Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gD4s9HSc5p2am1oaqm92KyZ6rNc.roa
File: gD4s9HSc5p2am1oaqm92KyZ6rNc.roa (raw, json)
Hash identifier: uwwSmxA3VyFu8q7qjQqWimuyakFaRyg23jDDeJ5VJyc=
Subject key identifier: 80:3E:2C:F4:74:9C:E6:9D:9A:9B:5A:1A:AA:6F:76:2B:26:7A:AC:D7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369FD0BEA2007825BB4C2C9D6B3400B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gD4s9HSc5p2am1oaqm92KyZ6rNc.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 185.239.245.0/24 maxlen: 24
185.254.19.0/24 maxlen: 24
194.15.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:0b:ea:20:07:82:5b:b4:c2:c9:d6:b3:40:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803e2cf4749ce69d9a9b5a1aaa6f762b267aacd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:22:13:b3:87:82:79:eb:c7:89:36:e7:69:
4a:0d:f7:9b:9d:2c:04:bc:a5:6a:f8:70:cb:1f:03:
fb:c9:21:b0:38:b2:eb:28:7e:ac:1a:ca:1d:ac:eb:
80:3b:09:42:c8:8b:dc:0b:9a:e5:5c:ff:72:d0:a6:
82:56:ec:22:4e:69:da:5a:bf:24:1b:ce:c8:6e:e4:
c7:e6:b1:4c:05:17:58:b8:34:58:db:f9:1c:5a:9c:
bd:76:67:af:16:c6:1f:a0:96:98:0f:ba:44:e4:03:
9a:b4:b2:fd:2c:69:bc:19:78:c6:7a:bc:32:9b:72:
0a:b2:8a:29:90:d8:a6:91:aa:5a:6f:fc:f1:ed:33:
7d:db:dd:66:51:07:0e:fb:27:31:00:18:3a:ba:ec:
50:cb:d8:37:e0:68:70:e1:cd:62:38:36:4a:18:bb:
54:e4:41:b0:ae:66:9e:40:a3:9c:07:85:f6:50:04:
c6:e6:0a:16:eb:47:9a:47:8b:31:88:26:f0:d4:54:
ed:2f:d3:b9:e1:6c:d6:60:06:18:72:b6:17:31:3b:
56:1f:45:a3:52:2f:24:41:fa:da:9e:34:26:de:11:
f6:cb:c0:b5:11:b6:f9:80:06:20:21:a1:bd:ad:57:
db:16:d7:e6:b5:0b:6d:ad:2e:9c:fb:5b:0c:b6:03:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:2C:F4:74:9C:E6:9D:9A:9B:5A:1A:AA:6F:76:2B:26:7A:AC:D7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gD4s9HSc5p2am1oaqm92KyZ6rNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.245.0/24
185.254.19.0/24
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fe:d6:de:ea:90:1f:9b:13:22:09:f2:66:f8:53:03:8f:b1:
6d:e1:f7:9a:07:47:6a:53:d4:ed:e7:26:94:3f:80:fe:c4:1d:
be:84:96:28:09:e9:d4:eb:d4:7c:76:40:f2:cc:2d:c0:4f:54:
dc:ba:a0:47:d5:37:a0:40:76:eb:5b:00:ba:63:25:66:f1:6d:
19:a9:8e:0b:6d:d5:b7:1e:58:08:ba:42:a9:80:8c:95:58:e9:
4a:13:9b:53:26:ee:e5:16:78:20:9d:af:a8:b4:f5:43:b6:bf:
75:26:42:8e:ba:38:35:d0:31:9d:db:35:c0:cf:0a:b6:5e:28:
fd:f1:a6:2d:2f:4a:a2:75:d2:a3:20:3b:0c:34:c6:25:5e:7c:
1d:bb:1b:38:e4:9e:04:3f:4c:44:ec:fa:a7:67:22:65:cc:29:
b0:7d:54:46:19:3b:c0:af:f7:fc:6b:93:87:09:c1:e0:c3:7e:
3e:90:60:15:83:98:df:67:1a:92:77:60:20:ed:15:43:f1:54:
74:86:6b:d8:0e:e4:c5:1e:02:1e:cf:97:f7:37:46:64:27:8e:
7b:2e:f4:e2:8f:ac:34:03:1e:aa:98:53:22:b7:5b:e7:69:85:
07:93:04:63:54:0c:b7:ab:8f:a4:cf:bf:7e:2d:8c:5c:39:7b:
93:6b:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:55:21 2025 by rpki-client