Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/GTSBbDR219RZAquYdIoTDHgHmgw.roa
File: GTSBbDR219RZAquYdIoTDHgHmgw.roa (raw, json)
Hash identifier: ngBFPlJPXRRbecyh/UvxEcCezEIbaHsSWMP1a0MvwZE=
Subject key identifier: 19:34:81:6C:34:76:D7:D4:59:02:AB:98:74:8A:13:0C:78:07:9A:0C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195BF5E67CACF850C2D9E8839F94B6D4BD8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/GTSBbDR219RZAquYdIoTDHgHmgw.roa
Signing time: Sat 22 Mar 2025 19:39:49 +0000
ROA not before: Sat 22 Mar 2025 19:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215267
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:5e:67:ca:cf:85:0c:2d:9e:88:39:f9:4b:6d:4b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 22 19:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1934816c3476d7d45902ab98748a130c78079a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:a6:ac:61:69:27:92:18:b0:e5:f5:fe:e7:
da:c8:93:55:e5:4f:55:36:15:a8:35:71:05:65:95:
07:8a:73:58:52:c9:3b:ba:0e:9e:28:7e:98:2e:53:
91:e8:bf:f4:58:87:6e:98:f4:f0:6e:e5:9d:29:3b:
e2:dc:5a:41:4d:dd:b2:85:34:27:fe:11:c8:98:42:
4b:16:5c:24:4a:dd:1c:21:50:93:23:b7:2e:f6:26:
55:0a:dc:33:57:b5:51:79:71:6b:eb:0c:12:43:d5:
90:82:bf:f2:90:02:75:c0:56:6b:47:0a:7a:20:09:
17:41:94:13:8f:59:7a:c3:3b:51:c2:60:b3:b9:ff:
81:a6:19:a8:17:0e:66:35:e2:36:ca:c4:85:21:b6:
6a:2d:2f:4a:86:28:51:d1:12:c7:40:c9:dc:7c:0a:
35:80:64:52:37:95:4a:0f:59:39:74:a1:5f:ca:8f:
f1:f1:90:19:e8:65:24:eb:31:d0:25:0a:be:0c:ea:
5a:05:fd:ff:f5:13:3f:ae:fc:7d:94:b7:47:a2:09:
2d:1c:b2:99:f1:81:f9:d2:de:f2:10:01:e0:f0:e7:
b7:7a:23:80:12:f6:e3:df:bc:ec:81:6d:46:ce:53:
82:3d:d3:46:0e:ba:12:6c:45:dc:7d:6d:a1:b2:c2:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:81:6C:34:76:D7:D4:59:02:AB:98:74:8A:13:0C:78:07:9A:0C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/GTSBbDR219RZAquYdIoTDHgHmgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:57:3d:14:da:b0:3c:65:b3:9e:d0:1d:05:37:f6:58:91:f8:
6e:a9:03:d3:d0:91:1f:53:c0:c0:4c:6d:8e:4d:58:ef:4d:91:
e5:a4:5c:87:ea:43:fc:22:c8:40:4e:1b:a7:54:55:c0:e4:98:
e0:74:d4:47:07:26:61:03:15:77:ea:40:25:15:56:1c:d4:87:
bf:50:51:26:22:70:b7:bb:c1:5c:ca:a7:26:95:a2:96:d6:9b:
8b:59:b8:5b:9b:39:41:42:60:40:45:db:43:9f:4e:00:8e:47:
c9:a8:e0:5d:3c:4b:e3:00:82:47:2a:75:a4:55:f7:1d:5e:ae:
4b:88:d5:ed:9f:86:66:3d:1d:62:d9:aa:7f:85:59:09:8f:49:
b7:7a:fe:52:a1:1d:ab:88:de:21:33:c2:c2:6a:ee:68:99:d3:
81:89:71:8a:c8:f0:05:85:5a:5b:0a:42:14:11:97:41:bb:f5:
65:6b:9e:31:b7:9a:3d:6e:05:db:b3:2b:f8:9f:6d:22:2b:3b:
b6:90:32:2d:31:8d:99:fd:59:de:b8:9d:c9:09:13:97:e5:a5:
e5:ff:eb:44:0c:d3:5f:62:5f:cd:84:af:1b:06:4c:ff:c3:28:
84:55:61:a8:c6:54:c8:8d:a2:d3:e9:d9:3f:13:0c:e3:cd:55:
c1:b0:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:00 2025 by rpki-client