Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/GWunLY-bXSErZU3FWmnV4-5vVKY.roa
File: GWunLY-bXSErZU3FWmnV4-5vVKY.roa (raw, json)
Hash identifier: xPAOKfueV0x+XEoysYucTWWsNf2sG+B7HRMkzQ4aBw8=
Subject key identifier: 19:6B:A7:2D:8F:9B:5D:21:2B:65:4D:C5:5A:69:D5:E3:EE:6F:54:A6
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019421440BF10C7CFB4ABB455CAB438EF723
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/GWunLY-bXSErZU3FWmnV4-5vVKY.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3177
IP address blocks: 185.187.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0b:f1:0c:7c:fb:4a:bb:45:5c:ab:43:8e:f7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196ba72d8f9b5d212b654dc55a69d5e3ee6f54a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:50:f1:b4:dd:10:72:b8:54:76:60:c1:f4:
35:39:d3:e1:d5:e6:d3:94:4a:f2:00:c6:cc:88:79:
a6:ee:5f:79:a0:34:ff:37:20:96:2c:cf:33:28:4d:
ad:23:a2:8d:3c:c6:68:d3:18:17:c3:fe:a1:8e:c6:
a0:92:69:39:0e:e1:a8:a4:b3:e2:6d:df:1a:f6:e1:
31:5e:da:da:f8:b9:9f:cb:49:07:0e:18:3f:c0:83:
31:50:51:7b:17:73:21:35:f6:b8:75:c0:a4:d4:80:
3c:49:29:ba:5a:79:18:c1:69:4a:16:9e:d2:e6:45:
0f:b4:15:a0:12:8e:4f:e9:b2:22:47:2b:15:8e:92:
26:63:ad:75:43:45:ee:f6:a1:a3:a0:3a:c1:34:24:
83:3a:1e:4d:bc:b4:2e:2e:7a:f1:3a:60:d1:0e:5a:
de:30:ee:21:52:6e:1b:a8:31:fe:7d:12:38:c2:7a:
b7:25:c5:2a:ab:90:cf:b0:49:78:81:96:41:55:67:
c8:90:7b:e8:bd:9e:e2:4d:c5:5e:5d:94:48:c9:f4:
0f:b2:9f:fb:17:54:75:27:5f:a7:f4:5c:24:41:5f:
0a:3e:14:52:85:95:5d:36:92:50:1c:99:e1:8a:e3:
fc:1e:40:14:a2:ee:bd:3d:95:38:3f:9f:61:f7:f6:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:A7:2D:8F:9B:5D:21:2B:65:4D:C5:5A:69:D5:E3:EE:6F:54:A6
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/GWunLY-bXSErZU3FWmnV4-5vVKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:20:04:21:fc:3c:e6:49:7d:5d:e7:e2:39:78:8a:64:dc:f4:
c8:75:1f:29:9d:be:51:d3:a8:78:f5:12:bc:8c:d2:b3:3d:74:
58:ba:24:db:e5:83:f8:b7:c6:d1:b8:60:a3:e7:5f:85:da:d4:
4d:2d:63:a5:ed:4b:a3:1a:2f:a5:51:04:3d:17:e6:53:79:e4:
7d:0e:39:92:22:05:bf:25:25:21:00:9e:5c:b5:49:f3:44:71:
cf:4d:d5:5c:56:98:10:7b:e2:2f:5e:27:f5:1a:0d:4e:b7:40:
84:9a:ce:81:92:5d:62:0e:9c:ee:cb:02:6f:fb:fe:dd:15:3f:
ce:06:49:84:15:75:be:65:26:dc:62:7c:7d:9c:5e:c4:31:bd:
cb:f0:e3:a9:ae:e5:2e:a3:64:05:06:f4:e7:7e:8e:27:22:5b:
c6:9f:93:33:0d:77:50:23:8b:1f:3c:1e:a7:5d:2a:33:4f:f0:
3a:81:37:47:60:02:2a:ea:7b:2c:49:75:23:01:91:3c:e6:2e:
2f:e8:eb:d6:62:11:32:a7:5a:a9:09:51:fb:ad:af:11:d4:87:
cf:f0:05:8c:d4:05:73:8f:b0:45:03:64:f6:61:2a:c6:dd:9b:
43:3e:56:ca:a9:c0:02:6d:9d:d2:ba:04:5b:69:80:0e:1d:02:
79:82:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:46:13 2025 by rpki-client