Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/gxK89RXnzcMvFdlQ7jq2DEQi6CM.roa
File: gxK89RXnzcMvFdlQ7jq2DEQi6CM.roa (raw, json)
Hash identifier: DiuewJZ1D8bxat1ZErkK+d8ROeDyP8jPaLLb/UJ0bkM=
Subject key identifier: 83:12:BC:F5:15:E7:CD:C3:2F:15:D9:50:EE:3A:B6:0C:44:22:E8:23
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019782A4A69BB9DE390CCB3DA5DE58515C37
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/gxK89RXnzcMvFdlQ7jq2DEQi6CM.roa
Signing time: Wed 18 Jun 2025 10:45:17 +0000
ROA not before: Wed 18 Jun 2025 10:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 45.149.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:a4:a6:9b:b9:de:39:0c:cb:3d:a5:de:58:51:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jun 18 10:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8312bcf515e7cdc32f15d950ee3ab60c4422e823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:e5:73:bc:9e:42:4b:66:b4:e1:c0:8a:5c:
ea:e5:19:71:b0:3a:70:2b:79:ec:d0:d5:85:d5:cf:
52:50:d7:5f:8b:20:f4:29:a0:24:7f:65:74:4b:0c:
0f:43:dc:a9:f1:d1:4f:41:b7:31:6a:37:02:49:0b:
07:19:3b:96:3e:f1:85:ae:cd:7a:60:ff:25:4c:12:
d3:91:5a:8f:a7:7a:43:18:a4:c5:b7:75:32:bb:e5:
9c:68:b9:a8:67:2a:f9:ac:85:f9:7a:8c:b9:77:19:
76:28:33:2a:b3:3d:a9:00:c5:c6:13:18:77:c1:fc:
13:c7:6c:9d:2c:9a:3b:b9:d2:ac:4d:05:b9:df:29:
c7:c8:54:78:88:63:bf:c4:f6:f7:35:9d:47:40:e5:
60:2e:c1:2d:f9:a2:37:bc:62:6c:c0:e3:4e:0e:e2:
c2:0b:a2:53:98:34:52:d9:8f:a2:5d:a4:56:b1:ab:
a6:70:10:f3:14:fe:c4:ca:0d:36:20:c2:5e:b1:c0:
19:f0:f2:e3:52:95:d2:b4:bb:d0:83:30:c2:26:4d:
3d:44:57:d3:42:a6:5b:7a:f4:c5:2e:7b:cb:fb:76:
bd:c0:88:ed:3b:d4:d9:29:38:c3:0a:a9:cb:ea:86:
54:17:63:e4:38:cf:ce:e9:4e:91:a9:b1:8b:25:8f:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:BC:F5:15:E7:CD:C3:2F:15:D9:50:EE:3A:B6:0C:44:22:E8:23
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/gxK89RXnzcMvFdlQ7jq2DEQi6CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/23
Signature Algorithm: sha256WithRSAEncryption
77:67:e7:13:24:38:f7:07:07:92:b1:0c:4e:95:74:0a:b5:3b:
d7:34:ea:cf:5d:c8:97:fd:9c:a9:b5:ac:6d:ab:08:36:94:32:
05:e7:71:a3:dc:50:2c:b4:ad:04:6b:2c:65:ae:19:d0:11:63:
83:3b:4b:1c:58:e7:80:21:86:89:7e:63:8e:79:f4:13:29:5f:
c5:4d:73:e3:34:ec:b2:5f:12:ad:6e:96:61:9c:f3:02:17:a1:
32:1e:36:9c:bf:9f:53:ed:c2:d8:02:a7:5b:a7:40:84:33:5a:
1e:5c:d8:5b:ec:e6:15:af:01:1f:f1:08:23:7e:05:3f:11:7b:
b9:32:2e:f1:70:61:1a:1a:a1:6f:c3:e2:d9:d8:ce:b0:ae:9e:
1b:b9:f8:ac:e8:92:a1:5c:3b:c0:bc:74:48:3e:79:4b:10:1e:
ac:a9:75:b7:19:22:0b:b9:36:8f:2d:60:e1:bf:fd:0a:d2:7b:
ac:37:95:43:62:72:76:8c:7f:0e:5c:0d:4f:18:b2:da:e5:81:
08:d9:44:f7:65:3b:12:71:bc:e6:bf:32:84:6a:ec:62:03:7a:
e5:d7:16:8d:31:9a:d1:ef:f0:e7:ac:d7:dd:5d:01:f8:70:a1:
0d:47:9f:6a:51:e4:43:76:cf:3e:f2:c0:e3:b3:a3:c3:22:6d:
01:5d:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:54:24 2025 by rpki-client