Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GWboZrvlBziZoBcX3EIZ1oPONJw.roa
File: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (raw, json)
Hash identifier: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=
Subject key identifier: 19:66:E8:66:BB:E5:07:38:99:A0:17:17:DC:42:19:D6:83:CE:34:9C
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01979CCC97EC006EE8718DBD22B727D5184B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GWboZrvlBziZoBcX3EIZ1oPONJw.roa
Signing time: Mon 23 Jun 2025 12:39:03 +0000
ROA not before: Mon 23 Jun 2025 12:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20001
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:cc:97:ec:00:6e:e8:71:8d:bd:22:b7:27:d5:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 23 12:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1966e866bbe5073899a01717dc4219d683ce349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:08:9a:85:13:ec:04:7f:75:09:a3:d8:4b:
e4:21:30:2e:8d:9f:d4:1e:58:0c:dd:0f:8e:b6:36:
84:ef:75:74:92:63:45:5c:bb:38:0c:b3:72:9b:65:
14:4b:bf:49:2f:77:c4:19:39:c5:66:5f:54:e1:53:
75:f3:92:eb:8f:28:dc:70:a5:b8:6b:01:d3:85:b6:
b2:57:09:6b:55:a7:61:75:6b:c6:5e:12:4e:22:c4:
1e:3b:93:f3:02:cc:2c:11:3e:43:a4:23:45:8c:a6:
3f:fa:c5:31:6e:7e:27:ff:ea:37:43:27:58:da:9f:
8d:49:f7:1f:33:26:86:62:23:2b:33:70:86:ef:95:
2f:de:13:b0:5d:36:b8:c4:24:ba:88:f8:41:24:bf:
cf:d9:7d:e1:64:58:e7:8c:02:93:af:c4:83:da:c2:
5e:3c:9d:c2:46:80:e9:20:cf:97:76:bd:f6:96:f8:
b5:ea:c1:61:c9:b3:93:c7:2c:9c:24:ae:74:4c:29:
0e:3d:80:5b:1b:19:cf:bb:da:b2:06:46:f1:1d:95:
64:b7:e7:90:d3:d1:d6:88:f4:02:ae:a8:fc:70:2f:
2e:85:e6:d0:c8:d5:1e:01:41:70:01:28:35:dd:33:
0d:27:3e:ba:fc:10:00:41:ac:f1:45:5e:a4:3a:70:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:E8:66:BB:E5:07:38:99:A0:17:17:DC:42:19:D6:83:CE:34:9C
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GWboZrvlBziZoBcX3EIZ1oPONJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
85:85:8b:34:da:67:75:68:b6:92:f0:80:c0:95:79:3f:78:f0:
9c:d4:b3:c4:d0:3f:09:72:14:02:11:57:35:bf:28:b6:cb:b5:
d9:1b:fb:88:aa:4a:cc:6e:9a:8d:fa:93:f0:3d:43:1c:8e:97:
10:19:ad:e6:2c:a7:12:db:4b:61:af:ca:d5:56:34:69:c7:03:
1f:4f:a5:20:54:74:1d:73:7d:87:ae:13:d1:ee:41:82:65:41:
07:2c:8f:34:bd:49:c0:6a:31:c4:8a:ba:81:e0:3c:cf:05:97:
f7:80:9b:c6:c9:6f:37:33:19:62:0b:28:80:e3:7c:e7:f1:ef:
81:57:94:a5:4a:10:2d:b5:85:2e:43:7f:3d:70:34:9d:3a:46:
56:56:da:7a:4a:71:70:ab:74:a8:28:38:f4:9d:45:53:dd:00:
eb:01:d1:a0:99:af:67:39:83:66:bd:9c:ec:d4:e9:04:c3:7d:
7c:5c:a4:b0:6d:e2:e2:d5:65:e0:47:ef:67:63:5f:bc:a6:5a:
12:3d:eb:ea:96:9a:29:a7:e3:fb:f7:ba:72:9f:91:d0:3f:8b:
5f:67:27:8a:0e:1c:91:a8:27:ee:dc:a0:92:61:12:59:06:56:
93:17:78:bf:1b:bb:e3:e8:9c:3a:62:78:95:06:d8:ae:a2:78:
f5:b5:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:15:00 2025 by rpki-client