Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gwSC7EAy3C72kqaOxsQmMkrjxyA.roa
File: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (raw, json)
Hash identifier: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=
Subject key identifier: 83:04:82:EC:40:32:DC:2E:F6:92:A6:8E:C6:C4:26:32:4A:E3:C7:20
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01979BCC3ED711E1C14A53D7FA9381B85B7A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gwSC7EAy3C72kqaOxsQmMkrjxyA.roa
Signing time: Mon 23 Jun 2025 07:59:03 +0000
ROA not before: Mon 23 Jun 2025 07:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32167
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:cc:3e:d7:11:e1:c1:4a:53:d7:fa:93:81:b8:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jun 23 07:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=830482ec4032dc2ef692a68ec6c426324ae3c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:84:9a:e5:a7:1b:d2:36:7c:eb:f0:71:d2:
54:7f:fd:96:70:29:f4:d7:b7:47:7f:7b:6c:0b:03:
e0:6d:19:a5:b7:b3:84:01:85:4b:c5:92:26:ac:f8:
74:2d:eb:1d:36:b0:23:7e:32:10:0c:19:70:e7:ab:
6e:7a:ec:e5:44:52:93:f1:5c:66:01:05:12:a7:23:
10:c3:f7:78:0c:1b:e1:86:a2:7e:d8:94:e6:17:6e:
17:0e:c0:b4:cd:13:39:aa:f2:83:f1:3b:04:9b:f0:
d5:1b:18:c6:de:c6:48:95:d2:d2:47:be:10:d8:f3:
28:24:ff:d5:4f:ae:15:50:2c:26:6c:9a:f4:03:98:
56:20:0d:0f:16:f8:58:c9:dd:26:e6:0b:0f:95:24:
a9:ed:e0:7e:ed:16:0c:20:da:1f:58:9c:28:58:b3:
fe:3d:7d:c3:f2:15:3f:db:4b:8e:86:37:46:16:05:
a9:e9:e9:c5:26:eb:c4:dd:bf:84:f1:c5:3b:77:e1:
72:18:52:a9:37:6b:13:3c:7e:c6:ea:d0:d4:9e:7b:
65:07:03:7f:ad:07:ab:8c:50:80:16:d2:cd:4c:4b:
c8:af:a2:fb:29:ef:7c:88:8c:1d:fa:73:9f:e5:9b:
da:e5:7b:1a:71:ac:d7:91:92:b0:84:98:b0:a7:93:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:82:EC:40:32:DC:2E:F6:92:A6:8E:C6:C4:26:32:4A:E3:C7:20
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gwSC7EAy3C72kqaOxsQmMkrjxyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
12:60:4a:45:08:6b:0f:08:de:be:af:e6:07:3d:7f:b4:f0:23:
dc:d4:ff:cd:8c:de:0e:ce:97:84:71:8a:81:ec:08:6c:d3:65:
5b:ba:0b:c0:8c:b7:4d:0e:53:d4:0c:01:2c:c5:14:d7:e1:9d:
fb:24:b2:ce:3e:07:57:84:a9:be:8e:10:85:7c:21:3d:9d:37:
68:1c:86:49:db:0e:df:4f:b9:8c:35:1f:e6:c9:33:0d:47:38:
ec:b8:c5:73:d9:1e:c6:7b:d1:9b:53:0c:9f:5d:15:2d:c5:67:
6c:9a:ac:5c:90:b9:22:fb:e7:0a:eb:03:52:67:df:03:f8:3b:
32:b1:f2:c6:6d:67:f7:f4:16:81:3f:4a:e9:fe:4b:7b:45:fd:
3f:99:19:66:06:a9:76:15:49:16:b9:34:21:1a:1a:d1:e8:a8:
67:9f:d8:ae:fd:54:d2:28:9d:5c:ea:88:1b:74:eb:68:de:2f:
fa:7b:4e:8d:bb:52:a8:fb:83:02:8f:04:ce:db:ad:9b:01:4a:
cf:b5:87:08:4e:94:0b:1e:d3:df:be:1c:f7:ef:2c:3d:30:83:
99:1b:4d:00:77:a0:92:37:9e:1b:51:04:43:6a:f4:59:65:14:
ee:9d:6d:9e:2a:f3:18:16:de:15:bc:ca:32:c3:8b:21:8f:a3:
01:5a:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:03:15 2025 by rpki-client