Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/gcvZb-H-QkR_u2nZg2XXj4qsub0.roa
File: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (raw, json)
Hash identifier: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=
Subject key identifier: 81:CB:D9:6F:E1:FE:42:44:7F:BB:69:D9:83:65:D7:8F:8A:AC:B9:BD
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 01942068170702BFB1E176E4D6A13DA2217E
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/gcvZb-H-QkR_u2nZg2XXj4qsub0.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39376
IP address blocks: 62.148.0.0/19 maxlen: 19
62.148.0.0/24 maxlen: 24
62.148.1.0/24 maxlen: 24
62.148.2.0/24 maxlen: 24
62.148.3.0/24 maxlen: 24
62.148.4.0/24 maxlen: 24
62.148.5.0/24 maxlen: 24
62.148.6.0/24 maxlen: 24
62.148.7.0/24 maxlen: 24
62.148.8.0/24 maxlen: 24
62.148.9.0/24 maxlen: 24
62.148.10.0/24 maxlen: 24
62.148.11.0/24 maxlen: 24
62.148.12.0/24 maxlen: 24
62.148.13.0/24 maxlen: 24
62.148.14.0/24 maxlen: 24
62.148.15.0/24 maxlen: 24
62.148.16.0/24 maxlen: 24
62.148.17.0/24 maxlen: 24
62.148.18.0/24 maxlen: 24
62.148.19.0/24 maxlen: 24
62.148.20.0/24 maxlen: 24
62.148.21.0/24 maxlen: 24
62.148.22.0/24 maxlen: 24
62.148.23.0/24 maxlen: 24
62.148.24.0/24 maxlen: 24
62.148.25.0/24 maxlen: 24
62.148.26.0/24 maxlen: 24
62.148.27.0/24 maxlen: 24
62.148.28.0/24 maxlen: 24
62.148.29.0/24 maxlen: 24
62.148.30.0/24 maxlen: 24
62.148.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:17:07:02:bf:b1:e1:76:e4:d6:a1:3d:a2:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81cbd96fe1fe42447fbb69d98365d78f8aacb9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:bd:ff:6a:91:f5:68:fd:7b:0f:4f:3a:e6:
94:34:a1:c5:56:53:7e:cc:6f:23:85:93:95:d6:df:
39:3a:96:5e:ef:47:20:aa:72:9c:d9:b3:9a:73:41:
ab:bb:6f:ab:6f:f3:59:49:d5:d6:dc:ee:9c:c4:6e:
e9:38:ef:3c:4a:c3:cd:5b:8f:4e:1a:23:75:51:0b:
f7:fb:fd:43:c6:18:b8:2f:62:78:d5:b7:5e:65:ae:
6f:0e:c1:2e:f1:0e:1d:11:65:09:3f:37:02:02:d1:
f9:83:2e:fc:c4:23:7a:2e:88:b5:ed:13:9f:c3:a9:
6a:8e:27:ee:f5:f1:11:15:f2:04:60:39:52:16:c8:
17:14:71:c5:59:23:06:93:57:d1:35:30:63:48:87:
6c:ae:64:c2:66:6c:91:ae:02:af:b5:a8:02:d5:2c:
49:13:57:2d:65:f4:2f:d5:8d:be:d8:94:56:0e:f2:
9d:07:b5:b7:ba:f4:93:6c:72:9d:7c:25:ad:55:bd:
c2:0f:58:d8:0c:9e:c1:a9:be:9b:be:ca:f8:3b:9c:
a7:38:cf:8e:c5:45:c5:23:88:b9:35:5f:f9:26:b2:
04:37:4b:23:ea:cb:2e:ef:5e:94:80:74:39:4c:1d:
4c:f0:df:29:dd:25:5b:59:b2:d8:d3:ca:39:ae:4e:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:D9:6F:E1:FE:42:44:7F:BB:69:D9:83:65:D7:8F:8A:AC:B9:BD
