Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GMQbG0-o6hWvOWZFjvgerZILeUA.roa
File: GMQbG0-o6hWvOWZFjvgerZILeUA.roa (raw, json)
Hash identifier: 1vJaRcAe7VRxTOCxQZvQmXBz/hhYe/t4hM7qFxtZr7A=
Subject key identifier: 18:C4:1B:1B:4F:A8:EA:15:AF:39:66:45:8E:F8:1E:AD:92:0B:79:40
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0195CB4D83EDAB8BA5EFD88749B98F8F9472
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GMQbG0-o6hWvOWZFjvgerZILeUA.roa
Signing time: Tue 25 Mar 2025 03:16:49 +0000
ROA not before: Tue 25 Mar 2025 03:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24753
IP address blocks: 62.32.32.0/19 maxlen: 19
81.85.52.0/22 maxlen: 22
81.85.96.0/22 maxlen: 22
81.85.100.0/24 maxlen: 24
81.85.160.0/20 maxlen: 20
89.21.160.0/19 maxlen: 19
213.187.128.0/19 maxlen: 19
213.187.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:4d:83:ed:ab:8b:a5:ef:d8:87:49:b9:8f:8f:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Mar 25 03:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c41b1b4fa8ea15af3966458ef81ead920b7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:1e:9d:d1:86:76:cc:0d:64:98:20:d1:b6:
8f:31:81:b1:ed:ae:e8:a1:0c:73:e1:dc:9e:7e:c8:
6c:19:e8:17:69:e2:5d:98:3b:86:cc:ad:f3:b0:1c:
68:b8:3a:c7:f9:ba:7a:0d:a0:9d:1b:9d:8d:a2:3a:
1f:3a:b8:19:e9:16:81:6e:a1:31:3d:f5:54:28:c3:
f8:9b:0d:da:c8:76:da:92:3c:a4:59:be:6e:a6:df:
79:a7:38:a4:09:9e:35:e1:a0:38:3f:c9:6f:64:dd:
4e:61:bb:2d:2f:0c:e1:bd:3f:ec:8f:30:16:fc:62:
da:fe:ff:70:55:de:fe:61:6e:63:66:c0:77:4a:18:
d0:60:71:c7:2c:8a:35:d1:36:a4:dd:57:b9:c2:b5:
c5:37:5a:f1:81:32:23:8a:1d:e8:66:95:1a:95:2c:
ab:6e:1d:83:d9:39:96:1a:65:38:09:dc:d0:48:3b:
ce:a8:10:c7:23:f2:0f:5c:aa:6c:9a:4f:50:c7:aa:
01:92:6e:5e:20:bf:f3:a2:0d:84:f2:b4:22:4a:f5:
0c:c6:9b:c3:97:70:ad:6d:95:95:fa:c4:08:2b:87:
cc:fb:e8:22:10:97:55:c3:30:d2:17:dd:48:3a:26:
18:1b:3d:70:f2:16:51:59:08:cb:b9:64:81:ad:06:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:1B:1B:4F:A8:EA:15:AF:39:66:45:8E:F8:1E:AD:92:0B:79:40
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GMQbG0-o6hWvOWZFjvgerZILeUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.32.0/19
81.85.52.0/22
81.85.96.0-81.85.100.255
81.85.160.0/20
89.21.160.0/19
213.187.128.0/19
Signature Algorithm: sha256WithRSAEncryption
61:71:98:01:56:e1:38:aa:af:18:9c:8f:49:16:d9:df:33:9c:
a0:4a:f9:5e:cd:61:2b:d3:ef:8b:ae:75:ff:00:8e:b7:57:e2:
6c:57:a1:bb:ff:bc:6b:13:14:85:00:39:29:30:87:23:98:74:
21:15:96:95:b9:79:b3:d5:b2:a2:3f:ca:c4:db:93:b2:61:60:
99:35:54:5c:39:23:e3:39:d2:21:56:90:52:75:5a:0e:3a:45:
94:8e:c5:0c:20:ee:20:11:99:1e:6a:c9:47:f8:2b:c7:f0:ce:
f6:05:99:58:1e:e1:a5:15:51:76:ab:65:5b:b4:11:df:6e:5b:
27:ea:f7:12:a3:1f:1c:f9:4c:c6:5e:3d:bd:1d:2a:2a:5a:6d:
5f:60:67:dc:24:5a:00:e9:29:9b:85:fe:9c:c8:9a:61:4f:ad:
4b:49:66:5f:07:df:91:3a:9b:ed:2a:3c:97:b8:47:e1:1b:e8:
05:ee:59:ce:45:13:82:90:f9:d4:ba:b2:c6:fd:cf:48:5e:48:
f7:8b:e4:f1:b7:dc:1f:07:64:27:83:21:56:d7:29:c0:ec:5e:
05:4b:2c:84:ea:41:2e:d9:59:62:a8:90:d1:7f:b4:b7:76:21:
c7:48:36:80:f0:93:44:77:75:80:09:e9:6d:44:6d:9d:b6:4f:
78:dd:1e:4e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZXLTYPtq4ul79iHSbmPj5RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjUwMzI1MDMxNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM0MWIxYjRmYThlYTE1YWYzOTY2NDU4ZWY4MWVhZDkyMGI3OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nYendGGdswNZJgg0baPMYGx7a7o
oQxz4dyefshsGegXaeJdmDuGzK3zsBxouDrH+bp6DaCdG52NojofOrgZ6RaBbqEx
PfVUKMP4mw3ayHbakjykWb5upt95pzikCZ414aA4P8lvZN1OYbstLwzhvT/sjzAW
/GLa/v9wVd7+YW5jZsB3ShjQYHHHLIo10Tak3Ve5wrXFN1rxgTIjih3oZpUalSyr
bh2D2TmWGmU4CdzQSDvOqBDHI/IPXKpsmk9Qx6oBkm5eIL/zog2E8rQiSvUMxpvD
l3CtbZWV+sQIK4fM++giEJdVwzDSF91IOiYYGz1w8hZRWQjLuWSBrQZ4sQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFBjEGxtPqOoVrzlmRY74Hq2SC3lAMB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvR01RYkcwLW82aFd2T1daRmp2Z2VyWklMZVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFPiAgAwQC
UVU0MAwDBAVRVWADBABRVWQDBARRVaADBAVZFaADBAXVu4AwDQYJKoZIhvcNAQEL
BQADggEBAGFxmAFW4Tiqrxicj0kW2d8znKBK+V7NYSvT74uudf8AjrdX4mxXobv/
vGsTFIUAOSkwhyOYdCEVlpW5ebPVsqI/ysTbk7JhYJk1VFw5I+M50iFWkFJ1Wg46
RZSOxQwg7iARmR5qyUf4K8fwzvYFmVge4aUVUXarZVu0Ed9uWyfq9xKjHxz5TMZe
Pb0dKipabV9gZ9wkWgDpKZuF/pzImmFPrUtJZl8H35E6m+0qPJe4R+Eb6AXuWc5F
E4KQ+dS6ssb9z0heSPeL5PG33B8HZCeDIVbXKcDsXgVLLITqQS7ZWWKokNF/tLd2
IcdINoDwk0R3dYAJ6W1EbZ22T3jdHk4=
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:08:29 2025 by rpki-client