Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/gbBXW-vxInHi16BrBBKHLf7If3g.roa
File: gbBXW-vxInHi16BrBBKHLf7If3g.roa (raw, json)
Hash identifier: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=
Subject key identifier: 81:B0:57:5B:EB:F1:22:71:E2:D7:A0:6B:04:12:87:2D:FE:C8:7F:78
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 01942444F51FB8D3183AD192C761F5E2FAB7
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/gbBXW-vxInHi16BrBBKHLf7If3g.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.42.96.0/23 maxlen: 24
194.42.104.0/23 maxlen: 24
2a0f:340::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f5:1f:b8:d3:18:3a:d1:92:c7:61:f5:e2:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b0575bebf12271e2d7a06b0412872dfec87f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:54:45:aa:cb:4c:f9:4c:3d:51:28:e5:3e:
a8:ac:b3:f1:20:73:c7:14:49:65:61:e0:c8:e0:ec:
49:9c:bf:a9:75:57:e0:93:6e:85:97:b7:23:38:69:
fc:30:e0:55:ba:86:a4:ed:f2:7e:19:7f:7b:4c:06:
e4:73:6f:6e:b6:5e:80:38:6a:6e:05:14:1c:7a:08:
86:41:99:37:48:12:0f:d4:a0:14:27:df:76:ec:44:
5b:c0:f5:52:91:33:89:57:1d:6b:76:ee:2e:67:2a:
54:9c:b6:8a:3b:65:8e:2d:34:8b:ef:69:09:39:02:
ae:e9:1f:49:8e:5a:2e:76:69:73:40:b5:c4:dd:70:
7d:b8:e0:d1:04:b9:a9:58:0b:65:1d:95:2d:4d:b1:
7f:e7:da:a4:3e:a1:98:6f:ee:f8:09:eb:d9:06:8e:
41:40:df:e1:d7:fd:25:d5:da:8a:9e:2d:29:4e:70:
1b:92:8a:6f:c8:84:97:1e:80:f2:c2:13:5c:51:21:
03:ca:89:0d:54:f4:9b:b9:9b:a5:e5:a4:79:3d:4e:
6f:08:f4:2c:45:02:9a:49:1d:ed:b1:ce:22:b4:30:
b8:79:73:77:41:a3:02:53:8a:1d:24:a6:a4:8b:9f:
79:59:e4:b1:94:b3:a0:a6:b9:e1:89:db:4a:a9:b1:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:57:5B:EB:F1:22:71:E2:D7:A0:6B:04:12:87:2D:FE:C8:7F:78
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/gbBXW-vxInHi16BrBBKHLf7If3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.96.0/23
194.42.104.0/23
IPv6:
2a0f:340::/29
Signature Algorithm: sha256WithRSAEncryption
73:69:ab:f5:d1:b8:5b:c0:bd:86:92:70:8c:b7:28:33:19:86:
b7:01:44:49:53:ec:c4:d2:54:a0:22:ad:97:ea:e4:8f:10:70:
da:23:0f:ec:85:33:d2:9f:dd:ed:22:01:58:27:75:c0:42:bb:
fe:89:32:f4:86:c5:7d:1d:c0:63:70:2e:6a:e4:0c:e8:79:58:
09:32:1a:fc:cc:ca:eb:4b:16:23:26:b4:00:c4:00:4d:94:fb:
86:12:cc:94:e5:52:b0:28:7c:8e:3c:8d:bd:c7:10:45:ef:6c:
30:4a:74:16:c8:d6:12:25:d7:ed:57:fa:28:4b:7d:24:a2:95:
9e:72:d3:bb:3d:45:8f:12:8c:52:b9:5b:49:8a:f3:a1:25:1f:
a6:f1:0f:35:97:2b:9d:e9:fa:89:2b:14:dd:79:eb:bc:e7:63:
5a:b2:9e:26:8d:f7:8d:d7:f1:0e:6d:36:d9:cf:d8:f0:b9:c1:
c9:60:65:84:be:ef:87:24:76:fa:53:d6:b5:a4:0e:0e:70:4a:
ec:28:d4:4a:36:37:13:3b:7a:0f:05:8d:41:e0:99:e3:5e:a9:
40:83:e4:bd:c1:ba:55:05:e0:42:f7:44:f4:55:7b:2f:bd:b4:
9e:11:08:74:cd:00:cb:3d:84:17:07:7e:83:36:34:9f:b7:d2:
7b:97:a5:0a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRPUfuNMYOtGSx2H14vq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTQwZjAwMDk5NmViZmQyZGFiNzFjNDY5Y2M1MWVlODgx
YjNmNWUwHhcNMjUwMTAxMjM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWIwNTc1YmViZjEyMjcxZTJkN2EwNmIwNDEyODcyZGZlYzg3Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKVURarLTPlMPVEo5T6orLPxIHPH
FEllYeDI4OxJnL+pdVfgk26Fl7cjOGn8MOBVuoak7fJ+GX97TAbkc29utl6AOGpu
BRQcegiGQZk3SBIP1KAUJ9927ERbwPVSkTOJVx1rdu4uZypUnLaKO2WOLTSL72kJ
OQKu6R9JjloudmlzQLXE3XB9uODRBLmpWAtlHZUtTbF/59qkPqGYb+74CevZBo5B
QN/h1/0l1dqKni0pTnAbkopvyISXHoDywhNcUSEDyokNVPSbuZul5aR5PU5vCPQs
RQKaSR3tsc4itDC4eXN3QaMCU4odJKaki595WeSxlLOgprnhidtKqbFptwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIGwV1vr8SJx4tegawQShy3+yH94MB8GA1UdIwQY
MBaAFLGUDwAJluv9LatxxGnMUe6IGz9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEt
YTVhYmIyMGQyNDYyLzEvZ2JCWFctdnhJbkhpMTZCckJCS0hMZjdJZjNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEtYTVhYmIyMGQyNDYy
LzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwipgAwQB
wipoMA0EAgACMAcDBQMqDwNAMA0GCSqGSIb3DQEBCwUAA4IBAQBzaav10bhbwL2G
knCMtygzGYa3AURJU+zE0lSgIq2X6uSPEHDaIw/shTPSn93tIgFYJ3XAQrv+iTL0
hsV9HcBjcC5q5AzoeVgJMhr8zMrrSxYjJrQAxABNlPuGEsyU5VKwKHyOPI29xxBF
72wwSnQWyNYSJdftV/ooS30kopWectO7PUWPEoxSuVtJivOhJR+m8Q81lyud6fqJ
KxTdeeu852Nasp4mjfeN1/EObTbZz9jwucHJYGWEvu+HJHb6U9a1pA4OcErsKNRK
NjcTO3oPBY1B4JnjXqlAg+S9wbpVBeBC90T0VXsvvbSeEQh0zQDLPYQXB36DNjSf
t9J7l6UK
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:06 2025 by rpki-client