Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/GGuZV4w4l_L1AAB0u4gI9OxObhI.roa
File: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (raw, json)
Hash identifier: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=
Subject key identifier: 18:6B:99:57:8C:38:97:F2:F5:00:00:74:BB:88:08:F4:EC:4E:6E:12
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01977C6F4A77ED1E53C0976AE2748E9C3E7C
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/GGuZV4w4l_L1AAB0u4gI9OxObhI.roa
Signing time: Tue 17 Jun 2025 05:49:17 +0000
ROA not before: Tue 17 Jun 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 45.10.240.0/22 maxlen: 32
45.10.240.0/24 maxlen: 24
45.10.241.0/24 maxlen: 24
45.10.242.0/24 maxlen: 24
45.10.243.0/24 maxlen: 24
91.215.40.0/24 maxlen: 32
91.215.41.0/24 maxlen: 24
91.215.42.0/24 maxlen: 24
91.215.43.0/24 maxlen: 24
95.129.232.0/24 maxlen: 32
95.129.233.0/24 maxlen: 32
95.129.234.0/24 maxlen: 32
95.129.235.0/24 maxlen: 24
95.129.236.0/24 maxlen: 32
185.129.100.0/24 maxlen: 24
185.129.101.0/24 maxlen: 24
185.129.102.0/24 maxlen: 24
185.129.103.0/24 maxlen: 24
185.178.208.0/24 maxlen: 24
185.178.209.0/24 maxlen: 24
185.178.210.0/24 maxlen: 24
2a0a:4180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:6f:4a:77:ed:1e:53:c0:97:6a:e2:74:8e:9c:3e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jun 17 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=186b99578c3897f2f5000074bb8808f4ec4e6e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:2a:e8:74:0a:cd:6f:bf:5a:67:55:d7:34:
b5:57:77:ee:26:08:85:ed:a3:ab:1c:8e:63:08:3e:
06:aa:3f:c0:05:c8:f3:ed:08:bd:30:6f:df:ee:1c:
f6:33:63:0e:d4:7a:26:35:c3:fe:6f:89:0b:c3:77:
55:f4:c2:69:36:c9:cc:fe:74:75:9c:2c:24:c7:e3:
0f:c3:a5:99:88:16:0b:54:61:6e:bc:0a:f9:e9:b3:
9b:f1:15:be:be:88:04:4d:86:b3:6d:59:27:6c:79:
ac:98:ce:46:a5:33:cc:8c:2b:e7:5a:57:4c:97:2a:
b0:61:df:49:68:56:6e:dd:bc:09:0e:16:3d:e9:03:
ec:74:56:dc:1d:36:9c:94:ac:14:6d:bc:cc:43:10:
5b:ac:73:a8:99:75:ef:f6:9e:fb:0a:9d:fd:58:00:
ee:05:25:61:c8:b7:65:5c:20:c9:be:bc:ca:04:91:
84:4c:7e:cd:4a:bf:2e:9c:36:bd:b4:6d:7b:d9:f3:
1e:66:b8:11:5d:09:4c:a3:28:c9:a5:cf:6e:d9:49:
d3:cd:09:0a:02:2b:86:7c:d5:25:89:a7:e9:22:41:
dd:87:88:7f:31:4d:9b:f8:62:ca:f4:96:c7:76:cd:
b9:04:ff:49:72:5a:cb:8c:bd:0d:b7:6d:b4:4e:a2:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:99:57:8C:38:97:F2:F5:00:00:74:BB:88:08:F4:EC:4E:6E:12
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/GGuZV4w4l_L1AAB0u4gI9OxObhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.240.0/22
91.215.40.0/22
95.129.232.0-95.129.236.255
185.129.100.0/22
185.178.208.0-185.178.210.255
IPv6:
2a0a:4180::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b6:f7:f0:60:0d:f3:67:f1:8c:13:1a:85:9b:55:90:4b:36:
b3:b5:d2:59:82:06:7e:cd:fa:8e:1b:63:c1:46:b4:23:0b:3e:
ed:5a:3c:9c:10:91:59:78:c5:9f:b6:93:c6:b0:34:dc:1b:96:
38:cf:a3:ae:01:4a:e5:51:2f:42:53:77:8f:e0:2a:9d:bc:bf:
e8:93:64:98:26:f4:86:4f:70:83:af:71:67:58:5d:70:f2:2f:
f0:a1:54:2d:76:24:ca:3d:10:a1:5a:83:15:c5:4c:f5:83:b8:
e4:43:22:4f:9c:98:8c:84:30:55:79:66:5e:45:60:7e:4e:c0:
21:c4:e6:4a:2a:11:33:58:5b:c4:8d:5d:71:45:53:08:f7:18:
30:9b:6d:f0:13:ac:43:48:70:38:43:c9:ed:b2:c1:94:47:8e:
9c:0c:8d:aa:db:b6:34:c4:85:99:23:83:14:6a:6d:6f:2a:6c:
4f:dc:29:bb:e0:43:ec:61:28:82:dc:4d:d7:9a:15:f1:fc:aa:
32:71:e8:c7:d2:bc:fd:38:f6:80:48:1f:5d:4b:16:47:39:95:
67:20:52:54:e6:a1:a2:6f:04:a7:19:23:92:01:b7:e9:e7:a9:
57:28:26:3e:59:59:8a:90:20:b9:f3:b8:5e:ea:54:ee:44:25:
b1:00:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:37:37 2025 by rpki-client