Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa
File: GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa (raw, json)
Hash identifier: 6erLpsgMI9bO4qfOCcfgJUCMEDYhGzxWY2AMUbeslCE=
Subject key identifier: 19:08:89:E8:0D:D3:42:F0:4A:16:1A:6A:B8:EC:5A:17:D7:86:19:23
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 0194206867C13B48725BC10ED01CD6CBC219
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12665
IP address blocks: 195.238.128.0/19 maxlen: 20
195.238.144.0/20 maxlen: 20
212.4.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:67:c1:3b:48:72:5b:c1:0e:d0:1c:d6:cb:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190889e80dd342f04a161a6ab8ec5a17d7861923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:d9:07:61:7f:b2:c8:41:9c:6e:ec:57:fd:
ce:43:93:7f:f0:45:fd:4c:86:b7:7e:72:3b:78:ef:
b5:e3:c3:5c:7a:22:4a:9c:f1:c0:df:37:10:52:cf:
df:a4:45:af:d0:8e:ed:26:c3:be:69:4e:c0:b8:53:
69:05:50:8b:01:f6:dc:cc:e0:7b:df:a1:a6:37:2c:
de:3a:92:42:a4:cb:3c:9f:74:f1:6c:4e:89:83:d0:
13:0e:4d:70:09:8c:65:b9:1f:e1:9d:59:7f:e5:03:
bb:2b:9e:a8:f8:65:5a:0e:30:f7:67:a3:75:fd:c8:
f5:d9:08:b9:64:fc:62:01:bc:2e:3e:71:f0:d5:cb:
f8:ce:33:63:73:8b:d5:74:2f:77:35:a2:e4:50:e7:
f1:21:a8:64:72:68:9f:1b:8f:98:ee:3f:9c:7f:93:
84:b2:b9:1b:60:0e:b9:ab:04:4c:0f:f0:51:5b:17:
c8:f2:b0:98:34:b9:ec:f0:d6:f5:cb:0f:d4:7d:0a:
26:7a:78:55:a8:22:c7:c8:2e:4b:fb:b0:6f:7d:8e:
45:34:34:d2:f6:5c:f2:94:82:54:fc:19:27:fe:ba:
72:25:e0:d3:6c:3f:4e:35:80:bf:31:6b:37:7d:7c:
c5:80:f3:f2:fd:65:eb:32:42:34:c4:3f:83:b0:12:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:08:89:E8:0D:D3:42:F0:4A:16:1A:6A:B8:EC:5A:17:D7:86:19:23
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.128.0/19
212.4.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:c7:f8:cb:97:d9:ee:48:c5:37:93:91:0c:16:a3:7f:8a:fa:
ba:7a:96:b9:d1:aa:53:ba:0b:1c:a8:e5:4c:85:a1:28:19:0a:
af:81:c2:93:fd:b7:dd:cd:98:d9:6b:e3:7e:6f:60:63:94:ee:
42:c6:f2:38:95:4a:55:1f:fc:fb:41:c4:c1:5b:ea:21:fa:37:
c8:ef:82:14:cc:0a:20:f5:80:f2:ff:13:7f:ff:bf:fe:87:db:
fd:5f:82:3b:0b:1e:c5:45:ce:29:5b:7e:e5:09:0b:35:62:69:
d7:42:cb:50:1b:03:0c:ab:c1:b2:d7:76:64:5d:13:2e:ea:a9:
39:96:59:cb:9d:db:b7:37:f0:3c:e7:ea:bd:cb:52:8f:72:40:
43:55:30:6c:72:94:8c:f8:5e:c4:46:24:73:7b:35:06:11:15:
6d:5d:1b:7a:5b:7f:0c:55:a8:41:b5:87:49:89:a4:05:b9:54:
42:21:91:ed:5a:ad:87:6e:7e:8f:a9:34:f7:e8:67:13:5f:46:
0b:d3:38:b0:3a:f4:33:54:55:86:08:74:3e:18:6a:e0:0e:e3:
c7:35:a1:42:61:b2:fa:8d:f9:4d:ca:ee:bc:10:39:32:0f:2f:
21:5c:d3:e5:98:3f:8d:44:b6:55:16:cc:f7:ee:12:73:09:6f:
2c:2b:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:29 2025 by rpki-client