Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/gZB-912_d67R6AKpQ4Eg3AExCoI.roa
File: gZB-912_d67R6AKpQ4Eg3AExCoI.roa (raw, json)
Hash identifier: 20uFVWh/2FSfkkn7jT72yUsHaqZSGC47MPNXDIzH1b0=
Subject key identifier: 81:90:7E:F7:5D:BF:77:AE:D1:E8:02:A9:43:81:20:DC:01:31:0A:82
Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial: 0194236A1B9379FA5A84DD62EB8E3CBD90C8
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/gZB-912_d67R6AKpQ4Eg3AExCoI.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 185.117.215.0/24 maxlen: 24
2a06:8781::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:93:79:fa:5a:84:dd:62:eb:8e:3c:bd:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81907ef75dbf77aed1e802a9438120dc01310a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:06:e6:fa:41:4e:b7:c0:d5:b6:2f:c9:de:
96:bc:7a:4e:2b:e7:1c:a6:60:2f:41:ae:9c:33:c2:
31:ad:79:52:f3:e4:9f:92:1a:db:89:f7:51:0d:6e:
0d:55:f4:cf:0d:07:83:f4:6b:e5:cc:93:f5:61:2d:
b0:fc:e9:c1:99:62:0f:ec:98:ce:0c:10:f7:55:1d:
3d:a3:03:2b:52:bd:58:db:d1:7e:2c:4c:37:71:ca:
0e:20:98:3d:d5:08:46:67:c7:1d:99:8c:3e:ed:03:
a8:1f:eb:e8:84:f8:f2:03:5c:b0:71:7e:85:37:c9:
fa:20:8e:38:4a:f6:1f:2d:dd:0c:45:64:f0:58:23:
80:20:b6:fb:f2:ab:df:45:3e:6e:59:72:09:64:1c:
32:56:3b:e7:d6:3c:39:15:9a:3a:d5:f5:5e:1f:3c:
50:7a:1b:d4:76:78:b5:9a:7c:3c:14:31:fe:5d:78:
22:7c:e0:2b:32:fa:34:8d:62:b5:f7:9b:d4:e4:ec:
c6:a4:66:98:3b:94:d6:c6:75:0b:a8:75:cc:6e:8e:
66:af:a8:4f:8e:c0:1c:88:53:f3:64:14:28:36:bd:
07:f3:a3:ad:dc:cc:4d:68:c6:82:26:37:fc:67:39:
57:4c:fd:b2:be:3b:c3:db:b3:61:7d:70:cf:3d:a4:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:7E:F7:5D:BF:77:AE:D1:E8:02:A9:43:81:20:DC:01:31:0A:82
X509v3 Authority Key Identifier:
keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/gZB-912_d67R6AKpQ4Eg3AExCoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.215.0/24
IPv6:
2a06:8781::/40
Signature Algorithm: sha256WithRSAEncryption
0c:b9:a1:ed:80:fc:3e:93:95:e9:9b:1b:c2:6d:4d:56:7e:18:
06:cb:c9:f4:cd:74:cf:fe:f4:16:ec:04:f9:fc:10:40:da:ec:
ac:2e:34:ce:c0:13:50:86:6a:c4:01:66:c6:0a:8e:a6:79:95:
6d:fb:c6:d1:cf:a1:16:a0:e5:ab:8a:03:29:66:25:57:cf:78:
3f:43:73:64:cd:51:f1:bc:54:8f:a5:57:f7:3b:86:13:e6:2e:
e2:93:3d:2b:a6:06:ac:e4:e8:4a:78:df:dc:16:44:e4:7d:46:
82:a2:d7:10:c6:fb:a2:ee:0e:ec:35:cb:3a:4c:83:69:97:51:
d2:f6:f2:7b:c5:86:63:81:e5:9d:e0:f0:e3:a0:6f:9f:0b:58:
be:79:69:b8:3c:58:be:d6:e1:d8:f9:6d:0d:db:97:c4:83:39:
d7:e3:e6:34:5e:5b:96:6c:50:48:54:97:72:d8:66:00:e3:1c:
d9:76:15:4d:f8:3d:cd:52:f5:c0:2e:98:c4:5f:97:42:24:66:
7b:1a:8c:9b:4c:db:cd:49:c0:d9:ed:41:14:ea:39:ce:a3:79:
54:73:81:a8:a8:1f:e0:bd:46:cd:48:a1:d7:32:4d:b8:cb:cb:
58:39:4f:6d:c8:fa:3b:10:1f:85:dd:46:81:58:ab:47:66:00:
91:5f:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:11 2025 by rpki-client