Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/gCOs3KLA0tgwiwT7QoZeSEcVloU.roa
File: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (raw, json)
Hash identifier: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=
Subject key identifier: 80:23:AC:DC:A2:C0:D2:D8:30:8B:04:FB:42:86:5E:48:47:15:96:85
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 0194258FAEA455F991BCC7F7DCFDA141E647
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/gCOs3KLA0tgwiwT7QoZeSEcVloU.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41627
IP address blocks: 31.171.224.0/20 maxlen: 20
46.251.12.0/22 maxlen: 22
89.251.32.0/21 maxlen: 21
89.251.40.0/21 maxlen: 21
91.147.236.0/22 maxlen: 22
185.167.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:a4:55:f9:91:bc:c7:f7:dc:fd:a1:41:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8023acdca2c0d2d8308b04fb42865e4847159685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:d7:d5:d2:e1:8c:cc:ec:cd:7c:7e:1c:f9:
41:b2:61:b9:74:5a:58:be:4a:a0:6f:b2:0f:9d:80:
4f:fd:99:64:23:7d:15:5d:4e:1a:a8:35:00:b6:7a:
be:2c:7b:1d:67:83:64:cf:11:90:dd:7f:eb:33:d2:
c1:63:4e:50:24:69:37:06:0d:03:29:38:56:05:62:
bf:a7:95:ef:06:34:d4:c5:c6:c8:15:5e:19:0f:bf:
d7:db:9e:f3:12:3a:ec:10:7b:b4:b5:67:d9:11:9e:
f0:c6:7f:8d:bc:b6:40:44:dd:d7:31:b1:ee:07:5e:
60:a3:3d:98:93:0c:0e:a1:9e:d0:63:80:c6:37:40:
12:f4:68:82:14:fa:7d:79:f9:42:2f:a9:40:b0:c2:
00:9e:0d:ff:d8:62:f9:50:fd:25:8d:73:c7:ba:ac:
73:8c:b3:39:ae:a0:bc:02:54:76:bd:e5:6c:bc:7a:
3b:fe:2c:1c:c3:cd:c4:61:aa:b5:d7:ba:d5:88:d7:
dc:ab:f4:f7:5f:e8:0f:09:8d:31:ed:74:56:c3:8f:
46:03:23:88:11:7b:35:31:0f:b3:57:29:15:18:a7:
1c:31:0f:20:f9:c1:9e:96:37:ea:56:2b:90:3d:9a:
84:a4:28:2d:35:ab:0b:c9:b8:a0:e6:94:12:e0:91:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:23:AC:DC:A2:C0:D2:D8:30:8B:04:FB:42:86:5E:48:47:15:96:85
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/gCOs3KLA0tgwiwT7QoZeSEcVloU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.224.0/20
46.251.12.0/22
89.251.32.0/20
91.147.236.0/22
185.167.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:cf:8d:f5:72:6d:26:af:32:ca:93:d3:0d:81:fe:d7:b1:d3:
8e:a7:7d:c2:fd:71:1f:c0:8a:0e:81:17:f1:b0:d9:a2:79:7f:
48:be:4f:dd:b4:a3:c8:0d:3e:47:83:8d:c6:5e:87:3b:81:89:
bb:44:2f:b2:03:1b:7c:87:a6:4a:ba:00:fe:0b:25:3f:6c:96:
f4:a8:db:e0:2e:3e:5c:82:46:35:c3:c8:5f:2a:3f:ab:3c:51:
43:28:28:eb:79:cf:c3:a8:3d:cb:88:e0:d6:94:74:4c:c2:01:
7c:b0:ed:35:79:c5:bb:a5:3f:46:30:b8:30:fa:6b:a0:d5:91:
e1:f4:ba:20:c7:0e:9f:0e:2a:ad:0f:07:de:9d:26:88:57:b8:
62:a9:58:e8:26:3a:da:30:69:6b:03:52:c0:bf:aa:ce:9c:88:
fb:b6:56:27:0d:37:f3:bc:1b:3c:16:e2:3f:1e:ed:be:d9:53:
6f:28:14:6b:71:00:83:68:37:e1:37:cc:4c:ad:e8:5a:86:b9:
45:4a:c2:23:34:2e:8e:a9:82:0a:ec:65:ea:a9:96:32:8c:4b:
cf:5a:ef:31:6f:d8:1b:4d:18:4a:38:06:4f:31:03:87:d4:96:
10:be:bf:3f:3e:ab:63:4f:f9:31:73:b2:eb:e5:89:3d:42:42:
7c:37:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:10 2025 by rpki-client