Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gCBPmSd5waAZlrl5qdIDGqjAYdI.roa
File: gCBPmSd5waAZlrl5qdIDGqjAYdI.roa (raw, json)
Hash identifier: u3ABglArBKHM/hShklfybfW1uFoJcdf068RbMmuxMkA=
Subject key identifier: 80:20:4F:99:27:79:C1:A0:19:96:B9:79:A9:D2:03:1A:A8:C0:61:D2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0196100B87AFE720A552B2B4C89D5EF6C927
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gCBPmSd5waAZlrl5qdIDGqjAYdI.roa
Signing time: Mon 07 Apr 2025 11:38:33 +0000
ROA not before: Mon 07 Apr 2025 11:38:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199545
IP address blocks: 192.121.118.0/23 maxlen: 24
193.234.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:0b:87:af:e7:20:a5:52:b2:b4:c8:9d:5e:f6:c9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 7 11:38:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80204f992779c1a01996b979a9d2031aa8c061d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:85:58:e6:16:d3:13:de:5e:50:bd:de:0e:
c1:12:a0:dc:63:da:b0:cd:9f:74:a8:89:4d:84:68:
93:cb:8b:16:6f:bf:ef:77:1f:0b:4a:e8:d5:b2:f2:
5b:9c:2d:af:1b:52:2d:0d:89:e5:b6:4d:87:26:99:
bf:95:c1:5b:83:dd:f4:51:cd:b5:4f:69:de:f6:8b:
31:db:3c:0f:66:ee:0f:af:ed:b1:74:2a:4c:e7:a6:
00:3c:bb:81:de:87:24:6d:65:f0:df:36:cf:83:87:
fb:7c:69:6d:6c:e8:c6:96:79:71:91:7c:00:de:70:
17:33:c2:a1:a4:d6:ed:d0:fa:19:b1:5f:02:df:3d:
e3:17:c6:e2:2d:2e:9b:79:92:28:d2:c6:11:ba:15:
18:f5:f1:c6:26:34:67:b1:89:48:4d:0b:81:f3:bd:
0b:56:e4:04:2b:82:5a:89:f1:13:fd:f8:65:b6:d6:
0e:10:51:23:64:e4:f2:52:c5:d4:d0:6d:49:28:be:
f2:1b:b6:47:c5:14:93:00:5b:87:d8:0a:a6:2f:64:
ed:1a:85:d4:09:ee:7c:7d:d8:59:57:80:13:39:77:
a1:37:2b:65:0b:f5:1c:a5:b3:9e:3e:b1:e9:d7:6a:
b7:cc:bd:d0:20:1f:d3:b6:21:2a:eb:7b:fa:1e:a8:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:4F:99:27:79:C1:A0:19:96:B9:79:A9:D2:03:1A:A8:C0:61:D2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gCBPmSd5waAZlrl5qdIDGqjAYdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.118.0/23
193.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:c0:81:6a:0b:5c:18:aa:c9:19:73:47:00:be:7f:ba:ff:
64:86:70:4d:2f:1f:6d:15:d6:c0:00:29:fd:fc:b5:82:99:cf:
ce:2b:21:e8:51:04:9c:2d:f1:9a:17:55:5e:6f:63:32:ab:8f:
00:49:fc:02:8d:f6:ca:a8:df:8a:3e:80:08:6e:12:48:76:fe:
f1:dd:b3:ee:ec:91:89:5d:c3:45:de:d3:1e:7f:a4:19:0e:1b:
97:fd:f0:14:70:19:07:46:e6:68:2b:b0:f5:df:09:b3:e3:e0:
8b:03:30:4e:99:50:67:82:02:16:67:f9:78:c1:10:20:bb:d0:
5c:49:64:70:b6:63:a9:60:5b:bc:42:93:cc:a4:71:c8:f6:89:
69:0e:b1:4c:f5:14:cb:d3:06:5e:59:bf:3a:64:8d:99:b4:b3:
ee:23:cb:e1:0e:86:d7:a4:9e:45:ac:5b:a6:ef:85:73:bc:0f:
c6:dd:05:92:21:93:81:65:02:bc:37:e5:a5:2f:10:d3:6d:6a:
07:3e:49:34:74:ae:42:45:f9:84:84:ac:13:16:14:0f:57:e1:
0f:fd:58:3f:44:72:bd:2b:67:11:f2:2f:15:ac:75:8e:60:66:
ba:df:13:d6:d6:3b:7c:c0:e1:79:a4:40:62:59:e6:af:41:79:
0c:66:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:53:00 2025 by rpki-client