Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa
File: gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa (raw, json)
Hash identifier: SQr6HXuQcMmwRyJVvHRUD8exv8UImT2IUgeTeEYqV74=
Subject key identifier: 81:DB:F4:1F:55:4E:42:A1:02:D6:0D:CD:3C:A2:92:7B:89:37:9B:C7
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0194829713AB649AEC43635AFC93A29139AE
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa
Signing time: Mon 20 Jan 2025 07:22:06 +0000
ROA not before: Mon 20 Jan 2025 07:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51720
IP address blocks: 31.3.144.0/22 maxlen: 22
37.228.120.0/24 maxlen: 24
37.228.122.0/23 maxlen: 23
37.228.124.0/24 maxlen: 24
80.70.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:97:13:ab:64:9a:ec:43:63:5a:fc:93:a2:91:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 20 07:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81dbf41f554e42a102d60dcd3ca2927b89379bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:38:50:38:7b:57:d7:fd:a7:65:79:2c:18:
56:1e:a1:75:bf:82:c6:fa:9d:4e:5e:1b:2d:ff:6e:
d6:d4:4c:93:d5:60:55:0a:30:33:cb:1f:93:6c:92:
13:05:61:89:ab:5d:59:96:ec:94:0d:5c:c1:dc:72:
0f:7f:81:63:1e:70:f0:3d:18:13:22:c8:e7:bd:22:
69:9a:ab:dd:79:7f:92:99:e8:3d:1f:d4:e9:ef:ce:
65:96:c2:32:3b:f1:c6:2c:1f:70:3c:ca:7a:e0:50:
83:63:30:60:c8:ea:87:66:c4:a8:4c:71:9b:60:c0:
b4:9d:a7:0a:c9:ed:a0:cf:3e:2a:7f:12:bf:88:c2:
73:f1:be:53:cc:87:8c:e7:e3:8c:f6:06:71:b9:88:
34:a5:68:52:1a:d4:81:09:f7:4d:02:17:e3:9e:77:
ab:ea:8a:b3:a9:6a:8c:9a:c8:b1:a8:21:51:57:0b:
3e:18:1d:32:a7:57:c4:fa:90:23:4d:48:fe:59:8a:
12:01:3d:20:00:9a:ae:8e:9d:c1:31:56:f6:1d:3a:
d7:1e:f4:18:c5:c9:83:14:18:ae:cd:5a:2e:0a:d2:
72:27:b3:8f:80:85:a9:e2:92:c5:74:72:02:ef:bb:
1d:d9:49:c6:b1:95:ff:e8:f9:e6:01:a7:9a:fe:b6:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:F4:1F:55:4E:42:A1:02:D6:0D:CD:3C:A2:92:7B:89:37:9B:C7
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.144.0/22
37.228.120.0/24
37.228.122.0-37.228.124.255
80.70.166.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:69:c8:66:c1:ef:0a:7e:4d:47:18:44:c2:86:3e:1a:e9:a2:
1a:6d:04:53:01:86:87:26:8c:cc:b8:ee:76:ad:01:36:87:61:
03:e8:78:a7:44:fa:2e:48:1b:1e:1b:3d:52:ba:ae:9f:86:38:
d8:bd:02:8e:c3:08:fc:53:42:2e:7d:2f:ab:ff:cc:2e:5b:62:
16:42:80:f1:5c:71:f0:12:e7:78:27:ec:95:bb:0e:60:a7:cf:
e9:b7:0c:98:a9:ea:bc:31:3e:b0:da:70:de:3c:06:53:18:d0:
f3:5d:80:18:0a:a0:5d:00:57:ae:6c:55:7f:54:cf:d6:d4:bc:
cb:2e:0e:bf:11:8f:4d:57:2f:ca:be:f5:e6:cc:69:41:94:28:
0d:d2:2a:48:47:21:5c:f8:1c:7f:b3:34:b4:fa:a1:be:49:3c:
98:22:09:c6:b2:6e:81:5e:f0:39:17:f0:3a:a1:f5:7d:d9:fd:
aa:a2:15:f1:19:34:4b:22:96:34:86:b3:22:ad:d9:f5:2c:3e:
1e:f8:fb:f9:4e:5d:f3:4c:4e:f4:e8:09:6c:15:73:f1:1b:9f:
c2:40:25:43:2c:ae:d4:f7:a5:97:9a:02:e9:f2:4c:60:d5:54:
27:57:a9:01:91:8c:f7:03:4c:57:45:fd:ce:b5:14:ee:d9:a4:
38:1c:8a:98
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZSClxOrZJrsQ2Na/JOikTmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl
MzM5N2IwHhcNMjUwMTIwMDcyMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWRiZjQxZjU1NGU0MmExMDJkNjBkY2QzY2EyOTI3Yjg5Mzc5YmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8s4UDh7V9f9p2V5LBhWHqF1v4LG
+p1OXhst/27W1EyT1WBVCjAzyx+TbJITBWGJq11ZluyUDVzB3HIPf4FjHnDwPRgT
IsjnvSJpmqvdeX+Smeg9H9Tp785llsIyO/HGLB9wPMp64FCDYzBgyOqHZsSoTHGb
YMC0nacKye2gzz4qfxK/iMJz8b5TzIeM5+OM9gZxuYg0pWhSGtSBCfdNAhfjnner
6oqzqWqMmsixqCFRVws+GB0yp1fE+pAjTUj+WYoSAT0gAJqujp3BMVb2HTrXHvQY
xcmDFBiuzVouCtJyJ7OPgIWp4pLFdHIC77sd2UnGsZX/6PnmAaea/rbqgQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIHb9B9VTkKhAtYNzTyiknuJN5vHMB8GA1UdIwQY
MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt
Yjg5YTUxMWMzYmJkLzEvZ2R2MEgxVk9RcUVDMWczTlBLS1NlNGszbThjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk
LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCHwOQAwQA
JeR4MAwDBAEl5HoDBAAl5HwDBAFQRqYwDQYJKoZIhvcNAQELBQADggEBAH9pyGbB
7wp+TUcYRMKGPhrpohptBFMBhocmjMy47natATaHYQPoeKdE+i5IGx4bPVK6rp+G
ONi9Ao7DCPxTQi59L6v/zC5bYhZCgPFccfAS53gn7JW7DmCnz+m3DJip6rwxPrDa
cN48BlMY0PNdgBgKoF0AV65sVX9Uz9bUvMsuDr8Rj01XL8q+9ebMaUGUKA3SKkhH
IVz4HH+zNLT6ob5JPJgiCcayboFe8DkX8Dqh9X3Z/aqiFfEZNEsiljSGsyKt2fUs
Ph74+/lOXfNMTvToCWwVc/Ebn8JAJUMsrtT3pZeaAunyTGDVVCdXqQGRjPcDTFdF
/c61FO7ZpDgcipg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:11 2025 by rpki-client