba:fe:b4:b8:0e:49:d1:ee:c9:d7:fa:e7:99:
7b:b1:5a:f6:18:51:5d:f9:ad:62:57:76:a9:ed:4e:6c:48:00:
08:c5:c7:b5:d1:d6:a5:ae:c2:93:46:b3:b5:84:ef:95:86:cd:
2b:38:d8:36:1e:ca:fd:7b:cc:57:4f:a3:a7:a7:ae:7b:04:92:
b8:80:10:2d:39:d5:b3:ab:e9:4c:5d:d4:26:31:3e:ce:10:70:
48:06:5f:00:e7:c6:ce:8b:cb:ef:32:fa:7f:66:e1:5c:0e:8f:
65:0a:0c:78:b8:a0:9d:2f:6f:02:bf:f5:b0:58:66:3c:45:05:
ea:4c:dc:d3:95:6f:21:48:f8:39:47:fc:1b:64:09:6e:12:88:
c7:45:cc:c3:0a:5d:df:23:84:74:41:e6:28:c8:a2:58:e9:42:
bb:ee:b9:b5:51:55:41:c4:da:f1:b3:a6:8a:81:83:42:af:4e:
55:c8:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:50 2025 by rpki-client