Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa
File: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (raw, json)
Hash identifier: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=
Subject key identifier: 18:91:8D:19:32:EC:2D:A3:F3:A3:B4:55:F4:9F:5C:1A:8E:D9:08:A2
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 019420684DB918252A52D41220E2D130AD9D
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49666
IP address blocks: 5.232.0.0/13 maxlen: 13
5.233.240.0/20 maxlen: 20
5.238.0.0/16 maxlen: 16
5.239.0.0/16 maxlen: 16
5.239.244.0/23 maxlen: 23
46.100.43.0/24 maxlen: 24
46.100.44.0/24 maxlen: 24
89.37.144.0/23 maxlen: 23
185.105.100.0/23 maxlen: 23
185.105.102.0/23 maxlen: 23
188.215.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4d:b9:18:25:2a:52:d4:12:20:e2:d1:30:ad:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18918d1932ec2da3f3a3b455f49f5c1a8ed908a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:de:04:46:ae:f0:1e:2c:05:08:89:15:da:
12:dd:fd:34:6b:b6:aa:18:b5:11:3a:09:80:a3:1e:
96:de:79:5b:cd:3b:6b:ec:43:35:8d:b3:da:a7:88:
3b:de:09:8f:91:ca:83:72:bf:4c:7c:c7:d6:c8:bd:
a4:7e:8e:94:59:42:32:0d:f3:cb:c9:d1:a9:28:48:
d8:c7:bd:6a:fe:51:f1:2e:fe:4f:21:88:a4:4f:44:
9e:65:1c:d2:cb:f9:2d:2a:34:9e:f0:eb:fa:08:c0:
28:d8:83:f0:8d:04:f9:69:f3:49:2b:df:07:0c:9f:
3c:d6:ce:32:ae:68:aa:9e:33:2a:be:c5:27:9b:78:
3f:6d:17:87:be:a9:3f:4b:e9:c1:ac:0e:64:ce:f1:
4d:14:c3:d5:86:be:b7:f2:00:6a:23:f4:dd:de:92:
83:16:6d:d3:eb:1e:13:c7:70:ab:b3:12:44:73:19:
cb:d3:f1:b4:b2:7f:33:d0:9d:80:19:87:7e:ad:47:
f0:3a:2f:dc:01:b5:2f:83:6b:f7:90:f2:ed:ee:2b:
1f:4f:a4:12:5a:af:e1:94:73:dd:e5:d3:ea:35:bc:
7e:18:52:78:10:87:52:9e:84:18:d0:0f:f6:97:88:
7e:c3:b7:c8:3b:53:bd:76:d6:f0:40:5d:78:17:49:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:8D:19:32:EC:2D:A3:F3:A3:B4:55:F4:9F:5C:1A:8E:D9:08:A2
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.232.0.0/13
46.100.43.0-46.100.44.255
89.37.144.0/23
185.105.100.0/22
188.215.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:05:90:76:6f:60:17:0c:9b:19:67:d3:97:14:b7:68:27:d3:
44:d8:8b:64:43:97:47:06:bc:d1:5f:96:a6:bb:a8:91:ce:31:
e2:d3:dd:68:27:17:66:31:39:61:83:65:af:fa:82:61:16:8e:
97:67:c4:03:22:42:21:30:d6:de:c1:6a:86:e2:bf:fd:76:05:
6e:76:65:d0:bf:7a:3c:79:b0:dc:ff:82:94:01:f5:c4:25:90:
b5:fb:1a:b6:d5:79:ba:96:6f:8a:e3:b0:19:1b:90:9b:1d:8b:
7c:8e:ab:e5:19:b7:ea:a0:f0:07:f0:ba:06:70:f9:bc:da:1f:
99:ed:a5:d2:01:05:63:03:aa:b8:b8:fe:5b:4a:93:b2:45:c2:
26:f5:68:76:6a:dc:0a:9e:e3:a3:cf:60:8e:88:7f:17:07:ce:
02:c7:35:92:be:99:9a:62:49:27:e9:c9:fe:5a:59:28:09:a7:
61:11:7f:d9:0b:1b:d1:1e:d8:53:a9:04:14:84:1a:30:43:38:
31:1d:fb:c4:67:6b:e1:29:e4:a9:de:13:6a:38:50:c4:b3:a9:
4d:c7:4c:3b:a3:27:cf:6a:b3:3d:80:7f:2a:a2:6a:8b:ec:44:
73:f0:45:4d:8b:93:31:3b:21:95:de:cf:7c:2d:f4:5e:16:cf:
46:d3:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:26:46 2025 by rpki-client