Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GCdMuRRfvMAh3H8lDbpqaJ3gcFI.roa
File: GCdMuRRfvMAh3H8lDbpqaJ3gcFI.roa (raw, json)
Hash identifier: 7/Dx6NhWzga4bPTSQuI5QkDRTsfH4N+VkZ0Prh2NJZg=
Subject key identifier: 18:27:4C:B9:14:5F:BC:C0:21:DC:7F:25:0D:BA:6A:68:9D:E0:70:52
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197839BD7151818D49AFF60C128297B3BEB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GCdMuRRfvMAh3H8lDbpqaJ3gcFI.roa
Signing time: Wed 18 Jun 2025 15:15:17 +0000
ROA not before: Wed 18 Jun 2025 15:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:9b:d7:15:18:18:d4:9a:ff:60:c1:28:29:7b:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 18 15:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18274cb9145fbcc021dc7f250dba6a689de07052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:c8:a9:ff:20:f3:4c:96:ba:5d:50:da:16:
8e:45:0f:58:96:95:be:1f:bf:a1:c3:4f:fb:c5:d7:
cd:ef:54:3e:a9:db:ba:d7:2d:5f:b0:e0:e3:2a:44:
56:ca:e8:0e:6d:13:80:9b:6b:48:d3:99:b1:5a:da:
d6:fb:f3:f1:cb:88:a9:40:3f:10:02:87:34:f5:d8:
7c:82:ac:a1:3f:74:07:8e:99:21:fe:31:42:eb:c1:
d9:65:7d:c8:08:28:39:4b:c0:20:e6:79:ac:51:9f:
1d:50:57:54:e1:62:a8:de:27:25:73:c9:ff:d3:61:
4a:11:f5:fd:61:cc:ab:2e:af:80:30:9f:23:fc:02:
79:fb:1a:aa:c1:ce:b5:3b:03:82:76:b5:8c:e8:46:
fd:62:f1:d6:6c:52:a6:b7:0e:10:24:3b:4e:e5:2e:
19:0e:3d:e2:8f:60:37:22:70:32:aa:51:1c:e8:ed:
a4:21:ad:c6:a1:25:75:64:46:59:ca:aa:46:17:b2:
1b:8f:2a:6a:8b:21:13:d9:69:c5:94:ad:fc:6a:8b:
9f:c3:73:ff:8a:43:27:f6:80:fe:8f:49:96:c7:89:
79:f1:e0:34:99:66:97:d8:4a:a1:d5:68:a5:81:ad:
7a:55:bf:35:48:1a:c0:e5:a8:d6:93:d6:f6:3c:0b:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:4C:B9:14:5F:BC:C0:21:DC:7F:25:0D:BA:6A:68:9D:E0:70:52
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GCdMuRRfvMAh3H8lDbpqaJ3gcFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
22:02:e7:e3:0a:32:97:5f:0c:63:ab:fa:7c:77:fe:7b:89:1f:
a8:1b:73:a0:e7:4b:0a:70:1c:d6:a6:f9:1a:75:98:e8:d7:54:
29:b5:20:f7:90:5a:6b:9e:5d:6c:c0:1a:25:ce:39:d0:b3:57:
c3:14:b7:61:70:8b:58:7c:72:5e:d9:c3:47:4a:1d:cd:5f:15:
57:79:45:3a:f2:c2:9c:ff:a4:b4:37:cb:40:04:d8:10:cb:9f:
1c:26:ad:27:c1:3f:ce:b8:b1:ed:29:b8:68:e2:cc:60:03:60:
1d:f8:f9:5d:43:7f:f9:fe:cf:12:9d:2b:6e:4a:4c:0b:cd:9e:
e7:1b:68:96:08:8d:65:20:c4:76:26:2f:57:71:be:75:4e:1e:
ef:ae:ee:63:fa:49:fe:fc:88:5e:22:62:55:c8:df:aa:1f:c2:
2c:b2:74:3b:0b:c9:c6:dc:da:84:b5:3c:5b:02:34:b4:44:62:
56:b6:e1:24:80:6b:bc:7a:ea:52:23:68:70:e5:9a:eb:13:57:
31:77:5f:35:2f:31:3f:84:d6:7d:5b:e9:14:d3:61:44:6f:eb:
78:5f:7e:d3:8e:01:6d:dc:9d:a0:a2:8e:ef:c9:3b:d2:66:ef:
5c:e8:16:f4:9e:40:ab:e3:9a:eb:81:54:31:f0:f6:25:cb:1c:
ae:39:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:14 2025 by rpki-client