Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gio6F55GO42GZsRq8FQUo7P8nrk.roa
File: gio6F55GO42GZsRq8FQUo7P8nrk.roa (raw, json)
Hash identifier: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=
Subject key identifier: 82:2A:3A:17:9E:46:3B:8D:86:66:C4:6A:F0:54:14:A3:B3:FC:9E:B9
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F70987812A3933990EF9DB9CDDA1
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gio6F55GO42GZsRq8FQUo7P8nrk.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64236
IP address blocks: 45.81.150.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.215.148.0/24 maxlen: 24
185.215.150.0/23 maxlen: 23
185.215.150.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
185.235.14.0/23 maxlen: 23
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
2a0b:aac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f7:09:87:81:2a:39:33:99:0e:f9:db:9c:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822a3a179e463b8d8666c46af05414a3b3fc9eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:be:f5:35:de:ee:2c:04:75:f1:03:9a:79:
35:ec:2c:f7:24:0c:60:fd:3e:80:8f:30:5b:55:f9:
cd:e2:07:3d:8d:49:25:2d:71:cc:60:92:3d:2c:5d:
58:4b:fe:3d:be:bc:80:be:b0:a7:56:6c:35:47:00:
a6:fb:eb:33:a0:df:57:65:8f:9a:f6:60:c5:d9:f8:
5d:e7:ae:51:ce:1d:fc:56:55:7b:34:6a:63:0f:bb:
74:2c:6d:45:23:00:05:ea:0c:66:71:da:c4:4a:49:
5d:ff:de:03:88:6d:2b:0f:13:92:28:a0:47:62:0b:
f7:31:87:64:66:8f:cd:69:49:db:d5:7c:e3:7c:a7:
ae:40:fe:eb:c2:11:45:6f:23:07:f6:95:3c:67:45:
ff:fb:cb:8a:d7:9c:89:33:cd:ca:e0:d5:d6:90:f1:
20:0a:74:19:79:49:a4:f3:88:79:28:91:9d:8c:8a:
64:a0:86:5c:31:af:62:50:ca:ac:b9:21:3f:ac:b4:
fa:a9:45:5c:2a:30:f5:20:2b:9a:7d:a2:3e:2e:ba:
bb:69:f2:5d:64:d0:e8:d8:22:c9:66:a3:61:f1:db:
82:f9:8e:3d:9b:63:43:0f:a2:82:05:17:90:b1:d1:
39:c2:dc:05:69:a7:35:17:b0:cf:4b:44:43:92:a6:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:3A:17:9E:46:3B:8D:86:66:C4:6A:F0:54:14:A3:B3:FC:9E:B9
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gio6F55GO42GZsRq8FQUo7P8nrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0/23
185.215.148.0/24
185.215.150.0/23
185.218.235.0/24
185.235.14.0/23
193.39.185.0-193.39.186.255
212.162.148.0/22
IPv6:
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
46:68:bb:dd:f0:37:19:68:22:a4:d0:b2:3b:df:39:cd:94:b5:
72:7b:6c:28:04:24:3d:d6:8b:c0:7c:3c:4c:a4:06:6a:23:bb:
42:02:da:f1:dd:6e:8d:62:bb:10:1a:61:b2:48:48:4a:7d:4c:
7d:1c:e1:a9:e6:ed:be:b9:cf:fa:d9:6d:46:7e:51:7d:44:dc:
4d:2c:99:ce:30:07:67:15:16:39:70:b0:fa:da:6f:24:61:e8:
d5:d9:7b:bd:02:24:79:f6:e7:e8:c5:db:32:e3:4e:e2:5a:1b:
1c:bb:21:23:71:a3:cb:45:ae:68:26:c9:3b:f9:7e:7c:22:b0:
61:14:dd:f3:13:a2:90:f2:9f:65:e3:c4:fb:dc:eb:d3:66:ed:
72:c6:80:ef:8d:3e:eb:b4:9b:b3:6b:ca:ce:3f:7a:ec:1f:50:
64:ea:89:2e:35:ca:ab:75:c0:eb:71:ac:e3:8d:9f:9a:45:a2:
fa:b6:26:28:94:53:ae:f5:25:bc:a5:b7:67:ad:07:c2:7d:2c:
ff:d1:43:6c:94:06:7d:63:46:b6:89:6f:fb:1d:a9:df:f2:4c:
83:0c:e9:13:d7:8b:16:2b:68:ee:cb:9a:62:f8:e9:ec:6f:c1:
af:23:a0:04:1a:e3:8b:8d:49:1f:72:0a:19:59:53:18:0c:a8:
18:67:9b:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:16:29 2025 by rpki-client