Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/gtsG_e5t3YAxHhnI_DHS901RwK8.roa
File: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (raw, json)
Hash identifier: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=
Subject key identifier: 82:DB:06:FD:EE:6D:DD:80:31:1E:19:C8:FC:31:D2:F7:4D:51:C0:AF
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 0194282320EFBFA15ED063F8BD5AE045BBFA
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/gtsG_e5t3YAxHhnI_DHS901RwK8.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62421
IP address blocks: 193.33.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:20:ef:bf:a1:5e:d0:63:f8:bd:5a:e0:45:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82db06fdee6ddd80311e19c8fc31d2f74d51c0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:2b:87:9d:50:04:aa:7a:1e:68:0b:fb:ae:
73:0c:9b:27:3d:7b:ed:ae:41:9e:53:84:1a:ab:4a:
ce:eb:b6:0c:3a:30:47:fb:3b:8f:3d:5d:ad:80:e2:
77:d5:bd:67:5b:90:b3:b3:4b:30:32:fe:09:3c:0d:
c7:99:f3:e3:f0:99:b8:08:e2:38:81:c9:c6:03:b1:
40:a9:4a:5f:0c:a8:da:f4:bf:40:1e:31:c8:4e:8f:
1b:f9:02:08:ed:02:8c:93:62:09:ef:29:3c:2b:c2:
2b:47:fd:03:90:83:a5:6a:bc:94:08:b9:65:59:4f:
30:c9:9a:72:3a:52:7e:74:1e:b9:0f:61:06:2c:7b:
ff:94:2b:8c:f4:89:9e:c3:70:ab:80:cb:35:7d:1c:
ad:62:f6:e9:98:03:b7:f7:2c:65:b9:71:5c:fb:b9:
a8:17:1d:4b:47:c1:dc:e3:f3:89:72:15:ee:65:97:
b8:ff:ab:ce:eb:99:2c:f4:f0:36:9c:d8:f7:53:ce:
28:c0:8f:03:e8:56:cc:01:58:da:2d:5b:d9:4f:57:
6f:80:a5:4a:b7:b5:79:32:c8:a3:db:1d:86:2c:c0:
07:12:58:ac:cb:3f:36:2b:f8:24:02:ab:6b:5a:a9:
c7:fa:96:96:8f:3f:05:c5:5a:30:1d:45:75:36:ac:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DB:06:FD:EE:6D:DD:80:31:1E:19:C8:FC:31:D2:F7:4D:51:C0:AF
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/gtsG_e5t3YAxHhnI_DHS901RwK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.4.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:fb:97:33:72:7d:3f:cc:3e:50:48:22:28:38:ae:ed:ee:27:
66:5c:e8:64:57:3e:41:8e:4c:68:a9:d7:72:ba:42:35:f0:48:
b6:6c:e3:65:f1:19:3f:70:d2:f0:9d:d5:1d:33:44:72:95:c7:
06:67:30:dd:08:0e:d3:47:7c:cd:f3:3c:1b:a0:87:63:5d:19:
fc:e3:ce:dc:51:e4:f8:d1:5e:65:82:3f:23:d6:81:e2:05:46:
01:d2:e9:61:8c:1c:27:12:5e:36:d7:86:2e:94:f9:9c:51:a0:
04:4f:6d:66:c9:27:ba:19:f5:03:63:e8:18:39:f2:6c:f2:88:
06:ab:b8:6f:d2:8d:da:22:c0:3f:28:07:05:d9:d1:d1:4d:af:
2a:cb:11:10:9c:75:03:dd:e4:31:b5:ea:fb:b0:61:81:97:06:
c1:aa:52:a1:14:8e:94:96:86:4f:8f:a7:5a:62:1a:1b:4a:19:
04:f7:98:99:93:74:c0:df:3f:63:d4:84:b8:26:5b:c1:77:bc:
bf:90:b3:02:7e:13:4d:9a:56:95:0a:41:d7:4e:b3:a2:07:38:
e3:91:ed:a2:d9:e4:48:90:51:87:85:44:7c:35:af:93:80:d4:
d9:86:4a:d8:cd:24:c3:9b:01:30:86:aa:66:37:dd:cf:70:73:
7e:75:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:02 2025 by rpki-client