Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa
File: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (raw, json)
Hash identifier: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=
Subject key identifier: 18:38:43:27:ED:B3:8D:4D:06:91:14:F1:53:6F:17:F6:78:1E:44:77
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A2D4DF2DE163B1C2C338F5F2136D1
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa
Signing time: Thu 02 Jan 2025 09:47:59 +0000
ROA not before: Thu 02 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203303
IP address blocks: 45.10.91.0/24 maxlen: 24
185.138.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:2d:4d:f2:de:16:3b:1c:2c:33:8f:5f:21:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18384327edb38d4d069114f1536f17f6781e4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:7a:8a:a1:38:dc:99:f3:6f:ea:b8:f5:0f:
28:1d:aa:32:77:28:cd:99:55:a9:7d:94:08:d7:81:
d5:04:c2:6b:25:ee:8f:ca:e3:16:74:49:8e:6a:5e:
ce:39:01:63:93:ac:d9:d3:a8:93:4d:61:93:99:29:
03:24:88:45:f5:a4:6a:a7:e6:b2:b1:1d:9e:c3:e2:
d5:e5:1f:2b:eb:3e:40:ea:9d:2d:9d:89:37:6b:c5:
b9:d6:a1:24:9e:76:7c:14:ad:18:f4:d9:28:e9:db:
ac:cb:ad:26:01:e4:06:01:9d:73:64:4b:7d:51:a3:
73:69:78:1a:5d:4c:d8:4f:7a:af:ba:4e:e1:33:f3:
e1:6b:d3:20:f3:15:13:6a:ea:ce:70:7e:d1:27:43:
10:d6:7d:64:ff:af:a0:1d:a7:24:74:be:c7:02:ea:
2c:c5:38:87:70:5c:05:40:ec:80:1a:2f:8f:2e:69:
2f:ff:10:fd:33:c8:3c:2d:ba:3b:9b:12:67:42:da:
cf:cb:aa:de:9e:44:36:27:44:84:30:38:06:b5:04:
3a:33:56:f6:18:02:70:e7:36:20:77:57:03:74:2f:
50:73:d6:24:eb:dd:a8:5c:02:1b:30:f6:ab:38:7f:
44:bd:d9:e6:4c:a3:e3:e2:55:dc:1f:0b:2a:57:f2:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:43:27:ED:B3:8D:4D:06:91:14:F1:53:6F:17:F6:78:1E:44:77
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.91.0/24
185.138.228.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0c:03:12:30:50:f0:2e:72:8c:d9:12:f8:95:52:16:02:da:
36:6c:6b:c0:67:d9:d1:21:da:d2:5a:a4:dd:42:48:34:cd:eb:
5b:e2:06:06:11:a2:de:61:ec:75:fd:19:80:ec:ea:37:61:25:
d1:f2:c6:9b:79:c6:ce:3d:7d:4a:dc:ee:09:fa:c5:0a:e7:7a:
d7:7b:b3:4e:8c:a7:86:01:60:a3:bf:2d:dd:f5:1a:b6:2b:d2:
ad:85:c5:83:33:bc:ff:11:f2:b0:af:28:ce:e4:f3:47:e0:45:
c0:73:ad:63:ca:02:a6:d1:fd:ac:23:e5:49:be:d4:26:81:e2:
d2:25:17:57:1c:65:db:fa:30:34:a9:a5:27:83:d4:64:bc:29:
86:25:c7:4f:14:f4:78:70:b2:49:65:59:a6:b6:19:8c:77:4a:
38:fe:e5:aa:d3:2a:0a:0d:5c:ce:7e:62:40:0b:47:e6:37:dc:
f5:52:4d:b3:15:7c:79:13:33:d9:49:4d:49:98:5b:70:c8:1a:
50:dc:c5:5e:6e:93:2c:90:39:d6:fa:99:1b:e9:73:43:8b:21:
71:03:68:e6:1c:4c:af:c9:66:81:e9:06:28:13:26:72:11:eb:
e8:9e:a0:d5:d5:67:49:20:ae:fe:31:15:0f:32:95:d7:38:8c:
29:98:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:01 2025 by rpki-client