Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/GiScTXLFDlSkFEEGri5P1vz6Sho.roa
File: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (raw, json)
Hash identifier: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=
Subject key identifier: 1A:24:9C:4D:72:C5:0E:54:A4:14:41:06:AE:2E:4F:D6:FC:FA:4A:1A
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01941F8C08662B3FF8722386301145EEA0B6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/GiScTXLFDlSkFEEGri5P1vz6Sho.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47823
IP address blocks: 185.94.196.0/22 maxlen: 24
193.219.101.0/24 maxlen: 24
193.219.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:08:66:2b:3f:f8:72:23:86:30:11:45:ee:a0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a249c4d72c50e54a4144106ae2e4fd6fcfa4a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:07:56:ff:ed:ce:25:c7:93:18:82:da:48:
5a:e4:1e:df:6d:c9:5d:23:19:8f:02:d1:ec:6c:78:
45:ee:4d:da:97:3e:cb:8d:3d:8b:48:12:bf:a5:f1:
e1:f4:60:61:1c:62:15:93:19:c6:5b:cb:a8:9e:c9:
ac:68:6e:61:97:20:e7:b5:96:b5:19:39:b2:7f:be:
f7:e9:7f:2d:cf:46:91:ab:35:e2:98:0e:4a:46:c8:
86:91:6c:97:f4:e0:d1:5c:30:72:ba:61:a9:85:cc:
bb:8a:7e:f3:77:24:25:4d:df:c2:dd:ed:b6:51:2e:
fb:41:08:60:d0:fa:c0:ae:b4:e9:5c:af:86:62:be:
19:75:80:48:32:44:fb:22:43:81:dc:fe:03:f0:50:
37:56:fd:13:84:c0:4d:c2:26:5e:95:4b:e9:a0:33:
37:2b:f0:ad:3f:e0:fa:cd:31:4e:31:c0:22:1b:af:
61:d5:19:15:22:3b:b8:07:99:f9:bf:6c:9b:a1:2c:
0d:9a:65:5b:68:ea:7f:b4:d4:96:47:c8:68:1c:6a:
ed:06:6f:22:52:1a:ae:f4:12:b1:8b:64:13:7b:79:
c6:85:91:ed:fa:16:43:b9:2d:47:df:f4:c8:34:8e:
c0:06:38:93:6c:5c:87:d2:bf:e5:77:bd:ea:82:02:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:9C:4D:72:C5:0E:54:A4:14:41:06:AE:2E:4F:D6:FC:FA:4A:1A
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/GiScTXLFDlSkFEEGri5P1vz6Sho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.196.0/22
193.219.101.0/24
193.219.121.0/24
Signature Algorithm: sha256WithRSAEncryption
17:97:43:c6:3f:b0:48:b7:41:60:88:55:ac:0c:64:9d:1f:7a:
89:11:53:b5:eb:5a:88:54:38:43:11:a1:e0:1e:f0:ce:0d:c0:
f5:05:b3:3e:fd:34:80:27:8b:12:46:2b:62:ea:13:c6:a6:b5:
01:6c:3d:00:b4:d1:56:e9:68:a8:84:68:c1:d9:24:01:67:00:
b8:e7:0f:b0:19:11:ca:c9:6b:0e:6a:5e:05:70:3c:3f:e8:5c:
04:0a:5a:be:20:09:11:ec:ad:9d:36:83:1a:68:f2:c7:99:12:
94:50:d1:1f:51:15:93:72:7e:d3:16:05:51:b6:71:1e:d9:87:
9e:3a:48:ce:a1:19:ce:c0:d2:04:c4:5f:b4:43:2c:cd:1b:dd:
32:c7:2e:a9:ba:57:16:b4:5e:51:ed:53:4f:1d:68:55:66:d3:
81:3c:e8:ef:3b:3a:90:4e:01:fd:97:46:85:a5:65:f5:8a:2e:
de:5b:c6:c2:1d:d6:23:7a:df:2b:84:06:80:d8:57:3a:9d:67:
bf:1a:ca:92:b5:3e:05:9f:01:9c:58:ab:95:f2:16:bb:40:3c:
4c:95:2e:cb:49:5d:50:04:79:d1:53:7b:e4:cc:f7:8a:04:76:
9b:23:8f:32:99:44:43:52:12:c5:25:66:fd:a9:2a:5e:47:32:
c1:7f:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:52:02 2025 by rpki-client