Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gmpsE3gYpq4JCSohIVHDm3a0vAc.roa
File: gmpsE3gYpq4JCSohIVHDm3a0vAc.roa (raw, json)
Hash identifier: UIxgMbyZxswMhLzYSeqRYLHgjf+FlKpy5d7Je9K3bz8=
Subject key identifier: 82:6A:6C:13:78:18:A6:AE:09:09:2A:21:21:51:C3:9B:76:B4:BC:07
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 0194258F5558C16A5F25D3DBDB9F513656E0
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gmpsE3gYpq4JCSohIVHDm3a0vAc.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 2a02:45c0:14::/48 maxlen: 48
2a02:45c0:16::/48 maxlen: 48
2a02:45c0:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:55:58:c1:6a:5f:25:d3:db:db:9f:51:36:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=826a6c137818a6ae09092a212151c39b76b4bc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:64:e9:9f:b8:ef:f4:02:ee:d6:44:86:5b:
05:20:47:98:02:f2:b5:a4:03:a6:82:db:fc:63:bd:
3c:e3:c0:25:c1:d3:91:49:e2:f3:87:7f:9f:a6:18:
95:8d:13:8c:1a:63:be:7b:b6:1c:44:5a:35:2b:e2:
2d:fa:57:a7:64:79:b1:89:62:a7:6d:26:90:d8:dd:
f9:31:04:09:16:76:21:91:ad:6d:c5:f0:08:7a:09:
e5:9a:14:6e:c9:92:b7:d5:f0:41:24:46:04:a9:5e:
96:0d:3b:a6:9b:91:cc:5e:ae:b6:a6:1f:8b:07:8e:
94:9c:86:31:f8:e8:bf:bc:a1:2e:4a:98:0d:2f:b6:
e4:c8:c3:3c:4f:3b:55:0a:06:c7:b3:86:68:59:01:
13:f7:d3:3a:43:36:70:c5:4d:20:8f:f5:b5:72:87:
e2:19:0c:70:7e:51:eb:cb:c5:6b:61:6e:c7:59:3d:
5a:0c:c8:57:f5:60:f3:93:cf:46:3b:9b:fb:09:f4:
9d:70:29:eb:9d:06:4a:34:0c:e7:76:39:9a:0f:00:
8d:27:eb:97:9d:6a:02:23:03:bf:d2:e3:ec:af:9f:
78:48:0b:8c:d4:e7:c1:ea:7b:ac:c8:61:52:52:7d:
da:7d:a3:76:ca:65:df:b3:32:6f:be:d8:5f:e3:96:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6A:6C:13:78:18:A6:AE:09:09:2A:21:21:51:C3:9B:76:B4:BC:07
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gmpsE3gYpq4JCSohIVHDm3a0vAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:45c0:14::/48
2a02:45c0:16::/47
Signature Algorithm: sha256WithRSAEncryption
47:4f:4d:5d:fb:77:d9:22:e1:f3:7f:07:2a:e0:9d:3f:6d:55:
aa:17:b1:fa:f9:1d:99:42:8c:ff:ee:0c:0b:8a:81:89:2c:a6:
f9:6c:13:56:cf:94:60:00:58:92:e0:26:f8:ad:17:df:92:52:
1b:9e:95:70:81:98:5a:f0:70:05:23:44:8f:f6:a9:d2:68:b3:
44:8e:77:65:24:e8:cb:ec:ac:2f:2e:3a:70:f2:13:47:d1:78:
1d:d6:1c:2a:f0:81:0c:49:d1:94:b8:03:62:ca:30:08:d6:f5:
a0:ad:87:38:0f:36:36:bf:d9:b2:10:2f:4f:d7:58:74:f5:04:
3f:4d:14:a5:d7:7e:f4:e2:b2:43:26:fd:86:f0:cd:d4:e6:50:
c0:ca:3e:5f:dc:b0:50:cd:b4:5d:f8:4f:19:ff:62:ca:ab:15:
30:3a:db:79:0f:5a:bd:ea:ce:a3:a4:3b:74:ca:4b:73:1b:49:
1d:ba:69:d4:6c:ce:05:16:07:e0:3e:4b:25:64:ae:ed:4a:1f:
07:6a:4f:a0:d3:54:d0:4a:a3:57:88:8a:2d:6b:39:2c:14:e6:
77:8c:47:5f:e3:a2:18:6b:84:79:7a:65:85:13:39:2c:9b:f6:
9a:ad:8c:f6:be:d2:34:56:f9:c8:bb:c4:2b:48:89:d2:9a:63:
c0:5d:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:45:30 2025 by rpki-client