Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/GdWQO6-P47cktCmKKEisZrhfGfE.roa
File: GdWQO6-P47cktCmKKEisZrhfGfE.roa (raw, json)
Hash identifier: Z6nlvl00PmRVPP4gBIIOTo5OQ+SqW4m3DvYkZPEOmzk=
Subject key identifier: 19:D5:90:3B:AF:8F:E3:B7:24:B4:29:8A:28:48:AC:66:B8:5F:19:F1
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0195FB8A271514725A893C812CBC95C1B84D
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/GdWQO6-P47cktCmKKEisZrhfGfE.roa
Signing time: Thu 03 Apr 2025 12:04:50 +0000
ROA not before: Thu 03 Apr 2025 12:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201746
IP address blocks: 45.131.28.0/24 maxlen: 24
94.158.253.0/24 maxlen: 24
94.158.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:8a:27:15:14:72:5a:89:3c:81:2c:bc:95:c1:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Apr 3 12:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d5903baf8fe3b724b4298a2848ac66b85f19f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:95:d6:a2:9f:2b:cb:9c:92:e7:ee:cc:70:
ca:b8:5c:98:76:0b:6c:7f:11:63:0d:93:d9:20:f7:
c9:9a:ce:39:bd:0c:0d:1a:1a:eb:ba:2c:30:8f:36:
28:80:b8:b6:30:fe:ad:c3:f2:ef:90:c8:a4:ca:fa:
fe:18:a2:01:23:e4:ea:32:b3:a7:af:e7:e5:21:df:
8a:12:ec:c9:8a:ba:81:97:13:24:c5:ad:3e:1e:b4:
f1:d2:9c:d1:f3:7c:3a:00:66:1f:0d:27:45:2b:ab:
e6:5f:fb:1c:46:4c:12:1f:85:33:c2:2e:a3:d0:37:
77:18:4f:47:a0:b1:32:4c:25:96:cc:8d:cd:3d:26:
1b:5f:19:54:ad:82:2c:3c:b2:02:e1:e5:a3:8e:b4:
8d:fe:65:18:a1:f3:7f:17:d7:38:c5:ed:5a:75:a5:
c1:18:ba:fd:7f:fd:d2:9b:3b:28:59:b5:f5:45:ec:
20:90:a7:e8:96:5d:1c:8b:14:40:d2:98:7e:a7:7e:
b9:b1:07:46:ee:87:05:b7:4c:48:19:44:f8:68:f2:
2f:4d:6f:95:1b:60:f9:44:b8:8c:30:57:fa:ea:d5:
c7:a1:a9:9c:95:21:71:c6:53:ca:e8:cb:a8:94:c7:
5e:76:5c:48:f8:c8:1b:2c:e9:b4:7c:cb:35:f9:34:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:90:3B:AF:8F:E3:B7:24:B4:29:8A:28:48:AC:66:B8:5F:19:F1
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/GdWQO6-P47cktCmKKEisZrhfGfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/24
94.158.253.0-94.158.254.255
Signature Algorithm: sha256WithRSAEncryption
6f:2c:93:71:d8:c5:6d:3a:18:8a:67:ad:f4:41:4e:e6:40:2f:
30:af:75:98:38:c4:31:22:ca:84:b4:a1:29:bc:d8:59:23:14:
8c:4e:4e:46:f0:96:0c:01:4a:2b:d2:62:85:b7:9f:d4:82:bd:
8f:78:a7:2c:5b:4c:cf:57:e3:bb:fe:f3:14:97:52:cc:81:77:
4f:d4:53:d2:0f:34:7d:d7:f2:01:82:ab:b3:08:d7:b1:02:21:
e4:00:0f:eb:d4:aa:7d:2b:ee:8c:b7:59:57:9d:74:69:eb:3b:
e2:77:e7:0d:1e:9e:38:a8:d2:2b:6e:a3:d6:b4:6d:cf:4b:25:
37:58:a7:b2:1b:f2:62:1d:33:3b:b1:6e:e3:7e:d1:64:97:28:
c7:21:51:41:8f:4d:04:e9:b3:94:61:1d:9d:03:d1:51:4f:3e:
03:bd:45:64:7f:8f:a4:b0:48:9d:29:bb:6e:1e:5f:6c:17:d5:
72:25:aa:b0:3d:8b:63:2b:8b:42:40:28:c8:01:6f:86:73:ef:
f1:d5:cc:0e:fc:3b:a5:0d:6f:3f:f6:70:33:fa:68:4c:1e:8d:
6b:33:b2:cd:bf:7b:79:43:a1:d3:62:14:03:ef:41:1d:b3:e6:
65:1f:52:c2:62:3a:4c:3e:90:ea:a7:55:57:6a:ff:6a:26:19:
73:91:bb:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:14:35 2025 by rpki-client