Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gCTnDl9bk5vUvgw3enw31TYV6lE.roa
File: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (raw, json)
Hash identifier: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=
Subject key identifier: 80:24:E7:0E:5F:5B:93:9B:D4:BE:0C:37:7A:7C:37:D5:36:15:EA:51
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA6A4B8C5EBB46197931BC91AC08F
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gCTnDl9bk5vUvgw3enw31TYV6lE.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210583
IP address blocks: 46.32.8.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
79.132.216.0/24 maxlen: 24
86.109.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:a4:b8:c5:eb:b4:61:97:93:1b:c9:1a:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8024e70e5f5b939bd4be0c377a7c37d53615ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:8c:46:36:91:3d:4e:97:da:c7:9e:62:21:
e9:08:87:12:0d:73:b0:2b:71:f7:26:be:a2:7a:eb:
e4:41:2c:fd:38:c6:1f:55:bb:0d:aa:56:c9:71:cf:
e3:d8:f6:08:00:00:af:fa:b2:47:f6:ce:35:7c:df:
9f:b2:65:35:a3:1d:61:81:e9:fe:25:09:44:63:0d:
76:51:06:53:db:57:8a:ce:44:a0:b6:8a:3f:e3:51:
66:c8:a1:da:f3:fc:6a:c9:d9:28:7c:84:d9:95:5d:
58:0f:4a:69:8b:cc:2d:5b:ae:ff:32:24:dc:51:39:
b5:d2:e5:3a:17:b0:a9:ad:0a:64:5a:62:39:f6:cc:
aa:70:55:ca:82:6b:d8:73:15:de:84:f8:93:93:08:
ca:e9:41:ca:21:d5:86:5f:68:4a:aa:66:b3:7c:f8:
67:27:f2:a1:a3:ea:3c:89:bc:32:29:3b:d7:64:f8:
be:b6:5c:5d:f3:92:d4:b7:c7:43:9d:cd:af:02:82:
33:48:3f:48:e2:87:94:da:6d:8e:10:7d:e0:94:e7:
66:82:cc:9a:ec:64:d5:f1:74:ae:e6:01:4b:4e:55:
1c:b1:80:f2:89:0b:e1:9b:ef:8c:6d:e3:72:1e:73:
b0:50:8b:a8:13:23:32:85:e5:fa:0d:c2:5a:3f:86:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:E7:0E:5F:5B:93:9B:D4:BE:0C:37:7A:7C:37:D5:36:15:EA:51
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gCTnDl9bk5vUvgw3enw31TYV6lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.8.0/24
78.158.167.0/24
79.132.216.0/24
86.109.61.0/24
Signature Algorithm: sha256WithRSAEncryption
04:40:19:f6:15:b1:08:4e:fa:c8:32:8a:d4:1c:e8:8d:63:b8:
c1:96:0a:4d:df:74:9e:a6:52:ce:f7:d2:61:cb:d4:ad:b7:97:
80:1a:65:a3:98:43:eb:cf:56:f8:48:9b:db:a0:f2:e1:62:1c:
74:a1:75:a3:6b:ac:e1:a5:3a:5b:ed:d2:70:9e:26:e6:9b:de:
60:9e:38:bb:29:8b:10:18:97:1c:20:98:f1:9d:dd:1f:39:9c:
f8:a6:87:d7:22:ff:0e:9d:72:e5:9a:0d:14:b8:25:31:0d:10:
50:d5:7f:9a:17:5b:bd:9f:24:19:5b:99:35:a2:e0:c6:58:3c:
9f:ba:3c:8e:3a:b0:53:16:8f:39:a9:cd:b2:22:8f:bb:ba:91:
1f:1c:7a:7d:74:63:67:33:c5:42:b0:f9:47:5e:bd:54:23:d6:
fa:5b:93:98:98:14:9c:43:b1:56:29:fa:56:68:39:4f:e4:fd:
45:bb:db:d7:38:40:7c:c8:d8:69:ee:d1:86:59:f1:28:f2:95:
10:b7:01:4c:c6:a6:2f:64:ab:37:1a:e5:c5:56:0e:27:0d:2d:
53:09:d4:f5:33:0c:e4:66:e1:04:f1:16:7c:bf:f7:2e:25:a5:
6f:9c:df:bd:77:d4:a1:00:ea:ef:20:08:2c:89:ff:15:82:94:
1e:bc:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:54 2025 by rpki-client