Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/1GUi9iA8Rgrr5GN4QB6VlqMrvms.roa
File: 1GUi9iA8Rgrr5GN4QB6VlqMrvms.roa (raw, json)
Hash identifier: s/MIypH3pMJ3iuiuGr8K68PmgQyO6HFRzwvdBy3o4FU=
Subject key identifier: D4:65:22:F6:20:3C:46:0A:EB:E4:63:78:40:1E:95:96:A3:2B:BE:6B
Certificate issuer: /CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Certificate serial: 01941F8C3E3E4096E536A01D49B41AA08788
Authority key identifier: 1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/1GUi9iA8Rgrr5GN4QB6VlqMrvms.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204316
IP address blocks: 194.145.115.0/24 maxlen: 24
2a12:dc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:3e:40:96:e5:36:a0:1d:49:b4:1a:a0:87:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46522f6203c460aebe46378401e9596a32bbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d8:4f:90:02:67:ce:dd:3b:e3:02:43:31:2c:
1d:cf:3a:c8:06:c3:75:28:c8:74:79:c6:44:92:55:
c9:82:92:90:4e:ed:ea:93:71:21:8b:3e:64:25:c5:
d3:30:ef:d1:86:88:2f:d3:14:ab:5c:19:d1:aa:e4:
8c:a4:4a:ad:14:1b:32:2c:ca:aa:34:94:86:5e:82:
09:e8:b5:66:0a:e6:2f:43:2a:60:d4:97:eb:db:7c:
9d:04:36:45:d2:ab:6b:eb:50:b0:69:13:95:1e:78:
87:db:bb:ff:fd:ed:b8:96:82:e4:07:f4:91:2c:f3:
03:da:05:83:56:a6:12:bf:0e:92:07:24:bd:03:0c:
d9:3f:63:8d:14:fa:b0:41:9c:96:fc:e4:d9:b3:e4:
41:9e:a9:b7:3f:1c:62:23:17:7d:aa:66:4e:78:d0:
79:cd:45:c6:89:6b:5d:82:91:6b:5a:ac:c3:77:55:
fa:ff:43:7d:ac:e8:ec:94:88:3f:65:09:13:bd:17:
9b:18:99:4e:87:07:58:ed:7e:f4:e1:f8:ef:7b:da:
6c:fe:97:00:6e:07:a0:2d:71:6b:06:9f:d6:c8:25:
29:87:5b:eb:67:1b:08:cf:dd:39:80:f4:28:d9:59:
73:43:f6:7a:32:96:b6:26:64:3a:08:9e:e2:bb:20:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:22:F6:20:3C:46:0A:EB:E4:63:78:40:1E:95:96:A3:2B:BE:6B
X509v3 Authority Key Identifier:
keyid:1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/1GUi9iA8Rgrr5GN4QB6VlqMrvms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.115.0/24
IPv6:
2a12:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
32:b1:a6:72:ac:36:9a:36:28:71:e0:cd:cd:a8:1f:42:77:4a:
b1:e9:d3:10:89:a6:d9:83:75:d2:f4:f8:c6:72:ec:74:6e:a9:
7e:2d:1c:06:fe:a0:d9:8b:b7:8d:27:91:53:6f:44:5f:0f:89:
29:0b:ae:12:f3:c9:e6:9e:f9:c0:3a:78:6a:49:2a:22:11:38:
fe:09:83:68:32:a3:80:66:c9:0e:96:30:19:e4:1d:9e:99:1b:
a3:e3:6c:17:72:f7:29:cc:df:ed:8e:5b:f5:e5:ed:d0:8b:7c:
ed:34:0c:fb:36:ba:07:26:c9:ce:f9:c9:be:18:1d:c4:08:f1:
2b:09:b1:24:f2:2a:af:67:91:dd:9f:bd:c3:a8:72:43:78:59:
b0:6d:f0:e1:8d:06:9b:cb:00:20:0c:12:2d:1a:d7:60:08:59:
8a:4d:1b:68:0c:07:ef:97:5e:c3:44:07:b7:9f:cf:6f:60:e3:
52:79:c2:70:dc:66:33:72:bd:e0:35:93:f2:fa:22:23:77:fa:
8a:84:0b:16:19:75:43:40:e0:cd:19:72:f4:c3:9e:90:f0:54:
90:76:32:48:33:6b:e5:9e:5a:6d:6a:e9:28:57:a8:4b:ae:4c:
6d:8a:b7:99:f1:d9:38:26:8e:02:f5:69:8b:ab:6f:a3:62:06:
26:0c:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:19 2025 by rpki-client