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/gcvZb-H-QkR_u2nZg2XXj4qsub0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:8a:63:79:9a:71:e6:7f:32:e3:02:ae:1d:31:20:0d:48:64:
0d:bc:6b:5e:30:a6:1f:73:97:d5:77:f1:5b:1d:0a:9e:f4:13:
7e:4b:63:fa:3b:4d:70:15:32:8e:92:45:52:3c:5e:55:ad:ae:
30:af:a0:54:74:2b:ee:cc:17:bf:75:b7:0a:6c:4c:da:dd:01:
08:ac:db:2a:f7:34:cc:71:6c:66:c6:cb:63:1d:24:3c:13:6b:
d1:65:53:95:98:ab:5f:44:5d:76:f5:08:18:a3:ea:21:6a:14:
4c:29:b2:76:e9:48:fc:2e:8c:d7:54:89:53:32:71:be:d4:61:
28:17:e0:21:1f:01:c7:f3:31:df:2f:ef:1a:31:f6:2d:a6:66:
48:df:5c:2e:cf:67:41:e3:65:17:75:b0:9a:77:54:de:0c:a6:
2f:4f:a1:f0:4b:54:ef:86:aa:97:27:b1:6d:a4:af:60:e6:37:
59:68:d9:91:85:c0:a0:ca:68:91:1d:c8:4b:7c:2e:e7:2f:4d:
89:b8:52:42:11:c9:27:b8:0b:81:41:56:8a:7c:e3:fd:9f:cd:
5c:33:29:2c:3b:24:e4:49:55:d5:01:3e:c5:d9:ca:1d:e4:ad:
13:6a:46:71:33:5d:e4:cb:9e:40:6a:be:67:d8:6a:81:78:06:
cb:37:74:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaBcHAr+x4Xbk1qE9oiF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTMyZTNkYzM3MThmMmUxYjU1NmE2OTQ3MGIxZTczOWRk
MzkwMjIwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNiZDk2ZmUxZmU0MjQ0N2ZiYjY5ZDk4MzY1ZDc4ZjhhYWNiOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++9/2qR9Wj9ew9POuaUNKHFVlN+
zG8jhZOV1t85OpZe70cgqnKc2bOac0Gru2+rb/NZSdXW3O6cxG7pOO88SsPNW49O
GiN1UQv3+/1Dxhi4L2J41bdeZa5vDsEu8Q4dEWUJPzcCAtH5gy78xCN6Loi17ROf
w6lqjifu9fERFfIEYDlSFsgXFHHFWSMGk1fRNTBjSIdsrmTCZmyRrgKvtagC1SxJ
E1ctZfQv1Y2+2JRWDvKdB7W3uvSTbHKdfCWtVb3CD1jYDJ7Bqb6bvsr4O5ynOM+O
xUXFI4i5NV/5JrIEN0sj6ssu716UgHQ5TB1M8N8p3SVbWbLY08o5rk5VxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHL2W/h/kJEf7tp2YNl14+KrLm9MB8GA1UdIwQY
MBaAFDBTLj3DcY8uG1VqaUcLHnOd05AiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODct
NjZhZDFkYzg3MzYzLzEvZ2N2WmItSC1Ra1JfdTJuWmcyWFhqNHFzdWIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODctNjZhZDFkYzg3MzYz
LzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPpQAMA0G
CSqGSIb3DQEBCwUAA4IBAQBiimN5mnHmfzLjAq4dMSANSGQNvGteMKYfc5fVd/Fb
HQqe9BN+S2P6O01wFTKOkkVSPF5Vra4wr6BUdCvuzBe/dbcKbEza3QEIrNsq9zTM
cWxmxstjHSQ8E2vRZVOVmKtfRF129QgYo+ohahRMKbJ26Uj8LozXVIlTMnG+1GEo
F+AhHwHH8zHfL+8aMfYtpmZI31wuz2dB42UXdbCad1TeDKYvT6HwS1TvhqqXJ7Ft
pK9g5jdZaNmRhcCgymiRHchLfC7nL02JuFJCEcknuAuBQVaKfOP9n81cMyksOyTk
SVXVAT7F2cod5K0TakZxM13ky55Aar5n2GqBeAbLN3Q/
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:25:09 2025 by rpki-client