Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GvKIQgl1iO-dugbsKuhw7FNxuHs.roa
File: GvKIQgl1iO-dugbsKuhw7FNxuHs.roa (raw, json)
Hash identifier: TqaFs/yLAnRS9/gxois1dNbWL2jGhaiFgXhDothuXww=
Subject key identifier: 1A:F2:88:42:09:75:88:EF:9D:BA:06:EC:2A:E8:70:EC:53:71:B8:7B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC0BDFC09CADC33FAF0971AC9C770A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GvKIQgl1iO-dugbsKuhw7FNxuHs.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.22.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:df:c0:9c:ad:c3:3f:af:09:71:ac:9c:77:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af28842097588ef9dba06ec2ae870ec5371b87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:63:56:86:a5:b8:60:79:83:e0:bf:ef:20:
8c:98:c2:4c:db:92:24:17:80:ab:83:8e:3c:ac:0b:
b1:45:67:4d:fc:98:83:77:9b:68:e9:d9:48:e1:da:
d3:13:c0:21:3c:3b:55:94:6d:ca:f9:c2:30:46:1a:
aa:19:71:46:3e:03:a7:4e:f7:ab:5c:c9:c8:23:59:
82:61:62:ed:a1:e4:ad:6b:bb:12:50:cd:bf:ed:a7:
b2:3c:0c:d8:ee:01:e5:3b:39:2b:42:c5:1a:f9:f5:
c2:d6:e0:6c:db:95:81:d9:b0:0d:84:a6:b7:0d:1e:
33:e2:b3:b8:94:a1:7a:42:a4:16:d7:9a:4c:9f:1f:
37:26:09:28:e7:7b:95:d2:ff:22:9a:51:b0:1e:fa:
c8:e8:38:58:4f:cb:0d:4a:d0:84:26:98:ca:71:e6:
48:51:fe:70:be:d0:5b:f9:5b:73:0b:5e:84:45:0d:
d3:78:39:9f:05:f3:3d:ff:db:8a:23:38:80:fb:a7:
bf:d6:01:c2:4f:71:b2:00:bf:dd:6d:2c:db:08:b0:
7c:ad:4c:bc:75:0f:ad:bb:8e:99:33:25:93:1c:ff:
a9:be:8f:54:82:61:28:28:0a:f5:c5:bd:c7:e9:c1:
ca:c9:75:6a:19:aa:8f:c9:c0:5d:79:26:b9:9b:ee:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:88:42:09:75:88:EF:9D:BA:06:EC:2A:E8:70:EC:53:71:B8:7B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/GvKIQgl1iO-dugbsKuhw7FNxuHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
38:52:14:60:97:a7:3b:dc:b9:36:17:33:6f:1f:42:02:0f:ab:
40:4c:48:b2:e3:45:7a:84:d2:b0:44:ac:93:e8:bd:d8:15:c7:
31:7e:fe:7b:6c:39:96:40:99:50:bd:ab:2d:81:e7:27:f4:4c:
0b:9d:7e:13:1a:8f:bd:56:76:d8:4d:e4:7f:a1:58:30:cf:ef:
ad:92:0c:4f:3e:83:49:82:a0:41:aa:61:bf:38:39:6c:ec:32:
19:de:36:08:0d:5b:79:c1:a8:8b:bd:be:8f:c0:24:e6:b6:eb:
85:59:79:fd:5c:7a:ee:78:27:1e:53:99:5d:07:19:ba:bc:7d:
c9:c8:d9:46:17:c3:5d:47:03:c5:fe:10:db:c5:ef:da:9c:0a:
15:32:2c:4e:9a:9e:fb:2b:57:d3:9d:a0:d3:84:3b:97:99:52:
d1:4e:56:2b:1a:69:42:24:5c:f6:0f:72:ef:3a:b6:cc:f7:e2:
95:8f:f1:63:68:fe:5a:20:8b:e1:7e:08:1c:6e:24:64:03:d7:
24:45:fb:6b:52:0a:7d:95:35:a0:c9:d3:d3:1a:d1:c0:a0:1d:
6e:f6:6c:dd:7d:5b:8b:01:e8:da:88:77:c7:0e:56:c4:4b:5e:
c4:4e:4a:f6:95:02:c1:50:30:92:15:2b:78:d7:44:a7:74:d0:
ad:cd:10:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/AvfwJytwz+vCXGsnHcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwMTAxMTc0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWYyODg0MjA5NzU4OGVmOWRiYTA2ZWMyYWU4NzBlYzUzNzFiODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2ljVoaluGB5g+C/7yCMmMJM25Ik
F4Crg448rAuxRWdN/JiDd5to6dlI4drTE8AhPDtVlG3K+cIwRhqqGXFGPgOnTver
XMnII1mCYWLtoeSta7sSUM2/7aeyPAzY7gHlOzkrQsUa+fXC1uBs25WB2bANhKa3
DR4z4rO4lKF6QqQW15pMnx83Jgko53uV0v8imlGwHvrI6DhYT8sNStCEJpjKceZI
Uf5wvtBb+VtzC16ERQ3TeDmfBfM9/9uKIziA+6e/1gHCT3GyAL/dbSzbCLB8rUy8
dQ+tu46ZMyWTHP+pvo9UgmEoKAr1xb3H6cHKyXVqGaqPycBdeSa5m+6VswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBryiEIJdYjvnboG7CrocOxTcbh7MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvR3ZLSVFnbDFpTy1kdWdic0t1aHc3Rk54dUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaLMA0G
CSqGSIb3DQEBCwUAA4IBAQA4UhRgl6c73Lk2FzNvH0ICD6tATEiy40V6hNKwRKyT
6L3YFccxfv57bDmWQJlQvastgecn9EwLnX4TGo+9VnbYTeR/oVgwz++tkgxPPoNJ
gqBBqmG/ODls7DIZ3jYIDVt5waiLvb6PwCTmtuuFWXn9XHrueCceU5ldBxm6vH3J
yNlGF8NdRwPF/hDbxe/anAoVMixOmp77K1fTnaDThDuXmVLRTlYrGmlCJFz2D3Lv
OrbM9+KVj/FjaP5aIIvhfggcbiRkA9ckRftrUgp9lTWgydPTGtHAoB1u9mzdfVuL
AejaiHfHDlbES17ETkr2lQLBUDCSFSt410SndNCtzRBU
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:43 2025 by rpki-client