Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBLg3gCbeDmRe5LMnGo5FWQbODE.roa
File: GBLg3gCbeDmRe5LMnGo5FWQbODE.roa (raw, json)
Hash identifier: vY5xMLuOsi6JvrmEAdhYj1+dSJ/2uEAP70zu8eg/j4M=
Subject key identifier: 18:12:E0:DE:00:9B:78:39:91:7B:92:CC:9C:6A:39:15:64:1B:38:31
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01947E9A45171709129D58CDD7694595307B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBLg3gCbeDmRe5LMnGo5FWQbODE.roa
Signing time: Sun 19 Jan 2025 12:47:06 +0000
ROA not before: Sun 19 Jan 2025 12:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212633
IP address blocks: 185.246.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:9a:45:17:17:09:12:9d:58:cd:d7:69:45:95:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 19 12:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1812e0de009b7839917b92cc9c6a3915641b3831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:77:0e:10:f8:9b:c6:59:c6:54:5c:65:94:
98:40:ac:d7:0c:1d:e9:f1:6a:09:50:04:79:73:bf:
c1:9e:e7:04:5f:23:de:66:56:f9:e3:08:c4:22:ac:
6f:f1:d1:a1:4f:80:45:e8:d0:45:74:d3:65:d2:62:
29:7d:69:32:30:81:ee:44:2a:9e:0f:85:35:31:64:
af:92:52:20:94:d7:70:5b:e7:01:aa:47:a2:e1:a8:
c7:72:fe:47:56:31:2d:cd:6b:35:96:ce:72:c6:11:
cc:d8:f7:f8:23:65:83:6a:38:b4:3e:c9:ef:6b:f2:
2d:45:be:83:28:21:95:86:b6:e4:13:03:1a:d0:bc:
4c:06:91:b3:d8:62:fe:73:66:04:14:4e:a8:05:5f:
f9:1d:50:57:c5:52:c8:f1:ba:04:58:c1:bd:b8:bc:
2f:7d:aa:d0:21:cd:ff:97:9a:b3:ff:fe:83:a5:1d:
2d:6a:cf:ec:1a:6d:a9:ca:dd:b7:7f:f7:34:c4:95:
b0:9d:32:51:3d:47:60:05:d3:90:0d:e4:01:fb:81:
a7:16:a9:52:be:6a:f4:c9:f0:93:db:60:3e:77:08:
ff:f6:b5:ca:c3:ff:53:97:3c:10:32:96:32:7b:a2:
5b:35:95:62:6f:0b:bc:1c:a8:e8:14:29:98:dd:c7:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:E0:DE:00:9B:78:39:91:7B:92:CC:9C:6A:39:15:64:1B:38:31
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBLg3gCbeDmRe5LMnGo5FWQbODE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:80:e2:24:77:97:20:17:fa:35:1d:83:65:f3:7f:5b:06:a6:
ed:04:b5:84:40:4b:89:c2:e8:21:a9:47:a7:f7:87:1a:3d:13:
7e:d5:2b:7b:37:25:6e:e3:be:40:07:a0:50:65:61:30:46:ce:
ca:68:1d:e8:5e:8a:2a:36:ab:57:c8:4b:61:fb:a2:a6:27:a5:
d7:60:77:dd:d4:33:6b:ae:df:f9:d7:79:8a:13:c5:19:e7:35:
8b:3a:9d:a7:d4:83:54:19:ac:af:74:71:2b:02:20:4e:fe:a4:
c1:f1:27:b6:5c:dc:f1:dd:c0:6e:6e:cb:50:79:20:a1:83:51:
75:14:3c:6b:20:76:17:53:f1:80:92:cb:1e:23:b7:d0:c5:7e:
b1:b1:e0:47:06:c2:45:39:10:1c:b1:0d:0a:63:71:b6:94:e4:
6c:87:9b:ed:97:2d:01:5b:44:2f:cc:d3:9e:e5:c3:7c:56:78:
4e:3c:e1:08:24:be:5f:a4:79:25:c6:09:9b:b5:b0:ba:7d:8f:
c9:ba:23:2f:e0:c0:92:32:dc:ea:21:8b:42:e5:b5:57:79:6a:
af:7f:b5:34:ee:53:49:e4:45:c0:42:c5:5c:71:64:f1:84:9c:
3a:8d:db:5d:f9:ed:c4:1e:6a:47:46:a7:7d:98:28:e4:82:03:
35:20:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:56 2025 by rpki-client