Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/GPUtwAKGNzSr8rbND1H2VHmziE4.roa
File: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (raw, json)
Hash identifier: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=
Subject key identifier: 18:F5:2D:C0:02:86:37:34:AB:F2:B6:CD:0F:51:F6:54:79:B3:88:4E
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 0196194B106099DDC01CFE77428431F0E94A
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/GPUtwAKGNzSr8rbND1H2VHmziE4.roa
Signing time: Wed 09 Apr 2025 06:44:31 +0000
ROA not before: Wed 09 Apr 2025 06:44:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12816
IP address blocks: 129.187.0.0/16 maxlen: 16
141.40.0.0/16 maxlen: 16
141.84.0.0/16 maxlen: 16
2001:4ca0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:4b:10:60:99:dd:c0:1c:fe:77:42:84:31:f0:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Apr 9 06:44:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f52dc002863734abf2b6cd0f51f65479b3884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:34:bd:41:61:b5:19:c6:e2:52:50:b5:f0:
41:1b:8d:7b:ef:93:55:bb:01:f6:92:a0:79:0d:ae:
c2:5a:e2:ea:35:c0:3f:16:c7:5c:f8:b0:fe:29:0c:
91:9a:98:35:65:79:29:15:6d:f9:4c:3f:ea:53:3f:
b2:84:b2:b0:72:0f:f2:1b:9b:c6:5e:7a:3c:48:f1:
5d:a9:bb:8b:99:ec:b0:ac:ca:a4:06:b3:fe:ab:d6:
29:23:52:42:c1:57:30:4e:c9:ef:9d:cf:aa:63:b8:
11:04:c3:cc:84:9e:e5:0b:dc:b1:6d:9c:ff:85:50:
0a:7b:c9:a0:1c:81:e8:d9:7d:9a:16:42:f6:b8:f9:
c8:e8:fb:f3:3b:0a:c8:a1:28:3b:ea:0e:3d:56:c9:
12:c0:67:97:a7:97:44:2f:7e:b7:57:f8:10:29:03:
eb:11:9e:ca:58:70:0b:9a:a6:94:88:8e:3d:d1:88:
93:ab:45:97:22:c8:7b:0b:eb:1e:da:26:da:0f:7a:
7c:06:b1:3f:20:a9:26:c4:06:1f:98:c4:7d:7f:c1:
67:44:73:34:27:06:52:ba:48:12:2b:4f:bb:7a:2b:
ca:21:46:f0:e9:04:6e:23:23:24:78:e0:63:d3:95:
48:fb:5d:ef:b3:69:65:2b:5c:26:7c:c2:df:c7:d1:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:2D:C0:02:86:37:34:AB:F2:B6:CD:0F:51:F6:54:79:B3:88:4E
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/GPUtwAKGNzSr8rbND1H2VHmziE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.187.0.0/16
141.40.0.0/16
141.84.0.0/16
IPv6:
2001:4ca0::/29
Signature Algorithm: sha256WithRSAEncryption
88:69:82:bb:9b:c8:b2:ed:a3:3c:49:6c:f5:67:12:40:f4:32:
7d:9b:95:22:e8:69:62:6a:f4:a9:cb:17:22:72:cb:f4:dc:44:
c3:10:d6:8f:15:ac:22:5a:b8:8a:47:c7:31:ba:6b:f6:96:ef:
34:67:c9:0d:8f:32:bb:34:c9:b4:34:1b:46:09:39:db:d7:b4:
83:7b:bd:ad:2c:c3:98:67:58:f1:0d:6a:a0:2f:60:7b:c7:fb:
7d:2a:31:b3:76:c3:1a:23:54:b3:72:61:0a:49:7a:45:b4:22:
1a:03:55:2b:6a:3f:d5:9e:a0:10:32:50:4b:b6:56:25:0a:b9:
45:0c:e1:31:00:47:d6:87:28:34:5b:7b:4f:e9:bf:2d:ca:44:
3a:10:91:17:17:76:69:f3:ee:99:b7:e9:c8:b0:e8:16:5d:97:
2e:88:8c:96:5f:71:52:cc:95:cf:52:56:56:52:b0:97:b0:f6:
38:a3:fe:ba:e0:e8:f6:5f:29:1d:49:01:e9:4c:03:d8:2f:aa:
9a:69:6c:d3:86:51:b9:e7:9f:df:64:67:df:88:4a:5d:9a:78:
5c:8f:6d:64:a3:44:c2:e2:b4:21:90:81:f3:03:7d:22:4b:ea:
16:e3:c8:93:30:da:60:dd:71:8d:67:be:ef:cc:b6:5e:08:02:
0a:57:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:58 2025 by rpki-client