Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa
File: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (raw, json)
Hash identifier: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=
Subject key identifier: 1A:CC:38:33:F9:53:03:FF:24:45:97:D7:29:79:76:3B:0E:B5:7C:BB
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 0197A5F22A57A6CFFA1B97BCA1E90D7B11AF
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa
Signing time: Wed 25 Jun 2025 07:16:40 +0000
ROA not before: Wed 25 Jun 2025 07:16:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49308
IP address blocks: 91.212.189.0/24 maxlen: 24
198.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:f2:2a:57:a6:cf:fa:1b:97:bc:a1:e9:0d:7b:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jun 25 07:16:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1acc3833f95303ff244597d72979763b0eb57cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:34:88:10:8f:dd:5e:5d:61:98:01:d6:81:
5b:c7:c1:a1:9f:7a:8f:c2:f7:86:10:11:ef:29:81:
2d:99:75:ca:fb:49:18:78:e1:52:0a:25:3d:87:b2:
d3:12:59:ee:ee:64:ab:f6:95:2f:a3:1e:35:3d:fb:
a1:6c:68:01:57:fa:04:73:0a:96:ef:f8:f2:1c:77:
cb:0d:38:f1:74:44:eb:42:62:8b:f9:60:18:be:44:
c5:8d:92:72:cc:60:70:a4:f5:9f:45:8f:b9:de:46:
8c:d5:4f:0e:6a:3a:27:76:c3:78:f0:10:17:2d:0c:
ab:81:c9:7e:68:d1:99:20:9c:30:6c:16:18:ed:62:
05:b3:81:f2:81:eb:97:20:97:d5:6d:77:ce:90:3a:
94:b4:af:30:22:3d:a9:38:f5:ca:39:e0:4c:c9:c6:
dd:fa:bc:ab:18:7a:39:e0:82:5b:37:0b:c6:59:23:
f4:29:27:22:d6:e4:fd:32:37:9b:23:b6:ec:ed:a8:
f1:39:02:1d:f2:94:0f:26:0e:6a:6d:20:8d:9a:05:
86:96:59:45:a0:29:46:09:91:df:b2:d1:e7:ec:e1:
d2:e1:09:c3:43:db:a2:71:2f:b3:c4:ce:bf:96:ed:
d5:79:65:04:68:21:85:61:24:95:e0:ab:b8:b0:3f:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:38:33:F9:53:03:FF:24:45:97:D7:29:79:76:3B:0E:B5:7C:BB
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.189.0/24
198.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0e:3c:e8:dc:69:40:af:ac:9a:13:ed:fe:f6:c8:52:15:36:
d6:83:61:98:a7:2d:9a:fe:a9:fd:0f:ff:99:fb:3d:94:7a:5b:
c7:df:5b:ab:98:9e:13:27:9d:b1:66:2a:11:7c:07:be:c7:42:
f1:7e:20:5a:95:4f:7a:17:e2:65:e5:6e:ec:93:27:aa:c6:87:
3d:ce:66:95:0d:6a:58:9d:9f:68:78:7f:83:ca:aa:cb:56:0c:
06:d6:3e:20:4e:e8:d3:4a:8e:d3:cc:ce:cd:3f:74:ed:e3:9f:
ca:f4:d6:25:ec:bb:ed:ef:5e:33:6d:0e:08:e3:b0:fb:fe:29:
ee:7a:2f:de:56:95:c7:87:16:58:f8:5c:14:98:7f:2d:58:24:
26:ce:13:be:54:70:a6:10:8f:c4:e5:df:49:33:a2:79:73:9d:
ed:f4:66:81:0e:46:35:e1:46:e5:46:da:e4:bb:15:39:b5:93:
52:e0:5c:7f:d0:14:73:e9:96:6a:b9:d7:a2:5f:fc:4b:12:b3:
89:aa:26:c9:a3:5c:42:36:74:2c:00:be:9f:0c:ce:e7:30:d4:
d7:c9:52:b2:a7:63:e3:5c:2d:31:1b:b0:d0:7f:7a:b4:81:d1:
73:07:cb:8f:73:a7:08:c3:f6:35:9b:1b:4a:2e:b4:6a:9e:7f:
71:2f:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:24:12 2025 by rpki-client