Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/GCtomsNTvimtD6w0xyjU2ZUFcjE.roa
File: GCtomsNTvimtD6w0xyjU2ZUFcjE.roa (raw, json)
Hash identifier: XJ7hu4TR2M0+QkNeH26j5olN/g4SK2uhya5ykeMaklA=
Subject key identifier: 18:2B:68:9A:C3:53:BE:29:AD:0F:AC:34:C7:28:D4:D9:95:05:72:31
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01942144124D3FB2870F6B9ECC1FE1FDB521
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/GCtomsNTvimtD6w0xyjU2ZUFcjE.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64413
IP address blocks: 95.81.84.0/22 maxlen: 24
95.81.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:12:4d:3f:b2:87:0f:6b:9e:cc:1f:e1:fd:b5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182b689ac353be29ad0fac34c728d4d995057231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:d4:4a:7f:c8:ca:05:bb:94:27:1e:db:6d:
c2:13:27:67:6c:d9:de:dd:c1:42:30:9a:85:bb:ee:
9e:12:72:fa:18:06:81:28:5b:7e:64:ee:b9:08:14:
eb:32:e5:da:14:0c:d8:fd:26:c6:c7:1d:51:8b:6f:
fc:95:ae:0a:f9:d3:5d:f7:67:17:76:17:0c:3b:9f:
bd:0e:e6:40:68:89:a8:74:34:b5:06:7b:b0:a4:f4:
e9:94:ce:8f:d7:3c:90:75:c6:25:37:b0:42:a6:77:
21:cc:84:79:2a:fc:78:ea:1b:5b:7b:03:52:23:b6:
57:7f:63:8a:e8:26:77:72:4f:92:06:46:6b:7a:01:
ef:40:a0:a0:b8:eb:40:4d:9a:59:ae:14:f9:5b:4e:
ba:27:7c:bb:18:1c:9a:8b:2f:d3:cf:32:0c:ef:ba:
8c:36:45:b7:67:e0:80:0e:e4:6d:f8:4a:ce:4d:0c:
ff:a7:e1:9c:da:11:55:b1:24:5a:f4:2c:9b:20:c3:
e6:72:88:b9:21:0b:e9:4f:4a:31:a9:f0:3e:94:4f:
1d:16:d3:d4:ec:88:af:e3:25:ef:e3:85:2b:e8:56:
1d:e2:fa:cd:93:a3:6c:5e:96:04:f1:47:c4:26:33:
07:e6:5a:c9:a8:da:28:dc:59:d4:c2:ce:5b:fe:8e:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:68:9A:C3:53:BE:29:AD:0F:AC:34:C7:28:D4:D9:95:05:72:31
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/GCtomsNTvimtD6w0xyjU2ZUFcjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0/22
95.81.92.0/22
Signature Algorithm: sha256WithRSAEncryption
25:82:d8:d9:a4:cf:66:0f:6f:78:36:e1:a0:93:fe:b3:c1:93:
85:ca:9a:01:dd:cb:5a:c1:0a:93:3e:b8:47:28:9a:df:45:24:
70:de:78:b9:02:71:c9:ef:33:08:52:1b:b7:c7:37:d9:9e:09:
1d:56:c0:7b:11:23:a6:6a:f2:0b:ae:a5:62:b0:7b:a2:8e:71:
dd:30:ac:6f:2e:34:34:9a:2e:56:70:80:2b:5b:1e:01:ea:00:
36:23:5e:a8:a0:bb:ae:ae:c8:03:0f:e7:c5:14:ec:0b:ec:3b:
6d:06:a4:17:bc:01:eb:a3:79:5a:08:25:4b:11:2e:55:dd:d0:
8f:5a:c1:f4:2e:50:72:92:74:c8:8a:58:ab:2a:cc:e3:69:3d:
24:a5:64:c6:2e:cc:e9:70:a0:05:3a:e2:51:c6:ba:93:3e:9c:
45:84:63:20:8a:3a:dc:f3:17:f7:ff:03:81:13:fa:83:c3:d3:
7e:4a:6c:63:87:07:c4:ab:6d:56:a0:bc:b4:14:f0:ef:01:b2:
78:13:96:b5:08:57:77:d2:33:bc:2f:e9:07:cb:00:64:ae:96:
05:36:2b:6f:dc:33:22:53:67:6e:72:45:08:09:38:93:d3:25:
fd:b2:8a:e9:17:05:27:e7:32:fe:66:91:32:5e:81:2a:b6:53:
de:31:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:32 2025 by rpki-client