Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/gTxU19v1FIjd2W2ByIs00b9py5k.roa
File: gTxU19v1FIjd2W2ByIs00b9py5k.roa (raw, json)
Hash identifier: dE41WcjB8n3G/VzRfrS7Jc6uMbM/f0DRebeJS3Hdcos=
Subject key identifier: 81:3C:54:D7:DB:F5:14:88:DD:D9:6D:81:C8:8B:34:D1:BF:69:CB:99
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 019594054CC7BF510ECBC1A196302683A98C
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/gTxU19v1FIjd2W2ByIs00b9py5k.roa
Signing time: Fri 14 Mar 2025 09:38:50 +0000
ROA not before: Fri 14 Mar 2025 09:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213094
IP address blocks: 84.18.224.0/22 maxlen: 22
84.18.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:05:4c:c7:bf:51:0e:cb:c1:a1:96:30:26:83:a9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Mar 14 09:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=813c54d7dbf51488ddd96d81c88b34d1bf69cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:cb:e7:10:e7:8a:6f:30:c0:8c:d2:36:6e:
a4:99:38:c5:63:10:15:53:bf:96:04:b1:37:5e:47:
dd:a7:eb:9a:55:8f:f3:fd:94:73:23:60:09:2b:ab:
76:f0:9e:14:f5:cc:dc:1f:97:b4:b5:49:cd:71:21:
27:a0:29:44:ac:b0:70:d0:71:94:49:fa:31:59:a3:
68:76:79:ac:33:a6:5d:d0:5b:3d:ca:cc:72:bf:3b:
08:8c:a4:e6:39:41:ec:fe:bc:0a:f9:42:6a:80:91:
5d:0d:c1:61:6e:8b:b8:74:ea:87:3a:ac:57:bd:7f:
cc:f0:c1:87:71:f9:a3:01:50:31:82:65:e2:19:b0:
b8:73:53:cf:74:9d:fa:90:f7:a6:5d:ae:7e:0c:a6:
6f:10:65:5f:f8:97:da:f0:0f:20:ae:00:fd:c9:e1:
e5:f1:89:99:4a:d4:f9:3c:51:67:4a:5b:d4:14:ad:
16:79:ce:19:88:bb:b4:2a:cf:40:d8:bd:30:be:78:
69:32:a3:6b:70:f2:db:7e:27:fa:5a:93:9f:57:1e:
0c:fe:15:e9:55:2d:0c:e1:a7:27:d1:64:b3:32:f4:
20:fc:b5:03:bb:b7:60:85:10:e0:4d:9a:41:e4:ca:
bf:6e:86:03:32:0c:05:2a:95:45:49:cf:0c:cd:5c:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:54:D7:DB:F5:14:88:DD:D9:6D:81:C8:8B:34:D1:BF:69:CB:99
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/gTxU19v1FIjd2W2ByIs00b9py5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.224.0/22
84.18.240.0/22
Signature Algorithm: sha256WithRSAEncryption
85:15:e9:fa:3f:5c:87:31:e0:1f:82:e4:ba:bf:ab:c9:b8:59:
c3:69:81:6d:af:7f:29:e3:e8:a7:c3:23:66:54:fa:7d:c8:4a:
f1:0c:a1:4c:21:53:22:e3:43:83:3d:ee:14:ad:b6:c3:cc:71:
4d:e4:8e:61:92:62:a4:37:b8:3a:2d:33:46:0d:82:30:a0:f9:
b7:56:ff:33:b9:93:c1:ed:f3:65:aa:ff:e2:ae:c1:e9:54:84:
95:54:c6:95:0b:0c:96:c6:08:2d:c1:73:50:67:ae:fa:2f:86:
ce:5d:03:bf:12:ec:87:8c:55:45:ab:bc:da:89:c1:b4:e1:38:
01:bb:c6:ac:43:2a:c3:09:bc:5e:f6:f7:88:f5:9d:49:8c:d6:
54:b9:63:a4:8c:88:d2:3d:3b:89:67:3e:ed:15:d2:11:d3:d8:
ac:ae:4f:df:87:e3:88:c6:de:29:62:9e:45:6c:39:cd:cc:2c:
0c:04:e8:0e:50:f4:36:28:cf:6d:b0:13:40:b7:b3:ad:d7:23:
fb:3f:24:34:95:ff:b9:ca:59:80:0a:61:63:ac:00:e9:74:4d:
76:ed:4b:2b:f2:dd:4c:b6:71:3e:e2:76:62:ae:9f:fe:5b:9f:
16:bc:68:07:27:f4:c9:e8:28:c8:db:4d:3d:b0:47:31:43:cc:
8d:fe:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:55 2025 by rpki-client