Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Gq5LjD46Wfjhio7d9iqIJDoHctI.roa
File: Gq5LjD46Wfjhio7d9iqIJDoHctI.roa (raw, json)
Hash identifier: hNIDxt9EAkLYgEqpa1TAGbSGsQ4erxVNMwWk5NfcogI=
Subject key identifier: 1A:AE:4B:8C:3E:3A:59:F8:E1:8A:8E:DD:F6:2A:88:24:3A:07:72:D2
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01960F911A731631434637E73717176F3230
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Gq5LjD46Wfjhio7d9iqIJDoHctI.roa
Signing time: Mon 07 Apr 2025 09:24:49 +0000
ROA not before: Mon 07 Apr 2025 09:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 203.202.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:91:1a:73:16:31:43:46:37:e7:37:17:17:6f:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 7 09:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aae4b8c3e3a59f8e18a8eddf62a88243a0772d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:28:42:80:09:39:04:cd:02:bb:aa:e8:0d:
07:dd:a8:33:49:a1:01:fc:06:91:3e:fc:2a:a3:16:
e4:63:33:4b:ef:25:8f:3c:48:35:b2:f9:58:a0:43:
cf:cf:04:af:99:20:eb:ab:4b:c9:20:e7:6b:7f:8e:
d2:14:f5:dc:36:5f:6e:f3:23:ee:c8:bf:0a:a0:e5:
2f:bd:67:ca:c1:5e:48:6b:29:6f:b8:ef:8d:2e:46:
a5:ba:db:a3:51:cf:ae:d8:0e:39:f9:7b:72:ad:07:
a7:cc:79:2d:56:89:1e:e5:80:e9:ee:a6:40:92:84:
77:c2:76:f5:58:4a:9f:83:08:2d:84:4a:5c:71:10:
08:35:44:1a:0b:be:b0:72:57:49:6b:01:cf:cd:ef:
82:e4:c2:00:3b:1d:cf:bc:2b:97:9c:95:a6:60:f4:
8f:25:a5:b4:50:c5:06:b3:1d:2b:b1:b2:92:ff:8c:
b5:3a:52:03:32:1f:7f:e5:e4:f8:81:1d:ce:cf:f7:
fe:af:ee:a5:12:a8:0a:53:2b:1b:a2:72:d9:e4:aa:
e4:24:b4:48:76:51:bc:5a:d5:a7:96:7c:d7:6a:af:
75:8b:7f:42:89:6a:4c:7b:15:56:d4:b0:62:c4:ba:
17:fe:48:89:01:29:24:7c:77:91:2a:56:5f:45:0c:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:4B:8C:3E:3A:59:F8:E1:8A:8E:DD:F6:2A:88:24:3A:07:72:D2
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Gq5LjD46Wfjhio7d9iqIJDoHctI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:60:bb:96:dd:e7:f1:fa:e6:24:dd:9b:45:b7:eb:ce:74:a9:
6c:f5:e7:0e:ea:6e:0b:4a:4e:e8:20:a8:a2:83:72:26:5f:21:
d8:1d:92:fa:29:18:46:f6:20:c0:bf:e6:7e:3a:2c:9b:50:03:
fe:be:31:d9:3d:94:f7:08:ea:96:89:12:fe:5b:dc:44:97:93:
f2:7b:87:ed:2d:44:dc:1b:bf:36:34:6b:39:a9:13:52:95:d8:
db:6d:03:f6:6c:83:d3:36:7f:ae:0d:c2:5d:e8:92:6b:41:18:
63:47:1f:5f:eb:a1:0d:2e:52:7e:ac:84:cf:a2:0f:87:d7:ed:
8c:ca:ad:49:04:af:1f:50:fd:32:73:81:fc:2a:e2:8f:7b:dd:
95:ac:41:85:16:52:67:ce:9d:08:10:d5:d3:e1:02:2e:af:18:
36:2e:05:0e:69:e8:52:bc:59:f9:56:08:ac:7f:0b:d6:ff:24:
28:54:96:05:16:cf:7b:73:a8:a3:c6:2e:35:0b:d1:43:1e:c6:
84:ca:00:80:37:83:9a:b3:d7:9c:ba:a2:4a:e9:00:eb:7c:b1:
9a:4c:55:9f:f8:1e:20:53:c3:0f:c8:d5:d6:d9:b7:f1:f0:d7:
2a:a1:ba:32:99:f6:2b:63:38:80:f6:8b:01:68:16:c6:6f:65:
5c:f0:8b:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYPkRpzFjFDRjfnNxcXbzIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwNDA3MDkyNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWFlNGI4YzNlM2E1OWY4ZTE4YThlZGRmNjJhODgyNDNhMDc3MmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjQoQoAJOQTNAruq6A0H3agzSaEB
/AaRPvwqoxbkYzNL7yWPPEg1svlYoEPPzwSvmSDrq0vJIOdrf47SFPXcNl9u8yPu
yL8KoOUvvWfKwV5IaylvuO+NLkalutujUc+u2A45+XtyrQenzHktVoke5YDp7qZA
koR3wnb1WEqfgwgthEpccRAINUQaC76wcldJawHPze+C5MIAOx3PvCuXnJWmYPSP
JaW0UMUGsx0rsbKS/4y1OlIDMh9/5eT4gR3Oz/f+r+6lEqgKUysbonLZ5KrkJLRI
dlG8WtWnlnzXaq91i39CiWpMexVW1LBixLoX/kiJASkkfHeRKlZfRQxRkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBquS4w+Oln44YqO3fYqiCQ6B3LSMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvR3E1TGpENDZXZmpoaW83ZDlpcUlKRG9IY3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8roMA0G
CSqGSIb3DQEBCwUAA4IBAQBfYLuW3efx+uYk3ZtFt+vOdKls9ecO6m4LSk7oIKii
g3ImXyHYHZL6KRhG9iDAv+Z+OiybUAP+vjHZPZT3COqWiRL+W9xEl5Pye4ftLUTc
G782NGs5qRNSldjbbQP2bIPTNn+uDcJd6JJrQRhjRx9f66ENLlJ+rITPog+H1+2M
yq1JBK8fUP0yc4H8KuKPe92VrEGFFlJnzp0IENXT4QIurxg2LgUOaehSvFn5Vgis
fwvW/yQoVJYFFs97c6ijxi41C9FDHsaEygCAN4Oas9ecuqJK6QDrfLGaTFWf+B4g
U8MPyNXW2bfx8NcqoboymfYrYziA9osBaBbGb2Vc8Itu
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:12 2025 by rpki-client