Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa
File: GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa (raw, json)
Hash identifier: 49YBW2j0tiBN16/cc6cP9HT+URCIjSHjxZeBvIsvdsc=
Subject key identifier: 19:6A:F8:4A:67:B9:51:8C:C3:1D:B5:23:B2:38:58:D1:FA:4E:D2:E8
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 019427B5DFC8834BC041C54DAD4A2506932C
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.176.124.0/24 maxlen: 24
185.201.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:df:c8:83:4b:c0:41:c5:4d:ad:4a:25:06:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196af84a67b9518cc31db523b23858d1fa4ed2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:83:43:a2:b0:da:bb:a1:5d:65:08:07:c9:
20:f3:5f:93:b3:57:24:e9:68:ca:fe:a5:a7:79:5d:
d6:38:ab:da:06:64:80:b5:23:c2:af:53:bf:26:55:
00:39:6e:6e:a9:18:9d:03:ef:62:d0:6c:a4:9c:44:
4a:5d:94:27:95:d1:91:ae:f2:9a:63:97:30:f6:86:
27:c4:c9:4a:2f:fb:46:ba:56:00:c9:0b:97:a1:77:
ee:15:d7:5b:97:67:9e:a9:6f:47:7f:54:4b:b5:e9:
04:52:4a:3e:4d:0b:0b:52:d2:20:fb:f5:e6:19:d8:
e3:a0:18:71:41:c0:47:fe:45:45:74:44:16:da:55:
eb:ab:31:da:51:18:77:65:24:a6:e9:df:85:9d:7d:
14:0d:e7:62:c0:5e:77:3c:77:b4:2a:9a:3b:c6:63:
88:dc:ec:9d:b3:ae:a6:64:3b:ca:fc:1d:10:5b:4d:
8d:d1:9c:b4:7a:24:86:bb:6f:d8:a5:2a:c8:26:94:
16:8a:24:01:01:d0:42:a9:58:59:d1:de:8d:4f:cc:
32:6c:0c:ca:5a:ef:b7:a6:44:ef:ad:86:36:57:8f:
33:52:f8:cf:6b:a1:b0:33:c1:d4:c6:d6:00:af:e9:
5c:2d:92:78:74:5c:d1:7a:87:f3:69:b3:f4:63:c9:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:F8:4A:67:B9:51:8C:C3:1D:B5:23:B2:38:58:D1:FA:4E:D2:E8
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.124.0/24
185.201.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:aa:31:f3:ff:49:18:3c:6c:ca:5d:3f:4b:4e:30:0c:4d:96:
8f:7e:1a:7b:18:ae:14:9e:c5:86:7b:c3:97:fe:c1:33:e2:2a:
8b:48:06:0f:b4:ac:da:45:fc:5e:b1:19:c6:f7:a1:32:76:dd:
4f:6f:d9:5a:c7:0b:c4:69:87:79:7f:f3:31:9b:78:21:14:06:
68:24:06:7a:7c:1d:4e:8a:08:67:fb:13:78:37:27:72:42:3f:
fc:91:7a:00:67:3c:2a:98:3d:7a:0c:e7:07:c5:67:1b:a1:3a:
65:a8:82:55:c5:36:7c:6c:f4:d8:86:86:8c:53:45:6a:35:e9:
5b:60:ac:5c:f3:be:44:92:3b:06:8b:8e:5c:dc:92:f1:6a:ba:
ed:9c:da:64:10:e9:b3:9f:2b:c5:eb:6d:c9:31:a3:1c:7e:1d:
b9:85:74:8b:25:7a:70:fd:56:8e:0e:a9:e1:88:55:77:65:dd:
48:fa:7c:f5:b6:05:a7:4f:bc:80:bf:9d:3c:66:ce:9c:6d:d7:
b9:6b:b1:19:c5:fb:00:88:2d:b5:80:63:36:bc:f3:a2:ff:0a:
aa:95:e4:17:39:24:00:63:52:80:6b:58:59:fd:74:99:ae:f8:
7c:91:2c:da:f6:34:dd:e6:8a:e6:cf:47:65:b0:90:36:c5:c5:
da:ec:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:35 2025 by rpki-client