Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/GQ4okKYObDE-j1xycURkWS4ZSu4.roa
File: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (raw, json)
Hash identifier: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=
Subject key identifier: 19:0E:28:90:A6:0E:6C:31:3E:8F:5C:72:71:44:64:59:2E:19:4A:EE
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 0194236A3349290438DAA733441C84472CA6
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/GQ4okKYObDE-j1xycURkWS4ZSu4.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50110
IP address blocks: 193.104.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:49:29:04:38:da:a7:33:44:1c:84:47:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190e2890a60e6c313e8f5c72714464592e194aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:07:00:e6:1d:fd:eb:ca:0d:ee:77:7b:6c:fe:
6b:3a:a1:8f:ad:bd:38:11:eb:e6:e3:9f:b0:b6:13:
9e:05:5f:3b:8b:cb:5a:83:3d:94:93:4b:1d:0d:db:
d3:17:f8:13:d9:1a:32:44:56:3e:42:b8:aa:6b:93:
2f:2d:e0:51:7c:c9:87:44:5c:10:6c:a5:0d:a5:62:
cc:26:6d:c3:1b:36:47:d8:03:b3:aa:c8:d4:25:bc:
17:d0:4c:6c:19:ff:49:78:77:2d:49:85:b6:e5:0e:
26:bd:87:05:50:78:3d:d2:79:e7:5e:47:51:0b:ef:
fb:3d:f5:40:46:e2:99:c7:bb:c7:2d:60:d1:ec:a4:
47:e7:83:b6:b8:09:ca:18:d7:90:c0:b1:35:94:e1:
b6:c8:c8:89:89:74:fc:97:a1:02:7e:cc:ef:3b:ab:
fc:17:33:42:2a:9a:d9:45:7f:7c:c9:cb:fb:d1:ec:
af:fc:c8:a5:21:7c:14:a9:3e:1c:eb:c4:17:82:ae:
d3:8d:45:79:d6:c9:81:39:95:7a:b3:e0:de:36:01:
b8:4a:e4:cf:53:e8:6d:07:b9:a6:52:a6:31:71:d5:
ad:c6:72:5d:a3:59:e7:af:61:51:97:46:ca:ea:a5:
10:93:51:a4:78:35:92:fa:f4:89:10:08:fe:6e:ee:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:28:90:A6:0E:6C:31:3E:8F:5C:72:71:44:64:59:2E:19:4A:EE
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/GQ4okKYObDE-j1xycURkWS4ZSu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2b:b0:2c:05:75:a3:12:8f:9d:6b:3a:38:32:57:a1:94:79:
3d:c6:86:07:3f:84:c7:70:b0:38:bf:ad:1c:2c:39:cf:0b:1d:
de:ab:fe:9b:fa:9f:28:3b:81:62:74:8c:00:e0:ad:7e:b1:e0:
a0:06:8f:cd:bd:1e:2e:9e:94:81:c6:dc:32:31:31:a2:db:2e:
9c:5f:a2:81:05:32:13:d4:d4:6b:a5:6a:68:48:7a:e6:7f:05:
7e:de:ef:fd:8e:63:e0:86:cb:23:c0:ed:19:42:93:a3:f5:ef:
99:79:7c:b0:b8:6d:73:bb:aa:11:a1:48:d7:c4:32:bb:2a:a9:
1b:b5:97:3a:a0:00:7d:58:b0:c8:78:3a:c7:fb:cf:be:bc:b3:
bf:f5:56:8c:9b:31:d3:c8:17:4b:0a:96:6f:52:81:f2:4b:f8:
2a:10:2b:4b:59:be:cd:ae:96:38:bd:e2:8d:d0:b8:40:ed:6d:
4e:86:c1:32:cf:b7:10:91:6a:a4:c7:49:a1:c4:87:23:7d:9a:
53:78:68:94:ab:b6:c4:67:0e:bb:78:ed:d4:a6:f4:05:ca:a5:
54:91:fc:ef:34:1b:c4:31:e3:4e:90:41:5e:27:e8:9f:95:d7:
94:af:30:ba:e6:96:96:d9:58:30:e3:79:6a:b2:b9:b9:f6:4a:
b5:64:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:54:49 2025 by rpki-client