Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa
File: gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa (raw, json)
Hash identifier: PQcff6BW0vltVudS5RZqj+SpgMTVSYVY9jCJhfcHTLA=
Subject key identifier: 80:35:B7:69:BD:4F:A8:1F:07:67:97:BC:03:FA:9B:28:85:97:2B:AE
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5EC090712248F1D65684271A096E0
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1647
IP address blocks: 188.172.229.0/24 maxlen: 24
2a00:11c0:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ec:09:07:12:24:8f:1d:65:68:42:71:a0:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8035b769bd4fa81f076797bc03fa9b2885972bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:9f:16:90:b6:11:4f:8c:0c:98:0d:10:bc:
92:1a:d3:d7:2d:26:8f:79:5d:d9:a0:43:43:7d:be:
11:34:d5:6f:36:b3:c2:70:bf:c1:06:df:a1:ec:64:
10:0f:71:00:83:fd:04:7c:5a:93:ed:70:2f:b4:91:
d1:cc:17:fd:10:99:1f:c0:68:c7:ea:40:77:21:4d:
48:58:af:9d:14:18:8e:41:db:d0:37:4e:a5:da:16:
f3:94:16:27:78:2c:7a:e6:0f:f6:b5:a4:d5:86:93:
c4:c9:47:16:f7:36:31:56:b6:82:f0:0a:f7:9e:f7:
43:3e:ea:fc:2a:78:85:76:69:ac:e6:41:1d:21:98:
51:97:c2:4a:93:9a:de:e6:e7:d5:35:bb:31:ee:d8:
b5:df:0d:31:00:37:a3:6d:bc:47:22:bb:50:f0:93:
5a:dc:a8:49:24:6f:ae:41:0a:1d:f3:2e:39:f4:c3:
bb:3d:bb:4d:cb:da:fe:86:f6:86:bc:97:5b:d8:cf:
c2:5a:7b:7b:3e:25:9a:57:98:8b:c5:b6:39:c5:a0:
89:b9:97:cc:61:80:f4:bc:49:b3:91:f7:2a:a8:1d:
ab:4c:c1:ee:b6:0e:d6:2a:c6:1c:81:97:3c:42:0c:
55:e7:73:97:5c:48:f9:ab:28:26:92:4a:e3:b2:8b:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:B7:69:BD:4F:A8:1F:07:67:97:BC:03:FA:9B:28:85:97:2B:AE
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/gDW3ab1PqB8HZ5e8A_qbKIWXK64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.229.0/24
IPv6:
2a00:11c0:3a::/48
Signature Algorithm: sha256WithRSAEncryption
dc:51:bc:49:a8:a7:09:10:0a:f9:1c:04:a5:0d:19:8a:f5:07:
84:77:c8:4a:7b:b2:45:c7:ee:52:ac:f4:06:4d:11:4e:6f:d2:
a5:c6:a6:c9:7b:76:e1:91:13:53:6e:65:61:87:58:18:96:8e:
34:20:67:1b:00:d8:06:2c:86:9b:34:4f:79:14:13:45:11:c7:
47:e2:89:58:49:53:ef:71:ee:69:8e:21:cf:1d:07:30:09:ea:
70:91:13:89:f9:52:f6:71:97:bf:c3:b8:63:d0:d0:5d:b9:10:
b8:d6:77:29:04:c7:fe:fe:01:6a:19:63:f8:0a:ac:22:ae:46:
dd:b3:cc:7c:b7:a7:6d:0f:02:6f:1e:6f:ec:48:4b:47:ed:0d:
2b:91:d5:7f:63:df:fb:a7:58:26:51:1c:78:1b:5e:28:cb:97:
9f:68:1e:ca:c3:ed:11:0f:a4:18:73:38:fa:46:4c:97:f4:ae:
25:42:8f:b9:f7:f5:81:78:56:98:7e:dd:d0:c6:62:c2:8d:24:
81:14:72:1b:ff:b9:a5:92:fd:ae:07:48:cd:26:50:d6:5e:51:
f3:0e:7d:8d:2c:a3:0a:68:50:e7:dc:28:dd:cd:bb:4c:4d:72:
72:d3:c6:21:81:fd:ae:e2:a2:eb:44:b1:8c:c3:23:2b:20:af:
3e:88:d3:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQg1ewJBxIkjx1laEJxoJbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjUwMTAxMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDM1Yjc2OWJkNGZhODFmMDc2Nzk3YmMwM2ZhOWIyODg1OTcyYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0mfFpC2EU+MDJgNELySGtPXLSaP
eV3ZoENDfb4RNNVvNrPCcL/BBt+h7GQQD3EAg/0EfFqT7XAvtJHRzBf9EJkfwGjH
6kB3IU1IWK+dFBiOQdvQN06l2hbzlBYneCx65g/2taTVhpPEyUcW9zYxVraC8Ar3
nvdDPur8KniFdmms5kEdIZhRl8JKk5re5ufVNbsx7ti13w0xADejbbxHIrtQ8JNa
3KhJJG+uQQod8y459MO7PbtNy9r+hvaGvJdb2M/CWnt7PiWaV5iLxbY5xaCJuZfM
YYD0vEmzkfcqqB2rTMHutg7WKsYcgZc8QgxV53OXXEj5qygmkkrjsovbuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIA1t2m9T6gfB2eXvAP6myiFlyuuMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvZ0RXM2FiMVBxQjhIWjVlOEFfcWJLSVdYSzY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvKzlMA8E
AgACMAkDBwAqABHAADowDQYJKoZIhvcNAQELBQADggEBANxRvEmopwkQCvkcBKUN
GYr1B4R3yEp7skXH7lKs9AZNEU5v0qXGpsl7duGRE1NuZWGHWBiWjjQgZxsA2AYs
hps0T3kUE0URx0fiiVhJU+9x7mmOIc8dBzAJ6nCRE4n5UvZxl7/DuGPQ0F25ELjW
dykEx/7+AWoZY/gKrCKuRt2zzHy3p20PAm8eb+xIS0ftDSuR1X9j3/unWCZRHHgb
XijLl59oHsrD7REPpBhzOPpGTJf0riVCj7n39YF4Vph+3dDGYsKNJIEUchv/uaWS
/a4HSM0mUNZeUfMOfY0sowpoUOfcKN3Nu0xNcnLTxiGB/a7ioutEsYzDIysgrz6I
03M=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:04 2025 by rpki-client