Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/gaApv-P3VWnlKNagOLOw5elCXUg.roa
File: gaApv-P3VWnlKNagOLOw5elCXUg.roa (raw, json)
Hash identifier: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=
Subject key identifier: 81:A0:29:BF:E3:F7:55:69:E5:28:D6:A0:38:B3:B0:E5:E9:42:5D:48
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 01942826266339FD7136FA6E48202E036B64
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/gaApv-P3VWnlKNagOLOw5elCXUg.roa
Signing time: Thu 02 Jan 2025 17:52:56 +0000
ROA not before: Thu 02 Jan 2025 17:52:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209975
IP address blocks: 91.239.147.0/24 maxlen: 24
2001:67c:1240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:26:63:39:fd:71:36:fa:6e:48:20:2e:03:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Jan 2 17:52:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81a029bfe3f75569e528d6a038b3b0e5e9425d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:e5:8b:a5:24:d1:69:03:28:43:05:55:a7:
11:b1:f5:93:c3:85:86:04:1d:fb:de:e0:8c:cf:4d:
6d:7e:24:30:79:e8:24:38:98:d9:89:50:7a:18:3d:
21:1f:7c:1a:95:ee:59:eb:dc:c7:bc:a1:fc:a8:f7:
02:9b:39:c9:25:9b:44:4b:6e:6a:26:8f:37:67:56:
d7:2f:04:eb:41:39:d9:2c:e5:a2:9e:22:f1:1d:78:
d2:de:59:85:31:b5:f5:36:c7:34:db:9d:02:a6:40:
f9:5e:75:28:3a:02:82:c2:68:eb:30:79:7c:04:6a:
ad:2d:3a:fa:3b:74:0e:7d:a0:6c:47:b6:aa:87:b6:
34:42:2f:25:27:a3:0a:81:03:22:29:33:fd:ad:b6:
fb:7e:34:4e:b9:d2:16:db:25:85:27:22:f0:c3:4f:
70:29:71:5e:fc:cb:f5:1a:b1:e7:88:44:66:f2:2f:
e0:02:8c:de:bb:38:c5:96:fe:04:19:e9:ac:68:52:
7e:52:9c:8f:0c:93:c1:f9:f7:a8:bc:35:9f:28:74:
08:4e:01:f1:3e:43:cc:b9:df:e0:e2:a4:c2:4e:a2:
e0:d0:74:08:eb:0a:39:c2:f0:5e:d5:91:13:27:66:
f3:1b:69:5f:1f:9e:16:22:26:83:d6:cc:31:f1:36:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:29:BF:E3:F7:55:69:E5:28:D6:A0:38:B3:B0:E5:E9:42:5D:48
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/gaApv-P3VWnlKNagOLOw5elCXUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
Signature Algorithm: sha256WithRSAEncryption
2f:b8:db:40:3b:26:10:59:87:59:9b:4c:83:36:7c:2d:a0:12:
3c:4b:0d:dc:13:cb:a4:65:4e:ea:c0:a2:9c:5f:05:3d:59:f0:
ac:4f:9f:51:e1:ba:d9:d5:d3:2f:de:23:7a:3c:5a:b0:48:9e:
18:20:81:2d:30:05:70:6a:64:e3:c2:cb:f5:ea:75:70:4b:d4:
7a:74:58:9d:da:b7:26:c2:20:03:81:76:7a:72:3a:e2:9a:dd:
cf:e1:bb:fe:67:a2:86:67:87:89:5f:36:7c:26:4c:e7:9a:f4:
c6:41:5a:8e:78:a4:6e:d6:2f:7e:48:88:d0:76:14:75:e7:22:
71:1a:79:8e:19:9e:f9:14:7f:7a:3a:d3:10:4b:82:eb:55:02:
0e:43:82:e3:62:46:82:c2:95:a3:15:c0:32:06:87:6e:b2:73:
30:d7:90:57:c7:10:94:89:d8:79:9a:fc:07:7c:77:11:86:95:
1b:73:3f:ab:e8:28:c4:8a:56:70:3d:83:fd:10:28:3e:2a:b9:
01:fc:d4:5f:96:a2:90:de:0d:20:23:03:b8:32:02:6f:5c:ab:
36:c9:f2:c7:a6:60:4f:7f:b3:f2:00:ed:ed:cf:f7:6b:d3:12:
96:b9:60:ed:d7:b0:0e:a4:0c:55:a0:ab:b1:49:79:c3:9e:fe:
be:47:10:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQoJiZjOf1xNvpuSCAuA2tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjUwMTAyMTc1MjU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWEwMjliZmUzZjc1NTY5ZTUyOGQ2YTAzOGIzYjBlNWU5NDI1ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DHli6Uk0WkDKEMFVacRsfWTw4WG
BB373uCMz01tfiQweegkOJjZiVB6GD0hH3wale5Z69zHvKH8qPcCmznJJZtES25q
Jo83Z1bXLwTrQTnZLOWiniLxHXjS3lmFMbX1Nsc0250CpkD5XnUoOgKCwmjrMHl8
BGqtLTr6O3QOfaBsR7aqh7Y0Qi8lJ6MKgQMiKTP9rbb7fjROudIW2yWFJyLww09w
KXFe/Mv1GrHniERm8i/gAozeuzjFlv4EGemsaFJ+UpyPDJPB+feovDWfKHQITgHx
PkPMud/g4qTCTqLg0HQI6wo5wvBe1ZETJ2bzG2lfH54WIiaD1swx8TaVjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIGgKb/j91Vp5SjWoDizsOXpQl1IMB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvZ2FBcHYtUDNWV25sS05hZ09MT3c1ZWxDWFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E
AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAC+420A7JhBZh1mbTIM2
fC2gEjxLDdwTy6RlTurAopxfBT1Z8KxPn1HhutnV0y/eI3o8WrBInhgggS0wBXBq
ZOPCy/XqdXBL1Hp0WJ3atybCIAOBdnpyOuKa3c/hu/5nooZnh4lfNnwmTOea9MZB
Wo54pG7WL35IiNB2FHXnInEaeY4ZnvkUf3o60xBLgutVAg5DguNiRoLClaMVwDIG
h26yczDXkFfHEJSJ2Hma/Ad8dxGGlRtzP6voKMSKVnA9g/0QKD4quQH81F+WopDe
DSAjA7gyAm9cqzbJ8semYE9/s/IA7e3P92vTEpa5YO3XsA6kDFWgq7FJecOe/r5H
EBo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:57 2025 by rpki-client