Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa
File: GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa (raw, json)
Hash identifier: XFqsKKOYJeZJfhitB3mAa0IsuaFQxFWAs/MA5Ah1E1g=
Subject key identifier: 19:48:EF:B1:3D:75:37:09:8F:EC:76:8D:1B:B5:E3:73:46:B5:A1:40
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0195E227BC77307EF6EBA87056F950B0046C
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa
Signing time: Sat 29 Mar 2025 13:46:49 +0000
ROA not before: Sat 29 Mar 2025 13:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.16.0/22 maxlen: 22
82.206.72.0/21 maxlen: 21
82.206.80.0/22 maxlen: 24
82.206.84.0/22 maxlen: 24
82.206.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e2:27:bc:77:30:7e:f6:eb:a8:70:56:f9:50:b0:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 29 13:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1948efb13d7537098fec768d1bb5e37346b5a140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:e9:86:cb:28:14:dc:6c:1c:b1:1b:fc:15:
b8:8c:09:1a:78:a4:4a:32:67:15:2e:f3:1a:ba:cc:
8d:25:d3:52:d6:ce:33:97:7d:1f:f5:ca:5e:68:9c:
63:02:e7:bc:09:07:5a:78:ed:52:9f:4b:ba:d5:fd:
23:da:36:b0:f9:58:89:4e:40:9b:0b:39:7b:49:82:
75:58:3b:69:67:af:f3:ba:0d:71:b9:a8:69:88:d4:
9a:9e:a8:f8:b4:42:41:bb:c3:5d:99:fd:50:2f:50:
2b:dc:e6:c0:fc:90:5e:22:b5:4a:f3:18:61:4a:f4:
1c:0b:aa:81:55:46:69:0d:6f:89:45:8e:ec:03:af:
17:31:44:68:7c:4e:78:a2:85:e7:6b:36:7d:ee:d1:
4c:41:34:f5:e8:2a:b4:26:a4:dd:b4:ef:e7:6b:2d:
13:63:8c:f4:58:0a:d2:06:3f:e8:42:e6:2e:8b:e5:
8e:1a:48:ff:40:5f:3d:49:3a:31:63:15:29:ee:47:
49:af:0e:fd:26:f4:9c:5c:69:73:81:09:76:44:1d:
f7:c7:21:dc:f3:7d:1c:fb:e6:89:66:a0:e1:77:87:
f9:32:4c:87:8f:b3:47:7e:4f:b0:96:b2:ec:47:e9:
15:fd:f6:dd:a7:2d:33:c2:39:fc:29:67:33:6d:6c:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:EF:B1:3D:75:37:09:8F:EC:76:8D:1B:B5:E3:73:46:B5:A1:40
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.7.255
82.206.16.0/22
82.206.72.0-82.206.95.255
Signature Algorithm: sha256WithRSAEncryption
60:a1:6e:43:82:26:6f:b7:59:04:96:fb:a4:23:97:b4:b7:bd:
2a:64:d8:89:60:f2:3e:84:f4:e0:26:99:33:09:59:25:ae:bd:
96:ac:c5:ba:90:1d:9f:36:07:a7:ef:a7:e8:94:bf:1f:47:7d:
7d:fb:8f:2a:7a:ae:65:c8:d7:d9:f0:50:89:65:dd:07:c3:da:
0e:ba:ea:b7:91:bd:e2:8a:40:8e:1e:a4:0f:8c:10:2b:e9:04:
a4:45:54:f3:2f:60:dd:a2:d1:68:8b:0a:2b:d8:0f:79:df:8b:
9c:9d:42:9b:f6:e3:ff:17:97:c2:b4:49:e2:b2:d0:c2:29:98:
81:a6:2b:30:d9:d6:58:ea:6a:29:b1:4e:b6:d2:d0:4c:a5:49:
b1:58:3b:ff:5d:42:88:19:22:4c:17:f2:cd:8c:4c:73:36:3b:
c9:0f:b4:fc:9e:d4:c7:25:10:f7:a2:88:6e:d1:3c:ac:79:fd:
3a:29:15:2f:7b:59:12:cc:01:f1:48:77:b6:15:fb:e4:8f:f3:
2c:1a:88:ec:ef:6d:06:3c:93:d0:e8:e6:bf:ac:fd:40:b8:5e:
28:c0:45:69:43:96:ca:32:0f:8e:e5:76:3e:cd:ae:ef:69:28:
b4:29:54:20:2f:4b:96:70:14:43:5a:3c:f0:c1:c9:8c:96:07:
ff:4e:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:59 2025 by rpki-client