Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GZX-sybhyROXZc5D_lXZY5lYMQs.roa
File: GZX-sybhyROXZc5D_lXZY5lYMQs.roa (raw, json)
Hash identifier: PTYcxQtc/HbMMRBI9ZWe2WslGwayWK0TLB5lwzbjV90=
Subject key identifier: 19:95:FE:B3:26:E1:C9:13:97:65:CE:43:FE:55:D9:63:99:58:31:0B
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194F6718710EA1BB4D645F599C1AF04FEA3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GZX-sybhyROXZc5D_lXZY5lYMQs.roa
Signing time: Tue 11 Feb 2025 19:17:02 +0000
ROA not before: Tue 11 Feb 2025 19:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.144.0/24 maxlen: 24
46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:71:87:10:ea:1b:b4:d6:45:f5:99:c1:af:04:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 11 19:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1995feb326e1c9139765ce43fe55d9639958310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:cc:bd:e7:4e:06:27:2d:d6:81:b6:cb:a0:
03:23:33:f9:9c:2d:af:a8:20:c7:b5:fc:2a:3a:7a:
19:c0:ac:cd:b9:90:57:23:e7:c6:ba:cb:f6:e2:42:
51:af:e4:c5:80:58:49:4b:59:8f:f8:03:d0:38:cc:
f0:be:1a:22:35:4d:3b:df:74:6e:94:7a:a0:35:98:
b2:42:1a:d6:7e:b4:dc:4b:99:44:3f:09:38:a5:b5:
98:d5:87:2f:34:a5:92:20:27:ad:14:41:06:70:a4:
3b:24:14:78:16:b0:da:f4:95:32:4c:4f:83:6f:9d:
c0:fd:78:04:f9:a2:04:cc:ac:51:15:1d:aa:d1:b7:
84:8c:72:01:93:1f:c3:01:da:4e:0d:f8:fe:3f:4a:
3b:93:40:25:d9:5f:03:b1:4b:fd:7a:4f:2d:65:6c:
c5:c8:11:7c:98:68:bb:e9:9f:9d:1a:86:ca:7b:a4:
30:ca:90:32:14:78:90:95:24:1f:86:89:85:8f:db:
56:88:61:be:0d:d1:88:6a:70:10:7f:d3:47:dd:2e:
6e:37:cb:14:6a:87:77:01:da:e3:b4:b0:fe:f3:a6:
31:89:3e:da:61:2d:e6:cd:ba:d4:68:0b:27:ec:29:
e0:f5:fa:e4:af:61:87:50:98:c4:76:54:a6:79:10:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:FE:B3:26:E1:C9:13:97:65:CE:43:FE:55:D9:63:99:58:31:0B
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GZX-sybhyROXZc5D_lXZY5lYMQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.144.0/24
46.38.146.0/23
46.38.149.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:82:91:47:81:0d:8e:2b:16:18:a3:c9:ac:5d:fb:a3:53:f4:
58:d8:a8:41:2c:ec:5e:48:3c:eb:f3:6b:83:c0:d8:04:bd:36:
03:90:7a:ad:4e:13:5a:59:05:09:ee:1d:52:05:bb:4b:02:8b:
4e:e1:9d:da:ae:aa:6f:3d:96:7a:05:64:b0:b7:e5:f2:c7:c6:
e4:9a:15:73:e0:72:85:1a:b4:2a:21:0c:95:60:79:6e:21:17:
ef:44:7a:fa:82:e1:b6:67:59:41:a8:00:74:cf:63:4b:19:59:
d9:5f:0f:3c:de:17:b7:e1:29:80:7c:7d:bc:65:e4:4c:cd:cf:
41:a6:77:11:8f:41:02:04:43:8d:2a:19:5b:4a:15:fb:6b:78:
05:fc:23:db:5d:35:cb:1b:51:2b:08:64:63:81:6b:84:e2:bd:
7e:58:20:9b:d0:08:9d:55:87:ff:7a:3c:1b:73:1c:f5:46:30:
1e:54:bd:2a:5f:20:09:ed:f6:39:a2:45:2b:d5:bc:aa:f7:02:
a7:89:e6:8e:05:5c:89:13:5a:e0:c8:a8:7b:c8:9a:84:e8:3b:
c5:d3:cc:5a:b7:08:ee:27:65:f4:5d:b1:05:4e:66:17:33:6a:
b3:a5:f5:12:a7:22:69:6c:0d:ce:1c:c5:85:2c:17:f2:13:70:
57:b4:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:02 2025 by rpki-client