Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Gvj6G0DPkkSLihnA46d1N0vjphQ.roa
File: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (raw, json)
Hash identifier: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=
Subject key identifier: 1A:F8:FA:1B:40:CF:92:44:8B:8A:19:C0:E3:A7:75:37:4B:E3:A6:14
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 0195FBEB331FCC9B68850CFED70360747D30
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Gvj6G0DPkkSLihnA46d1N0vjphQ.roa
Signing time: Thu 03 Apr 2025 13:50:50 +0000
ROA not before: Thu 03 Apr 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51132
IP address blocks: 62.108.192.0/20 maxlen: 24
62.108.208.0/21 maxlen: 24
83.68.224.0/19 maxlen: 24
91.145.0.0/19 maxlen: 24
91.145.0.0/20 maxlen: 20
91.145.16.0/20 maxlen: 20
185.95.160.0/22 maxlen: 24
2a02:eb8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:eb:33:1f:cc:9b:68:85:0c:fe:d7:03:60:74:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Apr 3 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af8fa1b40cf92448b8a19c0e3a775374be3a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:7a:ea:64:00:ee:34:83:fd:1d:5c:ab:e6:
b0:9f:45:d0:6d:3c:1c:db:67:cd:72:c1:64:5b:b1:
57:a8:be:14:0f:51:34:38:00:28:a8:bd:8f:90:10:
9d:37:8a:65:56:3f:44:b8:23:63:62:a3:98:0b:cf:
99:42:47:a0:ea:72:05:28:88:c5:de:3c:61:4a:af:
ae:97:83:db:3a:de:ff:07:6b:78:4c:07:42:31:e5:
75:a2:47:74:4a:8c:5c:f4:4a:5b:02:4a:cc:84:95:
77:15:f6:62:da:44:ac:6e:ce:1f:b9:9b:56:1e:b0:
d5:d9:0a:55:16:ae:fa:87:a5:ec:1e:58:06:97:84:
e7:23:cd:cd:d1:8f:1b:40:ce:7b:4d:88:51:16:84:
63:20:63:31:9f:a6:98:e5:66:7c:3f:78:12:5b:1b:
6c:36:98:76:41:d1:9e:e0:25:c7:2f:5f:e5:d4:a4:
93:1a:db:cf:f9:2e:53:02:0e:82:5b:e9:a5:4b:74:
89:22:9f:ac:81:16:2c:f0:82:aa:5a:31:92:f0:dc:
ba:21:ac:b3:a9:8b:35:88:81:ce:44:ac:9e:73:24:
09:ad:14:4e:9b:57:dd:65:83:7d:58:07:52:ca:f1:
a0:2d:33:b5:58:70:ac:ec:29:88:56:6c:4f:9d:2a:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F8:FA:1B:40:CF:92:44:8B:8A:19:C0:E3:A7:75:37:4B:E3:A6:14
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Gvj6G0DPkkSLihnA46d1N0vjphQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.192.0-62.108.215.255
83.68.224.0/19
91.145.0.0/19
185.95.160.0/22
IPv6:
2a02:eb8::/29
Signature Algorithm: sha256WithRSAEncryption
8d:19:69:30:cb:17:50:4b:0f:c8:b3:c2:f0:f2:27:d6:98:b4:
86:ee:de:04:fe:c5:13:fa:a3:48:17:7a:20:a1:5c:f1:ce:ee:
1e:b4:1e:3f:2f:53:14:2b:53:04:44:ef:f6:8c:d6:99:22:29:
71:9b:67:83:bf:6f:b8:a2:90:42:79:45:ef:87:c0:2d:5a:79:
99:9c:e2:77:1e:79:d1:73:9e:a4:67:a2:10:50:66:5b:96:6a:
b0:0a:ab:19:cf:ec:b1:c5:a5:eb:c6:2f:bd:dd:62:f3:e1:da:
fc:e9:6b:3b:df:c2:bb:28:db:5d:26:ae:18:cd:b0:28:92:48:
83:6e:70:3d:70:74:5f:aa:2f:94:9a:28:83:00:fc:8f:09:93:
30:9e:68:70:d0:9d:44:76:20:5b:ed:d0:cd:59:36:86:b0:ad:
34:b6:79:5f:6b:d6:3b:97:6a:cc:b0:7f:34:90:36:48:b0:d0:
78:8a:cb:40:a3:4d:93:4a:53:aa:74:9b:fe:ba:90:62:db:bf:
fb:1c:e4:dd:c7:ef:ae:15:13:6e:63:35:37:b8:d7:1c:90:ba:
23:41:95:a8:b2:0e:c1:c6:1d:da:4a:c6:c1:0a:de:68:56:64:
a7:cb:78:8d:51:8a:e0:01:2d:f0:f4:7b:64:06:02:08:60:32:
71:00:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:41 2025 by rpki-client