Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/geP9toPWAOd-61VI__Y1Av416ac.roa
File: geP9toPWAOd-61VI__Y1Av416ac.roa (raw, json)
Hash identifier: 1O2o1nFJwlxv6rt2UEY74JBc/AG0NZbX/IF9C2wOTds=
Subject key identifier: 81:E3:FD:B6:83:D6:00:E7:7E:EB:55:48:FF:F6:35:02:FE:35:E9:A7
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019690188DE952CDA61BB6C37084B8D9F67C
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/geP9toPWAOd-61VI__Y1Av416ac.roa
Signing time: Fri 02 May 2025 08:24:10 +0000
ROA not before: Fri 02 May 2025 08:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202103
IP address blocks: 31.134.64.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
176.39.0.0/19 maxlen: 20
176.39.48.0/20 maxlen: 21
176.39.112.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:18:8d:e9:52:cd:a6:1b:b6:c3:70:84:b8:d9:f6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: May 2 08:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81e3fdb683d600e77eeb5548fff63502fe35e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:54:04:68:fe:4b:6a:8f:73:08:5a:c7:ff:
e4:46:2d:a1:df:58:83:ec:cf:93:9a:24:12:57:15:
15:0a:49:b4:22:90:e3:ff:4a:54:f5:81:be:f6:b5:
03:e5:70:81:84:66:7a:cb:4e:75:a4:41:8c:1f:97:
d5:63:2b:78:13:cf:5d:48:66:92:72:4a:b6:c1:e6:
b9:cf:6d:29:b6:27:d5:67:ed:ff:66:60:c8:1c:88:
c7:cb:04:f1:9d:dc:bb:b8:e4:58:b3:36:e2:17:2c:
ce:c2:b5:d3:8b:96:ec:17:1a:eb:e4:15:fa:34:fc:
c1:7c:69:30:94:94:c8:cb:6e:24:9f:2e:15:c7:ea:
f7:48:d1:1f:52:56:d6:3a:b0:df:83:40:a4:ae:85:
f8:f9:26:72:66:0f:08:82:d5:bb:30:e5:0e:d3:16:
23:6a:95:83:c6:29:59:6a:c5:0b:77:26:c2:bc:4a:
50:7d:9b:fe:1e:4d:79:46:d8:03:08:14:fd:ab:70:
a8:15:43:3d:ae:be:d9:40:cd:bd:19:33:51:78:64:
d3:c4:a4:6a:4c:d1:86:0b:3d:5b:38:c8:f6:a7:49:
43:92:be:7b:b2:df:ae:7a:00:24:ff:63:a1:c0:6e:
a4:20:0b:19:ec:40:1a:88:b9:79:94:fc:cf:ee:50:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E3:FD:B6:83:D6:00:E7:7E:EB:55:48:FF:F6:35:02:FE:35:E9:A7
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/geP9toPWAOd-61VI__Y1Av416ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
176.39.48.0/20
176.39.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:4f:47:7b:43:31:f7:22:37:b5:35:22:7d:9e:de:19:85:e2:
d6:a9:47:6c:4c:cb:64:11:60:15:b0:5e:12:b5:97:b6:05:9c:
4e:8a:b3:b7:f4:5a:35:41:6d:84:4a:fa:bc:c3:2f:1e:ec:bd:
37:7f:6e:af:2c:77:13:9f:de:f0:97:85:da:65:ac:41:b9:f9:
b4:90:04:f0:69:62:25:63:2d:90:10:ad:f8:bc:61:20:15:4a:
8b:91:f8:f6:2c:f5:05:ba:e4:94:ee:cf:3e:a0:67:ea:7e:ce:
79:ab:b6:71:06:82:e0:3e:dc:2d:cc:fc:de:0b:9a:02:33:d3:
db:89:46:08:a0:94:c2:60:bb:2a:fb:61:60:4f:4b:b8:19:08:
c9:17:41:85:6f:c3:bf:91:3b:fb:4d:41:e3:2a:e8:d5:4b:2c:
18:ac:20:11:4a:f3:68:37:71:4d:c1:31:4b:a6:c5:f4:4e:dd:
1b:b8:50:4d:6e:db:3b:a4:be:f3:dd:3d:83:a1:c8:6f:d7:a6:
da:50:76:7f:ca:b4:3c:20:56:0e:ce:e6:89:8e:32:63:64:9f:
bb:f5:f0:f7:d9:2c:99:ed:ed:44:fe:ac:06:39:1e:57:1a:14:
43:6e:d6:71:83:aa:71:cf:87:e3:69:94:a5:94:c0:4b:bf:fc:
4e:00:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:49:49 2025 by rpki-client