Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/GmoSLMOyGmAE3DVEod4OY1EVNkg.roa
File: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (raw, json)
Hash identifier: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=
Subject key identifier: 1A:6A:12:2C:C3:B2:1A:60:04:DC:35:44:A1:DE:0E:63:51:15:36:48
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0194222038CA333A5EB4F96F0CEFA5BF8945
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/GmoSLMOyGmAE3DVEod4OY1EVNkg.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197832
IP address blocks: 146.101.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:ca:33:3a:5e:b4:f9:6f:0c:ef:a5:bf:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a6a122cc3b21a6004dc3544a1de0e6351153648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:18:6c:43:fc:90:bb:f6:84:a7:f9:f3:43:
16:34:0c:62:4a:3a:84:63:5b:04:7f:11:b5:37:02:
ea:c9:0a:5d:09:b0:a1:28:d9:ff:50:2a:8b:b8:f7:
54:84:64:f4:4b:6f:58:56:81:07:be:fa:ba:ab:90:
1e:f4:39:83:0b:c5:5f:d7:21:9a:1c:db:fb:de:bf:
c6:4e:3b:c9:f4:e6:1a:90:9d:06:ab:ab:23:f2:ae:
ed:56:99:bd:36:f9:2a:4e:de:d7:95:cc:cc:50:f7:
4f:2d:61:86:5a:a8:26:76:04:39:f7:67:91:e5:0e:
dd:7a:be:a8:e9:42:fa:15:ab:9e:d9:60:23:17:16:
a9:aa:4d:57:16:fa:9e:f3:94:d7:5d:31:83:c8:a0:
5f:de:61:2c:d7:ae:cd:36:f9:b4:b4:83:d7:1b:88:
55:a4:3f:2d:e1:3c:d4:10:e5:ae:2d:fd:a5:76:33:
25:33:91:b9:76:e9:78:cd:2f:b7:5a:e6:9b:87:b5:
f4:8e:a3:57:37:9e:90:00:1e:91:b8:29:2e:9a:a3:
41:60:19:5b:3b:01:7c:c2:0a:40:6c:12:9e:6e:52:
5b:8b:43:1c:f6:d4:b6:00:cc:12:1e:34:4a:cb:f9:
fa:83:86:5a:e1:f5:62:93:d1:1b:4b:a8:95:49:08:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:12:2C:C3:B2:1A:60:04:DC:35:44:A1:DE:0E:63:51:15:36:48
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/GmoSLMOyGmAE3DVEod4OY1EVNkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.79.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2c:2b:0f:a1:88:37:ce:51:15:9a:ae:b9:f3:ec:24:c4:d9:
1c:a7:d7:aa:42:99:fd:ba:c9:4d:a7:d1:15:57:5e:c8:c8:b3:
13:02:a7:b7:29:3e:48:e4:2f:a4:18:f3:bc:1a:53:67:84:62:
fd:4d:1c:d8:3c:ed:9e:bd:9e:ff:13:01:2f:d4:6f:d8:47:65:
5a:00:09:ed:b7:a7:31:77:0c:46:dd:27:a9:d5:62:df:fb:be:
24:a6:1a:dd:d0:1f:75:e9:1d:f3:c8:13:39:0b:3c:81:05:b6:
80:0f:21:e1:35:e6:4a:e4:80:d4:d6:dc:3d:81:01:60:09:a0:
83:c6:bd:2c:89:ab:10:b9:90:dd:e8:19:e8:f1:cd:37:57:1e:
02:6a:93:dc:bd:8f:9f:75:75:5d:3f:2d:a0:63:08:04:9a:4b:
6d:e8:64:1f:3f:11:fb:8f:45:a0:5b:12:b7:63:35:b4:2c:80:
27:94:ca:9c:23:3c:3f:a3:58:1c:a2:aa:3f:18:e5:5a:e2:8c:
ae:10:c6:aa:fd:71:3e:c0:91:61:9c:42:74:1e:29:08:6f:1d:
4b:bf:69:87:4b:c5:db:3b:bf:a0:56:09:50:d3:8b:9f:57:9d:
0d:40:9d:f7:94:fb:62:67:c0:dd:50:8e:c7:be:35:6d:93:55:
a1:4a:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:34 2025 by rpki-client