Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa
File: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (raw, json)
Hash identifier: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=
Subject key identifier: 1A:3A:97:9B:D2:54:8E:39:59:67:43:C9:75:75:46:D6:52:45:8C:28
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 019427B67FE480D89E2872C0B3CCE16FF80A
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60561
IP address blocks: 188.64.137.0/24 maxlen: 24
2a11:1040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7f:e4:80:d8:9e:28:72:c0:b3:cc:e1:6f:f8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a3a979bd2548e39596743c9757546d652458c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:4e:f1:a9:08:9f:8a:57:0e:08:9c:ce:bb:
11:5b:fa:0c:8c:0c:42:55:a7:29:15:39:21:88:9b:
64:83:ec:ed:9c:c4:50:ca:43:53:88:c8:6b:ae:b2:
5a:d4:44:b8:39:be:b4:10:96:6b:42:c2:26:61:6b:
fb:13:9a:1d:35:cd:9b:7e:42:fb:e0:e4:16:8c:45:
12:50:35:4b:3e:f1:20:b7:10:21:5c:39:7f:0e:b2:
0c:a9:ea:09:ce:b4:08:d2:c2:c1:11:5e:cc:a2:17:
c3:f7:eb:82:ad:e9:75:b4:53:b6:94:2f:8e:6c:10:
82:4a:88:d0:55:65:c5:07:c5:0f:bf:90:20:4f:b9:
45:11:b1:2f:31:9d:da:88:f8:3d:f8:c0:29:d2:a5:
f3:f3:6f:f4:3d:d6:be:29:22:db:61:f9:49:02:89:
ba:6e:ce:48:95:c8:f5:61:31:2d:4c:ed:0f:46:e0:
e0:d7:8b:45:77:7f:f2:b7:d7:d1:82:ef:98:53:0d:
7a:98:58:47:e3:80:ee:18:3f:5f:e5:bd:7f:7e:40:
57:6f:74:bd:c3:60:4e:27:60:e5:dc:74:66:ee:1d:
73:c1:c8:d4:32:6b:d2:e7:0b:aa:a0:28:8c:e6:f1:
2f:46:73:ca:b1:94:c3:b1:79:08:bc:87:c7:2e:1d:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:97:9B:D2:54:8E:39:59:67:43:C9:75:75:46:D6:52:45:8C:28
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.137.0/24
IPv6:
2a11:1040::/29
Signature Algorithm: sha256WithRSAEncryption
5f:bf:b8:1e:80:21:7a:dc:a1:13:13:ba:2c:3d:c0:4f:b0:24:
ee:94:28:12:25:66:a0:12:d1:74:ad:fe:75:31:ff:10:6d:9f:
f8:5d:24:b9:65:3c:c0:6e:e9:fe:55:04:df:75:fd:04:95:19:
49:61:a3:2b:40:99:21:78:33:56:12:4e:0d:e5:89:60:d3:a9:
7e:d7:27:1b:e4:54:e5:e9:04:21:dc:74:31:21:e6:c3:11:7b:
4f:a9:1f:2e:08:bb:d3:bf:3d:0c:c1:87:db:fd:42:7a:11:7d:
b1:98:f6:dd:b9:09:f9:27:a2:03:f8:7d:d1:ed:87:e5:5c:ec:
59:66:a3:62:7e:d4:18:5e:55:e7:c8:39:4a:cb:aa:ed:d0:03:
95:9c:13:cc:55:df:14:49:59:cb:37:71:d8:55:a2:88:8f:c1:
27:0d:d5:8e:61:87:0e:2e:28:8e:37:ca:a6:39:60:cd:bf:29:
df:e1:3b:70:f7:c6:40:22:da:a2:09:c7:98:e9:d0:b7:5f:47:
94:f4:ca:ab:73:0c:bf:25:2a:74:6c:69:2f:5c:2c:39:70:84:
1f:3e:b9:3a:a9:14:20:c1:a9:b8:9f:41:2d:9b:50:38:91:9c:
7a:bb:64:d4:c9:21:90:16:7c:8a:85:d9:d8:ad:c6:28:ac:2d:
67:5f:84:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntn/kgNieKHLAs8zhb/gKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDFkN2RmMjVhNGE5ZDVlNzI3YzQyZjU1ZTllMzE4M2Qz
NmE5M2EwHhcNMjUwMTAyMTU1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNhOTc5YmQyNTQ4ZTM5NTk2NzQzYzk3NTc1NDZkNjUyNDU4YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wlO8akIn4pXDgiczrsRW/oMjAxC
VacpFTkhiJtkg+ztnMRQykNTiMhrrrJa1ES4Ob60EJZrQsImYWv7E5odNc2bfkL7
4OQWjEUSUDVLPvEgtxAhXDl/DrIMqeoJzrQI0sLBEV7MohfD9+uCrel1tFO2lC+O
bBCCSojQVWXFB8UPv5AgT7lFEbEvMZ3aiPg9+MAp0qXz82/0Pda+KSLbYflJAom6
bs5Ilcj1YTEtTO0PRuDg14tFd3/yt9fRgu+YUw16mFhH44DuGD9f5b1/fkBXb3S9
w2BOJ2Dl3HRm7h1zwcjUMmvS5wuqoCiM5vEvRnPKsZTDsXkIvIfHLh07gQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBo6l5vSVI45WWdDyXV1RtZSRYwoMB8GA1UdIwQY
MBaAFE7R198lpKnV5yfEL1Xp4xg9Nqk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQt
YWE4MWI5NjAzODU3LzEvR2pxWG05SlVqamxaWjBQSmRYVkcxbEpGakNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQtYWE4MWI5NjAzODU3
LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvECJMA0E
AgACMAcDBQMqERBAMA0GCSqGSIb3DQEBCwUAA4IBAQBfv7gegCF63KETE7osPcBP
sCTulCgSJWagEtF0rf51Mf8QbZ/4XSS5ZTzAbun+VQTfdf0ElRlJYaMrQJkheDNW
Ek4N5Ylg06l+1ycb5FTl6QQh3HQxIebDEXtPqR8uCLvTvz0MwYfb/UJ6EX2xmPbd
uQn5J6ID+H3R7YflXOxZZqNiftQYXlXnyDlKy6rt0AOVnBPMVd8USVnLN3HYVaKI
j8EnDdWOYYcOLiiON8qmOWDNvynf4Ttw98ZAItqiCceY6dC3X0eU9Mqrcwy/JSp0
bGkvXCw5cIQfPrk6qRQgwam4n0Etm1A4kZx6u2TUySGQFnyKhdnYrcYorC1nX4Qr
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:27 2025 by rpki-client