Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa
File: GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa (raw, json)
Hash identifier: iyQ6GAQjxqnJYL88mOpP3XC9PzL+98vR7m7z4r32/XE=
Subject key identifier: 1A:2B:8D:E9:9F:88:8B:88:4A:91:5C:79:55:5F:88:32:10:4E:DD:06
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 019424B37456FC8B9A70F7119CC9E8C33F39
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24976
IP address blocks: 185.39.232.0/23 maxlen: 23
194.88.132.0/24 maxlen: 24
194.88.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:74:56:fc:8b:9a:70:f7:11:9c:c9:e8:c3:3f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a2b8de99f888b884a915c79555f8832104edd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:5f:ac:d5:96:3a:74:ed:b2:99:5d:05:60:
dc:9f:fe:c6:7a:7f:55:7d:fd:a3:e9:7d:81:ad:4a:
6f:ef:98:bc:fb:8d:6d:a7:ac:51:35:a2:ce:9e:8b:
fb:93:e9:ec:56:0b:1a:10:ed:93:b5:20:a8:59:8c:
dd:6a:19:e1:28:ab:76:01:6f:f1:a1:3b:4a:69:d4:
b3:0c:de:fd:6a:33:a7:27:e1:ee:9a:0f:da:ab:a4:
97:ec:d3:09:d8:6e:ae:67:11:54:6d:f7:46:bb:4e:
be:38:e1:6b:72:7d:79:41:c2:e8:99:00:b2:5b:98:
79:42:e8:fa:02:61:8a:db:f2:13:81:65:be:15:65:
17:9f:69:8b:32:6f:c3:11:c2:17:fb:90:b9:08:d3:
e0:0e:e5:4e:b5:47:1d:70:8b:e7:e7:34:1e:a1:58:
6c:6e:70:6c:26:ef:21:1a:5b:66:0a:0f:cb:8e:97:
25:22:f0:45:10:9f:74:9e:2d:32:19:11:fd:21:38:
fa:dc:63:3f:80:cc:f9:d4:3d:7b:09:8d:14:9c:69:
96:07:00:b5:0d:c9:8c:9f:67:88:29:dd:dc:a7:56:
36:25:b5:2b:7f:17:08:d2:d5:18:3e:81:e9:ec:28:
3f:a8:42:87:7b:21:e5:fe:06:49:1d:7c:82:c0:41:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:8D:E9:9F:88:8B:88:4A:91:5C:79:55:5F:88:32:10:4E:DD:06
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.232.0/23
194.88.132.0/23
Signature Algorithm: sha256WithRSAEncryption
59:48:d9:98:00:a3:a3:c5:3d:4b:8d:4a:28:5b:78:19:3e:1d:
81:74:39:ed:18:32:0b:2b:ce:f4:c5:06:c9:fd:fb:98:15:bc:
b1:48:29:60:b1:5d:74:5f:79:c2:1a:73:e1:40:59:d9:a6:69:
91:72:ba:b3:24:03:88:86:ec:21:13:6e:9b:03:d0:64:ee:eb:
9a:ea:ba:79:8e:00:0c:1f:93:08:b3:7d:e2:6d:d9:5b:c8:67:
33:92:58:65:97:68:15:ed:dc:6c:ae:67:69:03:78:17:84:17:
d4:00:51:40:18:54:9b:73:8b:4d:3b:eb:e6:cc:28:b6:74:e9:
87:7c:c6:25:a4:77:01:05:e2:f6:19:56:c6:13:64:cb:a3:6c:
2a:da:09:31:11:a3:18:d5:a9:74:5c:0d:9c:18:64:e7:f3:7d:
a3:7b:4c:f0:97:f6:6b:de:d8:0a:2e:8b:87:27:f2:95:62:af:
9a:75:41:00:7e:82:02:e1:c0:76:ba:cc:ae:da:7f:1c:be:df:
e9:cd:65:7b:9d:d8:b8:08:4a:9d:a2:72:79:c4:60:62:d7:75:
f5:4b:a0:ae:a6:e2:d0:27:fd:2d:f3:6e:ae:c4:7d:aa:1f:2f:
2a:5e:48:66:3d:d8:4b:89:b1:7a:ad:97:d5:36:c2:f3:e3:80:
65:20:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:09:09 2025 by rpki-client