Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/GqEinr-m2CvDdye1xapcq5VjPrE.roa
File: GqEinr-m2CvDdye1xapcq5VjPrE.roa (raw, json)
Hash identifier: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=
Subject key identifier: 1A:A1:22:9E:BF:A6:D8:2B:C3:77:27:B5:C5:AA:5C:AB:95:63:3E:B1
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019420D63676A0AC2736AC53AF78E95B928E
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/GqEinr-m2CvDdye1xapcq5VjPrE.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198696
IP address blocks: 194.49.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:76:a0:ac:27:36:ac:53:af:78:e9:5b:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa1229ebfa6d82bc37727b5c5aa5cab95633eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:aa:74:92:27:0f:7d:31:df:3c:45:d3:3b:
6e:e7:11:a6:81:5b:12:d7:95:d6:ef:e7:a7:b1:c3:
c8:e3:28:09:e6:0e:8a:ec:83:23:c1:cb:ec:3e:ab:
45:c4:46:b7:52:59:c7:b1:35:e9:47:67:57:19:5b:
a5:89:aa:bf:f3:31:6a:76:ba:09:f0:01:18:af:9b:
ba:c1:5a:c6:bd:74:49:f5:09:fa:6b:cd:29:ad:2e:
9a:2c:52:17:83:83:4a:ea:8d:9c:a5:a4:d9:01:4e:
63:fe:b6:b4:9c:0a:2a:82:33:ed:00:1c:85:17:41:
37:e6:56:a1:dd:20:23:ac:bf:38:9d:3b:e6:44:d4:
e9:f8:fb:49:5a:11:62:68:22:34:ff:7f:79:19:be:
02:ed:5f:09:69:63:d1:82:8d:d7:ff:88:74:98:ec:
35:24:c2:17:32:1d:b3:26:a5:4e:67:9c:22:23:ce:
23:0d:8d:1a:5c:f8:86:c3:ce:48:76:d3:3f:94:48:
f9:dd:86:9a:de:b8:05:cc:34:dd:10:97:a1:f3:29:
61:70:bb:9d:cc:d7:c2:e4:54:84:b5:5e:93:a2:34:
c3:73:99:c6:75:1c:ec:90:3b:7e:44:f0:01:f0:98:
76:b0:0c:cf:8b:12:4f:55:96:b4:32:3c:b7:32:ed:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:22:9E:BF:A6:D8:2B:C3:77:27:B5:C5:AA:5C:AB:95:63:3E:B1
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/GqEinr-m2CvDdye1xapcq5VjPrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0e:98:d3:3c:6f:53:69:ec:33:a1:f1:59:e8:c6:2a:26:5b:
ae:2d:eb:76:95:b4:29:1d:63:95:64:86:a2:c4:7b:87:f7:85:
4e:a6:ee:b4:f3:3d:6e:03:da:7a:cb:d5:ba:ef:62:1f:7c:86:
88:84:ba:18:25:c8:6f:cc:f3:e7:66:7b:60:69:cc:5a:8a:01:
d1:8a:5a:a6:da:9a:54:1d:83:eb:78:9b:19:79:66:59:12:a0:
ac:ed:73:5f:be:3a:64:42:f0:8a:7f:30:8a:b8:2d:fa:a0:ba:
d5:54:88:27:19:df:b7:1b:d2:cc:bd:58:4f:20:52:40:89:a9:
0e:42:8c:30:a2:5c:cb:40:40:49:8d:1f:28:cd:43:e1:c1:56:
51:76:42:b7:ad:8f:25:1e:55:e7:83:dc:95:dd:0b:f4:1b:85:
05:25:a2:84:ba:1c:7a:cf:56:39:a8:fb:09:87:73:7f:b7:03:
f0:e7:e8:97:7f:6a:09:a8:b7:48:2f:4e:a8:88:cb:bf:9a:a8:
c9:53:3d:a6:ac:45:24:2e:00:cd:f7:eb:af:76:3a:32:a6:91:
bf:6e:dc:ca:2b:fd:99:e1:99:02:e2:cb:c2:b8:1c:e4:f0:b1:
39:c1:74:f1:a9:0d:08:42:5b:08:fa:e6:d4:56:a0:19:49:e1:
7c:52:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:10:11 2025 by rpki-client