Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa
File: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (raw, json)
Hash identifier: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=
Subject key identifier: 18:EC:A5:E9:4F:9D:1A:F5:43:D3:E8:CA:5A:D6:52:77:99:4F:72:FC
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 019420D65DA137D86CBBF6FAE92AD566DF21
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58243
IP address blocks: 46.253.133.0/24 maxlen: 24
2a11:36c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5d:a1:37:d8:6c:bb:f6:fa:e9:2a:d5:66:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18eca5e94f9d1af543d3e8ca5ad65277994f72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:96:9c:de:5e:81:23:34:2c:44:63:a6:f8:
2b:82:f5:5b:36:27:8a:79:ae:fe:e0:d4:11:2c:80:
28:b0:f6:62:19:0c:47:03:19:1d:a7:97:3c:aa:c0:
b3:69:b2:6b:bf:3a:37:20:ee:e5:40:f8:bd:8a:95:
bf:66:f1:74:f4:af:ae:0e:c3:cb:6b:df:a2:aa:fe:
9a:62:d6:c1:59:f1:4a:b0:81:c9:25:48:d0:11:4b:
0d:9f:48:e6:a7:a1:c0:35:cb:e0:5a:c0:cd:d5:38:
32:61:6d:83:8d:41:9f:08:56:ed:3e:45:07:01:55:
18:e6:a3:54:c6:18:96:49:5c:8f:72:72:ec:58:41:
2b:74:f5:c8:ac:4e:34:ce:ee:28:eb:dc:0b:ce:f8:
fd:a7:bb:ac:05:ce:1c:f4:cf:93:e9:42:f5:93:db:
1b:f0:62:a6:16:8d:fe:4e:69:23:73:44:81:c7:a4:
0a:98:b2:ee:ce:2d:03:83:9e:70:6f:63:d9:5a:27:
1f:73:b4:1a:13:bf:64:09:56:66:b4:1f:7f:98:91:
82:fc:ae:9c:fe:b8:cd:c8:c8:f0:3a:e5:41:a2:99:
25:7f:cc:35:b9:28:27:ad:85:5b:06:49:a9:91:1d:
d6:c2:5e:0d:d0:a3:07:b1:5a:36:92:0e:69:29:fc:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:A5:E9:4F:9D:1A:F5:43:D3:E8:CA:5A:D6:52:77:99:4F:72:FC
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.133.0/24
IPv6:
2a11:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:d7:2e:47:c4:01:cf:fd:9c:c9:0f:ad:7b:ce:01:21:44:58:
cd:2b:61:82:47:af:cc:dc:f0:79:85:8b:c4:7b:61:a9:e6:d3:
05:c4:80:2d:79:4b:d2:f2:9c:f1:b4:f5:d6:7e:48:3f:4b:6a:
13:0b:d4:72:ab:be:96:ae:6e:d8:08:bf:7a:53:81:15:53:b5:
b4:9d:be:c0:98:95:7f:9f:9d:64:68:cd:9b:5d:79:77:5c:14:
32:d6:e4:28:4d:15:a8:df:c9:ce:cb:63:97:d4:44:bb:09:4b:
64:bf:67:cc:e3:c8:59:93:da:9d:0f:db:ea:fa:fd:45:2d:1a:
d4:2e:d3:76:ce:6d:99:1c:b4:13:83:c2:7e:a5:cf:14:4e:f7:
32:35:24:c6:91:6a:c8:81:f1:c1:60:86:e4:98:be:73:51:07:
4c:9a:c5:02:d1:28:bc:31:f7:db:9a:a6:ea:3f:f1:5f:43:4b:
80:62:4e:38:62:5c:bf:82:20:2e:10:04:5c:b7:8e:76:a1:68:
36:3f:b5:3c:29:3a:7c:cf:63:09:b8:10:7b:9a:29:c7:1a:4c:
1c:08:0b:26:6d:6c:b1:5d:2e:4b:de:a9:d0:b1:22:4c:4b:89:
de:ae:d9:5a:ed:9d:e5:2c:86:06:b3:d1:1f:84:da:47:43:b0:
c3:ff:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:47 2025 by rpki-client