Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/GJFmAVdBLkt-K12_8U-EDk0f3yw.roa
File: GJFmAVdBLkt-K12_8U-EDk0f3yw.roa (raw, json)
Hash identifier: zfqQBdpccjZmx4EuBEwihY30hjYd0exVNbi03c+rq7o=
Subject key identifier: 18:91:66:01:57:41:2E:4B:7E:2B:5D:BF:F1:4F:84:0E:4D:1F:DF:2C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019687348DBF88257709BB1902E7BD52922C
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/GJFmAVdBLkt-K12_8U-EDk0f3yw.roa
Signing time: Wed 30 Apr 2025 14:58:10 +0000
ROA not before: Wed 30 Apr 2025 14:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 146.247.104.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:34:8d:bf:88:25:77:09:bb:19:02:e7:bd:52:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 30 14:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1891660157412e4b7e2b5dbff14f840e4d1fdf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:c0:5c:aa:2f:00:d7:e8:ce:2b:1a:5f:16:
89:82:8f:c6:82:f6:5b:d6:30:da:92:ba:fe:7a:14:
c4:8f:d6:11:f8:38:36:6f:7a:49:50:4f:24:d3:ad:
a1:02:d8:ca:3b:32:5a:bc:71:4d:49:cc:c6:43:e5:
6d:db:5e:d8:c2:2a:2f:b1:f0:c8:fb:82:22:d1:f8:
d1:98:12:02:be:20:66:66:8a:c8:c9:10:34:02:a5:
e6:3f:54:54:5f:44:76:c5:ee:ba:e2:66:87:42:6c:
1d:61:96:ed:d0:d4:48:46:ef:c0:24:44:fc:fc:10:
2a:59:75:cd:3c:33:2b:4c:23:cd:2f:ee:0f:fb:03:
0a:56:11:6e:24:5b:36:88:04:bb:0f:e1:e2:96:1d:
dd:8a:02:85:95:4a:6c:2b:10:76:dd:41:a5:39:e5:
c5:92:f9:62:e6:b5:89:1a:bc:26:52:87:5e:95:e2:
48:a3:9e:c7:54:f7:3b:c5:d7:95:49:db:32:a4:eb:
9e:1e:78:c0:50:5a:68:d0:18:c8:43:cd:e6:9b:7a:
5e:e4:07:88:09:5a:64:66:33:b2:01:cc:25:b2:23:
dd:42:a4:24:e3:94:0f:91:32:bb:08:05:4a:1e:94:
3c:9c:e4:05:50:03:af:f5:be:51:fe:cc:aa:da:6c:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:66:01:57:41:2E:4B:7E:2B:5D:BF:F1:4F:84:0E:4D:1F:DF:2C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/GJFmAVdBLkt-K12_8U-EDk0f3yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:11:78:17:79:ed:27:37:87:07:7e:6e:c0:06:d4:29:d2:
a7:3b:05:9d:f3:ac:55:40:4d:8a:63:50:33:7f:54:8a:8f:bb:
1c:fd:88:11:4d:89:30:ba:b0:74:6b:7b:ac:d4:b9:f9:57:f7:
bb:43:68:54:76:25:68:96:64:98:63:8a:02:5f:75:1b:91:64:
da:36:96:13:dd:c5:00:b2:3f:b0:ac:5f:9a:94:c8:50:c8:48:
7e:88:77:4f:19:6e:b0:84:9c:f5:7c:d9:0e:f0:84:50:80:92:
b6:03:fa:c7:28:1f:28:fd:82:7f:4e:d8:c6:48:3b:98:f2:4d:
82:2b:7d:31:84:21:24:62:af:cf:8b:74:f8:41:8a:c2:fd:80:
1f:fd:a8:31:aa:31:19:a5:e7:c9:41:5a:5d:1e:b9:ac:5e:75:
48:33:c4:57:98:b2:f5:f1:74:a7:43:4e:5a:78:64:ac:b0:72:
90:47:e7:56:ea:3b:80:d9:9a:8e:01:93:93:19:87:33:12:c1:
a5:86:1e:92:41:d4:88:d1:19:2f:d0:71:9f:de:11:8c:13:cb:
8b:22:a5:3d:93:dd:f9:c9:44:cc:a3:61:5c:b9:95:34:5b:ba:
5d:fc:50:5f:f8:70:05:89:e5:b6:e8:03:ee:bb:91:23:27:0f:
4c:df:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:52:08 2025 by rpki-client