Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/GuJV6tWvMc7hiklHxH5EzaRwm8k.roa
File: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (raw, json)
Hash identifier: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=
Subject key identifier: 1A:E2:55:EA:D5:AF:31:CE:E1:8A:49:47:C4:7E:44:CD:A4:70:9B:C9
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 0196E9DA759B73D3C5729F942C45BF0DFF34
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/GuJV6tWvMc7hiklHxH5EzaRwm8k.roa
Signing time: Mon 19 May 2025 18:42:10 +0000
ROA not before: Mon 19 May 2025 18:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210173
IP address blocks: 2001:67c:8dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:da:75:9b:73:d3:c5:72:9f:94:2c:45:bf:0d:ff:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: May 19 18:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ae255ead5af31cee18a4947c47e44cda4709bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:37:2d:e4:5a:a8:8e:e4:e0:97:44:9f:d9:
3e:60:d5:9c:bc:15:b5:79:aa:eb:02:70:03:f8:7d:
a7:61:7e:c5:f8:24:70:96:9b:00:0f:09:50:d4:55:
18:2a:55:ad:de:5f:1e:fa:a2:6b:d0:b6:ba:88:24:
08:20:b5:5f:08:69:e6:c4:e3:28:bb:29:dd:eb:47:
fb:da:36:68:cc:1d:32:7a:fb:55:95:5e:25:9e:e2:
67:98:ea:5f:69:df:94:99:ab:bd:1e:9d:2f:3b:22:
45:c2:5a:97:95:75:95:1f:c7:f4:f4:5a:b1:c8:1c:
f6:bc:67:05:ea:1c:3e:87:fe:63:db:f9:6b:60:2d:
a1:ba:8f:f8:a9:e1:ce:f3:13:ed:88:47:98:2c:66:
91:0c:2b:fe:47:27:a3:96:0e:d8:f0:c1:8c:7d:0e:
12:46:67:3d:06:2f:22:f2:88:39:3a:49:66:5d:86:
e2:d4:16:aa:fd:d9:47:30:f7:67:a8:d3:8f:a3:be:
c4:2b:93:8a:30:33:3f:22:0b:4b:3b:1f:a6:1c:70:
f5:d0:19:a5:48:e7:7b:4f:b8:36:a7:07:07:45:70:
13:fb:35:8a:4d:98:15:3d:4b:c0:99:97:6f:5e:1d:
6c:56:b1:4f:a0:c6:e1:7c:e2:7e:a3:0b:6d:66:29:
3d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:55:EA:D5:AF:31:CE:E1:8A:49:47:C4:7E:44:CD:A4:70:9B:C9
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/GuJV6tWvMc7hiklHxH5EzaRwm8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8dc::/48
Signature Algorithm: sha256WithRSAEncryption
23:12:6a:25:67:8f:de:e0:f7:64:14:71:f1:ae:d8:2e:26:34:
62:0c:22:ad:45:41:dc:ce:98:00:52:6e:1b:6b:5f:98:e9:93:
bb:98:86:49:96:41:0f:8b:9f:bb:95:a1:b8:14:71:8d:80:82:
ef:dc:ec:39:09:8c:51:cf:1d:9c:45:57:9d:df:d0:f3:70:83:
09:60:bc:33:02:fb:62:c5:cb:00:4d:56:87:8e:a0:a0:25:8e:
14:44:06:92:54:d4:06:ec:93:92:31:2f:e0:d3:e2:d7:af:00:
72:e4:02:d0:4b:17:b9:14:ba:6a:c6:c5:16:f4:93:80:64:ba:
33:44:19:c0:c7:0f:f4:d7:34:02:b6:02:f4:8c:41:45:30:18:
5a:ee:92:e9:93:ca:ee:e3:d2:83:ec:5b:de:66:fb:c8:14:8e:
bc:b2:f1:e0:e8:68:c5:43:e2:24:a1:42:65:9c:a4:f2:4d:5a:
80:8f:a2:37:61:55:c0:14:89:a4:6a:46:2e:4f:2a:0a:17:f8:
d0:67:04:d1:26:18:a9:04:bd:b5:8a:14:fd:a0:bc:01:e4:91:
ff:8a:0f:6d:95:90:3f:97:94:10:64:6a:74:ca:f5:9a:6c:0f:
04:4e:3c:b5:9c:fb:dd:6a:c0:aa:ba:84:00:54:2c:2f:cc:6e:
f9:f3:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:02 2025 by rpki-client