Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa
File: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (raw, json)
Hash identifier: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=
Subject key identifier: 19:FE:65:D6:AF:0C:F9:1F:40:4F:3B:62:34:6D:70:61:AE:50:59:6E
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4F88A6B6940DEEFBED6E21A83F47
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200645
IP address blocks: 5.202.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4f:88:a6:b6:94:0d:ee:fb:ed:6e:21:a8:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19fe65d6af0cf91f404f3b62346d7061ae50596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:d2:9e:3b:f9:06:fb:0f:be:d4:c8:80:84:
80:41:64:e0:3e:4b:22:61:17:39:68:09:4e:d2:50:
3c:fd:a6:ae:06:6f:23:ea:f7:72:82:ae:84:60:97:
a7:4f:0d:dd:2b:a5:54:28:a7:05:76:ca:07:70:f2:
e2:f3:f7:c7:4f:a2:21:d1:bf:bf:e4:30:5c:18:53:
41:32:77:57:21:4b:6c:0a:2b:a0:f9:7b:33:2e:a8:
f7:d0:eb:64:a9:5e:2b:44:03:dc:d0:f6:29:b3:f0:
c3:b6:dd:fc:52:ae:f9:3a:77:d8:b8:01:fe:1a:76:
4e:f3:1a:31:32:72:c1:bb:8b:ee:73:ba:5c:62:4e:
d1:1c:30:f3:96:a6:12:75:f0:ff:2d:0e:07:84:4a:
8f:34:ad:9f:fe:8b:3f:17:b2:2a:20:97:90:f3:ee:
91:eb:49:20:75:e7:20:00:a2:22:bb:02:1d:03:cd:
8e:00:8f:cf:f7:00:e2:9b:bd:d4:c1:3b:fb:6d:fd:
87:65:73:0c:2e:11:0e:c2:8a:66:09:4b:43:29:11:
03:e1:07:27:a3:6f:c4:72:af:24:96:72:fa:84:6a:
59:de:a1:74:20:74:24:88:98:cf:16:f7:7a:bd:d7:
a0:62:5e:50:96:8c:4b:53:86:71:67:c3:b2:5d:d8:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:65:D6:AF:0C:F9:1F:40:4F:3B:62:34:6D:70:61:AE:50:59:6E
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.208.0/20
Signature Algorithm: sha256WithRSAEncryption
24:54:e1:55:7b:46:fd:f2:dd:9d:c1:3f:a9:ad:4f:24:25:34:
94:0c:8a:5d:ca:8d:06:65:86:b5:1e:77:b1:b7:56:de:2c:c3:
e2:4b:20:43:16:f8:b8:3f:ae:c1:38:dd:b7:27:15:65:1e:8d:
58:38:64:01:2e:fb:08:1e:87:a6:2a:05:6b:f4:00:44:9f:d1:
1b:f0:6e:45:15:43:5b:dc:1c:6d:35:46:d3:39:92:ee:54:1a:
c4:f5:7d:c0:0e:cc:ef:65:bc:ce:53:b3:37:15:e2:0c:9b:f3:
61:49:c8:fa:e1:c4:2c:7b:d6:46:93:4b:ce:3b:b2:ae:0a:90:
4a:69:be:3f:c3:2e:c1:81:96:29:7d:87:88:70:f8:6a:e7:f9:
57:46:34:45:b2:51:a3:7a:c3:aa:2a:5a:d2:42:67:83:8e:7b:
7c:9f:3c:91:12:b6:dd:79:66:f2:2f:e1:2c:32:7d:4d:07:42:
45:7e:92:6a:d7:dc:7c:19:b6:12:29:20:fc:ae:b3:0d:fb:e6:
55:cc:95:8c:a0:cc:7d:5f:cd:e6:6f:96:73:00:fc:4d:fc:64:
23:80:05:84:5b:fe:28:39:75:d6:a7:17:85:82:bb:55:46:1f:
b3:22:a4:3d:c6:5e:9a:50:56:c0:e7:d3:11:5c:ff:d4:a6:8c:
97:c4:61:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjE+IpraUDe777W4hqD9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjUwMTAxMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWZlNjVkNmFmMGNmOTFmNDA0ZjNiNjIzNDZkNzA2MWFlNTA1OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqTSnjv5BvsPvtTIgISAQWTgPksi
YRc5aAlO0lA8/aauBm8j6vdygq6EYJenTw3dK6VUKKcFdsoHcPLi8/fHT6Ih0b+/
5DBcGFNBMndXIUtsCiug+XszLqj30OtkqV4rRAPc0PYps/DDtt38Uq75OnfYuAH+
GnZO8xoxMnLBu4vuc7pcYk7RHDDzlqYSdfD/LQ4HhEqPNK2f/os/F7IqIJeQ8+6R
60kgdecgAKIiuwIdA82OAI/P9wDim73UwTv7bf2HZXMMLhEOwopmCUtDKRED4Qcn
o2/Ecq8klnL6hGpZ3qF0IHQkiJjPFvd6vdegYl5QloxLU4ZxZ8OyXdgJxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBn+ZdavDPkfQE87YjRtcGGuUFluMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvR2Y1bDFxOE0tUjlBVHp0aU5HMXdZYTVRV1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBcrQMA0G
CSqGSIb3DQEBCwUAA4IBAQAkVOFVe0b98t2dwT+prU8kJTSUDIpdyo0GZYa1Hnex
t1beLMPiSyBDFvi4P67BON23JxVlHo1YOGQBLvsIHoemKgVr9ABEn9Eb8G5FFUNb
3BxtNUbTOZLuVBrE9X3ADszvZbzOU7M3FeIMm/NhScj64cQse9ZGk0vOO7KuCpBK
ab4/wy7BgZYpfYeIcPhq5/lXRjRFslGjesOqKlrSQmeDjnt8nzyRErbdeWbyL+Es
Mn1NB0JFfpJq19x8GbYSKSD8rrMN++ZVzJWMoMx9X83mb5ZzAPxN/GQjgAWEW/4o
OXXWpxeFgrtVRh+zIqQ9xl6aUFbA59MRXP/UpoyXxGEN
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:57 2025 by rpki-client