Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GxeOyVoZRKlhrsd07uGVymkqXOA.roa
File: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (raw, json)
Hash identifier: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=
Subject key identifier: 1B:17:8E:C9:5A:19:44:A9:61:AE:C7:74:EE:E1:95:CA:69:2A:5C:E0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6DB778B93BEC6C1088FBB57ED16B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GxeOyVoZRKlhrsd07uGVymkqXOA.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6d:b7:78:b9:3b:ec:6c:10:88:fb:b5:7e:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b178ec95a1944a961aec774eee195ca692a5ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:e4:9e:56:2d:7c:1e:72:a6:04:e2:50:bd:
25:6d:0a:6a:6a:9c:b4:27:29:26:c8:e5:5c:7d:c8:
41:82:82:e0:7a:a7:2e:80:11:6f:c9:90:2c:5d:18:
dc:9a:a5:9a:9a:b4:1e:21:32:e0:8a:95:da:06:8d:
4b:d7:ec:c3:18:b2:fe:47:e0:d1:6b:c7:eb:05:26:
0e:0d:6c:6e:a1:5b:38:69:6b:3e:99:b3:11:5c:c8:
12:49:07:a8:56:bc:e1:98:fa:81:bd:cc:d7:61:68:
d1:cc:87:32:22:cd:2f:88:1e:13:a7:b3:18:21:e3:
fa:f5:9e:f6:c1:5c:e1:d2:f9:b0:8e:90:73:f8:7b:
cc:2d:77:ba:56:75:25:e0:f7:34:6f:a6:26:f1:a0:
1f:1c:48:60:94:9f:db:2d:33:c6:72:bd:d0:8a:3f:
ab:97:bb:6b:aa:49:85:2d:a5:68:d0:5c:c7:9f:93:
1e:ef:3f:82:6d:8b:97:44:bf:3d:01:ab:40:17:b3:
c2:c9:13:73:a5:bd:4d:1c:2f:a2:82:2c:92:2a:b1:
4d:0d:fb:aa:6d:6c:ee:db:fd:34:37:55:6b:f5:0c:
a0:eb:d9:4d:b4:09:21:a6:ee:07:b0:e9:d6:5b:61:
89:df:cc:f4:4b:15:2b:81:1d:64:61:65:f6:2e:ec:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:8E:C9:5A:19:44:A9:61:AE:C7:74:EE:E1:95:CA:69:2A:5C:E0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GxeOyVoZRKlhrsd07uGVymkqXOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2c:a0:82:af:a0:33:dc:f7:dc:25:a9:e4:97:f6:29:32:a1:
a6:cb:2e:98:78:9d:23:cd:67:b2:28:57:7c:f7:17:83:75:32:
b6:e3:c7:22:cf:dc:39:b9:ea:6a:04:c4:c0:b8:2f:52:cc:95:
45:87:39:36:42:b9:e0:38:f7:d0:3b:3c:81:ec:88:5b:9c:b7:
cb:bf:24:de:fd:7c:8a:71:85:03:ab:d8:4f:db:ca:82:2b:c6:
8a:9f:27:d8:e1:a2:cb:b5:50:46:e6:ff:35:a8:fc:94:7a:ef:
91:fc:cf:1d:26:45:5d:94:f3:6b:9d:ea:0e:98:65:a3:ee:b2:
af:ee:90:fe:ab:4f:47:cb:db:2e:4d:a5:91:e4:9f:6a:b4:e0:
64:7e:f8:52:a2:0c:f5:90:69:9b:f9:07:ff:b8:46:f8:9f:d3:
17:97:82:86:b3:9f:c3:4a:4c:6a:0c:68:6e:d4:2a:9f:88:b4:
7f:a0:77:98:2e:36:6b:b4:1a:42:06:e2:bf:c2:aa:d6:97:bd:
92:bc:e8:23:09:13:a6:87:04:c0:3f:0d:5e:34:74:e9:db:b2:
77:60:5f:65:7b:6a:e5:75:73:74:98:9a:91:cd:d1:5b:32:b7:
fb:f9:23:9b:86:ed:b8:5b:e3:b6:df:32:42:e3:08:0b:e5:cc:
a0:2b:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:52 2025 by rpki-client