Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GEL87EsMVhk3ZunlststnTM4YLA.roa
File: GEL87EsMVhk3ZunlststnTM4YLA.roa (raw, json)
Hash identifier: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=
Subject key identifier: 18:42:FC:EC:4B:0C:56:19:37:66:E9:E5:B2:DB:2D:9D:33:38:60:B0
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019427B59F74269BC4EF2590C7C4D1DC3FC7
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GEL87EsMVhk3ZunlststnTM4YLA.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208693
IP address blocks: 185.185.204.0/22 maxlen: 24
2a00:7420:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:74:26:9b:c4:ef:25:90:c7:c4:d1:dc:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1842fcec4b0c56193766e9e5b2db2d9d333860b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:2a:67:dd:35:64:4d:8c:aa:f7:1b:ec:ba:
47:5c:4c:b5:3f:1c:ca:9d:aa:cc:2b:54:0e:66:32:
ac:dd:37:52:88:6b:2f:f6:d1:c8:59:4b:c0:06:c1:
42:82:60:3b:41:a5:46:fc:7b:50:e1:27:62:02:35:
c0:29:6b:09:1e:fd:7c:6f:82:ce:da:8f:26:7d:9b:
4e:b6:30:ca:2b:0c:68:3f:13:b0:47:20:2b:5e:66:
d2:e3:7c:9e:ef:c3:35:a1:33:ac:fc:68:95:06:42:
13:e8:72:d9:b3:4e:88:08:e4:2b:5c:f9:47:40:65:
1c:0b:d8:82:bf:3d:02:39:b7:9f:83:a7:2a:6c:5f:
7f:a2:1a:7e:9c:6e:9b:97:85:b5:f0:00:94:90:17:
d6:b4:9e:ab:15:fb:5a:42:76:4c:46:c1:eb:06:76:
9e:07:71:7f:de:c5:5a:15:db:27:82:18:5c:ca:e3:
e1:69:29:bd:30:13:f0:c5:fc:1b:fe:b2:96:4b:dc:
e2:15:2d:67:ed:8d:ef:4c:09:1d:71:2f:0a:c2:ae:
ed:f6:49:70:a8:e3:31:db:7d:29:ba:86:4f:80:20:
1a:f2:7e:65:18:d8:dc:86:5b:20:2c:72:7e:1a:5e:
ea:09:64:1f:58:bd:1f:0d:73:ab:b0:9e:fe:7a:65:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:FC:EC:4B:0C:56:19:37:66:E9:E5:B2:DB:2D:9D:33:38:60:B0
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GEL87EsMVhk3ZunlststnTM4YLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.204.0/22
IPv6:
2a00:7420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6f:99:f2:63:28:09:e7:10:b3:cb:45:b0:6e:5a:41:a3:90:da:
d1:5c:87:4d:e2:26:64:5c:e2:c8:43:ca:25:7c:bd:5e:47:62:
a2:78:53:41:1e:c4:a9:af:ea:13:b7:38:d3:f8:7a:d7:23:4b:
39:59:f0:93:01:f4:3f:6b:47:7a:fb:1d:6a:6a:21:79:7a:25:
47:6f:8a:50:e6:e1:72:22:bc:52:50:00:6e:22:21:9f:14:32:
87:7d:77:ce:c3:5d:ac:7e:1d:4a:f1:6c:5f:81:ee:df:50:0c:
07:77:3f:7d:0e:9f:1e:4d:e6:8c:e3:77:12:45:9d:38:92:dc:
53:66:6a:f2:8f:bf:30:13:a4:94:10:51:1e:0e:29:12:1a:f1:
67:dd:8e:37:cf:96:10:a7:78:36:33:19:2f:eb:dc:67:e1:4c:
f6:a2:1e:a3:41:b8:3b:e4:cd:27:0f:3e:f4:ab:61:4e:63:77:
39:57:90:0c:4b:bc:04:eb:72:64:09:29:91:70:82:62:09:27:
67:ef:22:73:ab:e9:4e:52:05:21:c3:7b:32:96:ac:2f:48:0d:
87:33:0c:b3:af:db:72:fd:ba:5b:fa:03:f6:a3:a7:f9:89:5b:
0e:9b:fd:18:e3:d8:a7:a0:f8:86:2c:c5:33:4c:d4:3b:77:ac:
b1:69:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:56:36 2025 by rpki-client