Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Gfx_4vWZlEOyRlk55QF6dgz2qMI.roa
File: Gfx_4vWZlEOyRlk55QF6dgz2qMI.roa (raw, json)
Hash identifier: JBP5s0EPfKenoW68tGO7/LCn+yiPT2lKmJoUTWYZOxc=
Subject key identifier: 19:FC:7F:E2:F5:99:94:43:B2:46:59:39:E5:01:7A:76:0C:F6:A8:C2
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019737205F7056DD39D4809742A1B4A15401
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Gfx_4vWZlEOyRlk55QF6dgz2qMI.roa
Signing time: Tue 03 Jun 2025 18:49:17 +0000
ROA not before: Tue 03 Jun 2025 18:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205745
IP address blocks: 2a13:c042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:20:5f:70:56:dd:39:d4:80:97:42:a1:b4:a1:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19fc7fe2f5999443b2465939e5017a760cf6a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:e4:ec:f5:e6:ea:16:f3:95:6a:34:80:63:
67:19:54:b0:65:cd:36:62:90:de:09:65:71:d1:01:
cf:2f:f4:29:d7:36:5f:0e:30:bd:00:83:9f:40:5b:
90:e9:5b:94:9d:97:fc:f9:f9:a2:98:3c:d0:3f:78:
e3:65:35:f6:63:ef:27:30:d5:d3:da:62:3c:ef:43:
49:7f:30:62:0e:10:40:28:64:52:1a:71:a2:8d:8a:
51:67:a9:92:0b:93:cf:d9:1c:f9:63:cc:b1:ba:12:
a9:f0:d7:36:1c:36:94:b6:ed:cb:de:f1:b2:0a:8d:
4c:26:25:d2:44:38:7e:1e:a1:e2:ca:bb:b9:ae:49:
24:62:3b:0c:34:09:1d:89:c6:fb:41:1d:ab:89:cb:
30:0c:6b:44:66:38:17:1a:e3:0d:b2:e6:31:76:0e:
42:52:e9:e9:7a:02:34:4e:19:4a:2f:b5:f7:fa:60:
c6:68:87:6c:48:4e:0d:ff:0c:54:81:d6:6f:39:43:
8e:e5:23:6f:23:db:88:65:97:f4:38:67:79:c8:d0:
6c:9b:f9:26:23:88:e1:69:48:f2:02:62:59:3f:95:
2b:4f:54:ed:61:f9:53:b6:cf:f8:bf:c4:8a:16:09:
e6:86:86:21:55:f4:8d:85:0d:5d:95:5e:ee:00:d7:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:7F:E2:F5:99:94:43:B2:46:59:39:E5:01:7A:76:0C:F6:A8:C2
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Gfx_4vWZlEOyRlk55QF6dgz2qMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c042::/32
Signature Algorithm: sha256WithRSAEncryption
26:b8:51:5c:fd:b4:71:db:25:be:ef:84:d3:60:af:7a:f8:d9:
f1:4b:b2:4b:f6:b3:7d:7c:50:e7:e0:0b:7c:22:61:3f:aa:99:
b8:65:f8:b6:2e:6d:86:1b:a2:65:29:35:f4:01:72:3b:61:a2:
55:f1:d5:e8:8a:dd:3d:9d:14:a3:ab:23:eb:04:3e:a1:9a:d1:
f6:fa:3b:62:15:0a:9b:2f:27:49:1f:3c:2d:9f:22:39:7b:32:
54:43:9e:c8:8e:4c:1d:9c:5e:45:a7:69:32:56:dd:6e:73:67:
1a:20:da:d4:8b:fc:b1:16:94:61:3c:62:57:ea:6c:61:63:c1:
c3:9e:81:71:ff:16:11:42:80:83:d3:b7:1a:fa:68:93:fe:04:
92:0e:6e:83:16:16:b0:85:64:4a:86:30:2f:a7:14:68:16:ae:
47:09:d4:bc:ed:db:58:62:13:75:29:5b:9d:24:5d:10:39:9a:
af:6b:3e:4b:a9:eb:1a:20:7e:dc:7f:94:9a:b2:97:ec:e4:00:
73:c7:30:21:5a:e4:38:14:43:0e:b4:15:ea:1d:1a:8b:d8:e7:
3c:48:af:fb:26:e9:47:11:92:2a:87:03:cd:3d:94:6b:b8:06:
0c:56:7f:b0:04:d0:c9:05:f8:3c:90:0f:4a:01:92:45:c2:22:
29:ee:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:18:14 2025 by rpki-client