Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/GqkYahAWuW8CVZC80Y_0nRuyPHU.roa
File: GqkYahAWuW8CVZC80Y_0nRuyPHU.roa (raw, json)
Hash identifier: jfcsYMa+fRQOgfblBRN6UE5BrKJvOwvJrlwzJD4gFuc=
Subject key identifier: 1A:A9:18:6A:10:16:B9:6F:02:55:90:BC:D1:8F:F4:9D:1B:B2:3C:75
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 01978CFB36CF0B06B5475DF46EA7771B27C6
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/GqkYahAWuW8CVZC80Y_0nRuyPHU.roa
Signing time: Fri 20 Jun 2025 10:56:03 +0000
ROA not before: Fri 20 Jun 2025 10:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60751
IP address blocks: 62.164.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:fb:36:cf:0b:06:b5:47:5d:f4:6e:a7:77:1b:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Jun 20 10:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa9186a1016b96f025590bcd18ff49d1bb23c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:9f:d8:56:b6:b1:d5:7b:35:a4:9b:b3:ca:
84:3b:8c:b8:95:09:cf:40:5b:cc:bf:4b:5e:db:85:
f8:f2:71:f5:b9:d3:16:0b:75:ae:37:64:8f:65:10:
22:bf:f9:bd:a6:53:50:48:93:62:86:c4:bb:1b:2c:
4a:fc:8e:44:5e:37:6d:61:1d:1c:11:d2:f7:b7:d4:
b5:dd:ab:d8:77:e5:ed:cb:9d:2f:ce:71:36:ef:d0:
19:84:a7:49:c2:bc:f7:52:13:75:f1:0b:e1:be:d9:
23:55:04:07:5b:e4:b1:ba:9a:31:26:c3:d3:e2:fd:
0c:e1:01:08:08:69:aa:e9:2f:65:92:ac:a2:a9:b5:
d1:a1:3c:bf:68:1b:01:b4:c2:c5:46:b2:c3:17:87:
5a:ba:fa:11:75:a5:4d:65:86:fc:2d:37:16:ad:e8:
68:e0:0f:ef:56:02:9b:b0:ce:bc:48:11:98:e8:b1:
8d:58:84:b8:80:3f:82:0c:f1:30:b3:13:5e:84:54:
4e:13:fb:72:77:82:30:5b:ac:7c:6d:83:65:c6:2b:
a7:bf:c2:56:68:2f:33:2b:8d:10:86:da:25:cf:ae:
ac:db:ca:07:ec:f7:cd:c2:23:09:75:ea:67:9e:fd:
aa:cb:08:04:e2:10:23:68:29:ba:65:2f:34:f5:54:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:18:6A:10:16:B9:6F:02:55:90:BC:D1:8F:F4:9D:1B:B2:3C:75
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/GqkYahAWuW8CVZC80Y_0nRuyPHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:f0:de:d0:f5:45:0f:85:ed:f0:df:9f:0b:55:84:57:6e:13:
d6:d6:27:a6:87:52:33:a9:39:31:a6:45:6b:da:42:51:c2:90:
e8:84:27:6c:d9:9d:b8:05:8d:7d:f5:df:74:09:4d:18:a9:0d:
de:b3:3d:40:15:11:bc:19:57:dc:02:84:d8:b6:e8:ef:99:50:
c3:64:75:04:a2:41:5a:13:ba:79:99:9f:bf:7e:42:bc:22:8f:
af:66:34:7d:b7:79:46:ea:f3:4d:ab:45:39:e1:2b:a8:64:9e:
06:a9:61:e2:eb:44:c3:cc:d9:14:3d:2e:21:1e:d9:36:0e:5e:
52:50:2b:ed:50:ad:2e:6d:eb:82:25:c2:15:b3:99:9f:02:85:
01:00:0c:48:1f:09:3f:13:31:c0:28:54:4d:22:cd:f8:82:1a:
5a:8f:14:8e:9d:84:de:91:f3:af:9e:af:6a:07:13:3a:3b:b8:
23:11:1f:01:15:74:e2:e4:06:eb:eb:76:65:77:b2:88:2e:17:
5c:7b:8c:58:20:84:5b:77:d7:ee:37:5a:20:45:3e:c2:d9:d7:
da:63:d8:65:94:54:91:d7:f1:be:8f:c7:ab:ef:42:3e:f1:b2:
79:41:14:cd:2d:cd:86:45:eb:fd:aa:b2:6b:bb:0f:07:33:08:
4b:32:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:52 2025 by rpki-client