Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlJ5OOyOMEcXVLu4UNoiIf7c7SU.roa
File: GlJ5OOyOMEcXVLu4UNoiIf7c7SU.roa (raw, json)
Hash identifier: 0UkMcF72eOWGRnWdbFilzUvyAziAyuLjxrTklK4CvEc=
Subject key identifier: 1A:52:79:38:EC:8E:30:47:17:54:BB:B8:50:DA:22:21:FE:DC:ED:25
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144134DFF84239CDCE48359A94BFEFA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlJ5OOyOMEcXVLu4UNoiIf7c7SU.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.251.0/24 maxlen: 24
31.41.252.0/24 maxlen: 24
31.41.254.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.151.29.0/24 maxlen: 24
83.138.54.0/24 maxlen: 24
88.151.8.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
176.116.15.0/24 maxlen: 24
176.126.96.0/24 maxlen: 24
193.28.178.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:4d:ff:84:23:9c:dc:e4:83:59:a9:4b:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a527938ec8e30471754bbb850da2221fedced25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:ab:e8:ff:60:19:a9:13:2b:1b:1e:3f:c0:
b8:3d:fe:bb:f4:56:9b:30:b3:0c:8f:59:e8:6f:7f:
89:bd:87:58:51:37:e7:b6:21:f1:27:ca:c7:07:f4:
19:eb:0a:58:10:06:d9:70:b8:7a:ea:a7:9e:89:0c:
07:45:35:04:c3:17:6a:3a:97:9b:f5:81:19:9d:54:
68:36:ad:8a:ae:c3:ba:48:32:80:ba:39:30:d8:5c:
45:97:c8:d3:cf:84:5c:c1:12:20:40:10:4f:70:07:
7c:75:ef:94:ec:f2:a4:8e:68:6c:57:70:71:6c:12:
50:ae:5e:21:66:17:3d:37:b8:d5:1a:9d:9d:59:9c:
2d:54:a1:f3:b5:ef:ea:c2:1a:25:d8:e9:f1:e4:4d:
94:3a:ce:ed:f5:69:5d:b7:f2:ea:76:54:f2:2d:86:
43:37:2a:7d:a6:3b:4e:ac:5c:b5:f5:d4:2c:c5:de:
97:69:9e:bb:c3:50:ea:f0:ea:d0:76:f2:f5:8a:ec:
28:7c:54:aa:d1:77:87:ef:a3:65:38:1b:69:47:99:
92:27:ec:65:78:ca:05:33:22:d3:42:81:8f:ad:39:
64:7b:9b:a8:85:48:ff:56:af:6d:ea:b0:31:12:45:
c5:79:2e:15:c2:0e:e9:bc:fb:4d:ff:04:f1:cb:86:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:79:38:EC:8E:30:47:17:54:BB:B8:50:DA:22:21:FE:DC:ED:25
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlJ5OOyOMEcXVLu4UNoiIf7c7SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0-31.41.252.255
31.41.254.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.128.255
45.151.29.0/24
83.138.54.0/24
88.151.8.0/24
94.154.190.0/24
146.19.129.0/24
176.116.15.0/24
176.126.96.0/24
193.28.178.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c7:95:7e:67:fd:28:d5:7c:24:3a:fb:0b:e4:52:14:40:ac:
39:31:82:2c:4e:86:8e:e7:51:04:6c:08:c3:40:f4:1f:62:5d:
dd:2c:0c:25:58:a6:6f:b4:e9:2b:20:b7:a9:ba:66:a5:99:21:
c1:87:14:d5:e3:38:e2:ad:cb:9e:75:ca:b4:56:eb:99:d8:05:
a7:48:9a:f2:5a:cf:ef:97:40:a7:bb:bc:0f:21:34:d6:66:e8:
31:3d:d7:b4:a9:92:71:51:ac:a0:64:bc:38:11:29:3f:32:87:
6e:f4:cc:13:20:a2:58:5c:e3:a5:3b:a0:bd:85:81:0d:9f:ab:
77:5c:7f:b6:ce:32:18:15:53:4f:34:56:eb:5f:04:ca:9d:0c:
55:0b:3d:be:95:44:e1:9b:ed:db:4d:fb:ca:74:2f:bc:56:67:
9b:d8:1b:c7:45:6d:5c:0c:b0:47:60:ac:87:e5:71:84:ae:a8:
2f:49:29:31:4f:12:02:4a:89:1c:a9:d8:db:4f:c8:b0:68:5a:
e8:b6:ac:64:b9:20:88:80:99:67:00:8f:21:fa:d6:72:27:cd:
05:22:bd:45:65:64:da:4e:07:3a:8b:36:7a:b2:a7:13:88:e8:
cd:ba:bf:8c:15:81:08:78:fe:06:b2:80:32:5d:7d:14:1e:00:
38:02:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:21:19 2025 by rpki-client