Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GOMP5J_Avq-gzBilLwqnheH7us4.roa
File: GOMP5J_Avq-gzBilLwqnheH7us4.roa (raw, json)
Hash identifier: D6KAuPOVO3GeOho0dWMB1ZDI4Kp7x5ErnLDk0RdwkP4=
Subject key identifier: 18:E3:0F:E4:9F:C0:BE:AF:A0:CC:18:A5:2F:0A:A7:85:E1:FB:BA:CE
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA31952497CFB0D47A717D5D933310
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GOMP5J_Avq-gzBilLwqnheH7us4.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34358
IP address blocks: 91.250.247.0/24 maxlen: 24
188.212.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:31:95:24:97:cf:b0:d4:7a:71:7d:5d:93:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e30fe49fc0beafa0cc18a52f0aa785e1fbbace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:e0:76:9d:6d:df:12:a6:6d:6f:f1:12:49:
d5:bd:a7:28:9b:76:35:c5:2e:b2:8e:69:da:c2:f7:
cb:52:77:ce:bc:61:00:30:b5:b8:fa:04:75:43:fd:
c0:1d:9d:3b:ba:6b:a6:d1:d8:15:b5:50:59:70:e7:
3e:39:fd:51:e2:48:87:ef:98:c0:9b:72:92:9f:8a:
7d:0a:2d:cb:a9:58:ed:5e:9f:2e:cf:c0:c0:eb:fe:
01:e8:87:7e:8b:33:75:db:4c:75:09:fc:89:64:36:
c6:05:ed:2a:b7:c6:55:f6:2e:ef:53:89:cb:60:12:
57:39:84:9e:d8:74:9b:fe:dc:f2:35:b0:ef:b5:73:
89:4b:8e:2f:ba:66:61:95:81:0b:d3:8d:0c:26:eb:
2a:fa:1c:1f:df:66:52:da:32:f1:5b:07:a9:b0:0a:
84:ca:75:2d:8e:76:4d:95:a6:73:6c:5f:7e:98:72:
c1:c6:93:0f:12:ef:23:7b:fc:a8:c3:1d:4f:3d:70:
ea:f5:41:b2:26:50:0d:2a:15:bd:d3:dd:cb:1d:1d:
e1:36:d1:5f:8b:5b:bd:25:eb:22:56:0b:3e:b4:ea:
c9:15:69:ea:51:5d:b1:a6:de:4d:c0:98:98:bd:16:
c9:6b:e0:15:f1:c1:0e:79:d2:f5:e9:b3:7d:5a:54:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:0F:E4:9F:C0:BE:AF:A0:CC:18:A5:2F:0A:A7:85:E1:FB:BA:CE
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GOMP5J_Avq-gzBilLwqnheH7us4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.247.0/24
188.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
14:79:56:59:5c:3e:0c:00:98:b4:17:cc:91:dc:49:34:51:3a:
9a:b9:00:91:76:95:a6:aa:5e:3f:12:66:0a:24:71:5f:cf:3f:
82:e7:e5:a4:13:ce:54:93:93:21:69:2c:f7:4f:55:d9:76:32:
0b:ca:50:03:d6:00:7f:f6:e0:14:a7:83:6b:fd:57:08:70:ab:
0d:f5:18:d1:0b:f8:60:d8:1c:a1:96:44:b3:78:f9:98:8b:86:
cd:53:8d:3e:39:92:f4:1e:89:a0:c6:23:05:ee:58:07:8d:51:
b9:af:bb:8f:d1:cc:ff:30:a1:ca:5f:bf:8e:39:0f:05:b9:64:
f4:1c:ce:74:a6:38:50:64:f9:66:c3:ed:7a:13:b3:a8:11:72:
35:1a:bf:cd:c5:66:16:89:f9:b6:34:5b:0f:f8:9d:aa:5d:06:
21:c6:63:49:96:35:18:8f:fe:8c:42:48:04:24:12:c9:a3:72:
cf:8a:96:14:f1:32:37:50:b6:ba:c8:e2:a2:67:b1:4d:5e:2d:
29:6a:18:d4:b9:7a:d6:c4:51:54:f1:90:9a:64:3f:05:52:5a:
c1:f9:12:af:ae:a3:10:10:c6:ca:43:17:40:3f:9f:ad:39:a0:
46:15:ad:f0:00:67:24:6a:cf:4f:62:0b:4c:dd:ef:54:37:d7:
1f:96:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:11:22 2025 by rpki-client