Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GBz9y95P8PDIcJhrMMpmV0mZCwI.roa
File: GBz9y95P8PDIcJhrMMpmV0mZCwI.roa (raw, json)
Hash identifier: dSj9Wh/I463emAgTbhC2m6aztY/BXSDsl2rzJ7qsj64=
Subject key identifier: 18:1C:FD:CB:DE:4F:F0:F0:C8:70:98:6B:30:CA:66:57:49:99:0B:02
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0196C821096784114FC41D569CFB73A43C31
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GBz9y95P8PDIcJhrMMpmV0mZCwI.roa
Signing time: Tue 13 May 2025 05:32:10 +0000
ROA not before: Tue 13 May 2025 05:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 217.147.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:21:09:67:84:11:4f:c4:1d:56:9c:fb:73:a4:3c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: May 13 05:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181cfdcbde4ff0f0c870986b30ca665749990b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:90:c8:b5:e0:ba:22:0c:86:e4:d4:3c:ba:
b4:a4:69:20:7d:5b:a3:b0:c8:94:26:74:51:aa:b3:
a7:74:85:16:89:d7:0d:80:98:8b:cf:30:98:41:68:
58:1b:d5:cf:79:61:f7:2c:77:2d:be:e0:b1:3c:91:
f3:ae:b1:01:bb:f2:52:8b:b8:a1:61:d9:e9:f6:1f:
c9:86:cc:c6:41:0b:b2:6f:9f:30:59:20:49:3a:28:
3a:ec:21:83:ec:c1:1d:86:6f:1d:02:fe:9f:19:ca:
58:6f:46:3a:20:17:3e:39:1b:1a:9d:65:b0:e5:a5:
89:a4:c1:74:aa:33:78:66:e0:20:a2:7c:11:cc:27:
87:6a:74:2c:46:9d:de:74:9a:e8:7d:5f:1b:a0:ee:
19:f3:c5:43:ac:87:89:0b:06:a5:9d:8c:00:53:8f:
fa:55:08:88:ba:45:1d:b5:6c:28:24:b1:64:2f:d5:
2a:20:40:5c:08:bd:af:2d:06:b0:a3:2a:7d:70:1e:
c6:ae:36:65:ab:f0:a6:2a:78:d1:c0:e8:d7:8e:ae:
61:28:4c:80:79:ea:f4:2c:8c:96:e5:fd:05:4b:51:
d3:93:50:64:db:df:b7:93:b0:79:e3:fe:b9:fa:9d:
59:ec:7d:92:72:0a:a5:97:04:e0:35:31:c5:e3:46:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:FD:CB:DE:4F:F0:F0:C8:70:98:6B:30:CA:66:57:49:99:0B:02
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/GBz9y95P8PDIcJhrMMpmV0mZCwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bd:ac:69:5f:6e:c4:ad:b6:fe:2c:18:d6:b3:08:5c:64:a1:
3d:ef:47:3f:4c:c0:93:74:0c:b9:f2:01:27:2b:c9:27:bc:42:
f7:6a:1f:ec:41:ba:c8:02:6a:40:36:07:9a:a6:fb:48:50:52:
e7:5a:1c:1b:4c:bf:b7:a3:e2:67:40:b5:8a:e6:5e:45:2a:88:
fc:dc:d9:20:71:be:3c:c3:83:65:9d:4b:b7:f1:dc:f4:5a:10:
a2:c2:ac:81:4f:7b:26:ad:e6:25:2f:02:a6:33:95:c3:f6:37:
a6:57:85:c9:91:6e:84:f8:9c:b0:44:17:fa:1b:3e:1f:c4:43:
86:10:0d:83:ea:dc:88:41:d1:8b:5a:8e:47:b4:f9:7b:58:d7:
a2:d4:e2:e0:ee:d5:11:ed:47:0c:52:8c:e2:94:ae:df:c1:b1:
63:eb:55:b8:ba:f0:27:9e:3a:3c:24:d9:74:df:a5:5a:c9:8c:
b9:aa:90:07:ec:15:94:5b:c1:a1:5f:49:c9:a8:bb:d0:d1:79:
d0:2c:4e:6d:aa:95:90:33:a4:67:e5:17:10:f8:b1:68:4e:29:
95:e4:42:d3:30:54:d9:2a:27:47:15:e4:0d:f5:18:25:60:c1:
46:89:9a:f7:8a:39:42:f3:08:4d:de:23:d6:eb:cf:63:8a:ad:
67:f9:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:18:56 2025 by rpki-client