Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBRJRzyCJtZidJNJGOKjvcH56NM.roa
File: GBRJRzyCJtZidJNJGOKjvcH56NM.roa (raw, json)
Hash identifier: e4yb1fSfuaBJHw+07yHx/a85odtWwhjhSG1xJr8Oqi0=
Subject key identifier: 18:14:49:47:3C:82:26:D6:62:74:93:49:18:E2:A3:BD:C1:F9:E8:D3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222022C0FB303F130F3E9FDCAE3ECA98
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBRJRzyCJtZidJNJGOKjvcH56NM.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42947
IP address blocks: 194.41.124.0/23 maxlen: 23
194.41.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:22:c0:fb:30:3f:13:0f:3e:9f:dc:ae:3e:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181449473c8226d66274934918e2a3bdc1f9e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:a2:aa:d7:ee:6c:b5:c9:50:d6:36:c2:c1:
77:b3:00:62:42:e4:e2:d9:22:c3:7c:02:35:c7:58:
52:08:d3:0a:a1:89:7a:c5:30:b5:48:98:a6:77:b0:
3e:f3:61:e5:2c:44:41:b0:a2:4f:8d:17:11:96:58:
63:b3:9e:aa:37:a7:c6:4c:58:0a:f7:e5:dc:68:b4:
a0:54:96:64:98:84:d2:6e:42:87:61:3b:1c:c2:d0:
18:0b:44:98:63:58:ea:81:ae:23:3b:20:14:41:f8:
e4:62:47:5c:44:9f:ed:f1:38:ac:ed:6e:25:5d:b6:
f7:96:bf:9d:b2:b4:7f:26:11:bc:8c:82:d6:7e:fd:
42:36:5d:04:40:5c:e6:ef:00:41:85:c1:83:25:6f:
c5:f3:ad:d3:d2:bb:e5:92:6c:e2:a1:c0:51:33:f3:
71:13:46:3b:6f:cc:f4:7e:5a:d7:dd:d4:c7:41:6c:
d1:0e:3d:ba:93:bd:62:db:61:df:fe:00:0e:3a:ba:
2a:01:25:25:47:fb:4a:2f:80:87:1a:eb:e3:58:84:
33:74:f3:05:89:b1:7e:57:0c:b4:df:67:6d:85:95:
f8:76:94:d4:e2:88:16:9d:8d:85:5e:da:a8:c4:78:
36:31:74:11:fa:e3:7a:be:bd:1b:c7:51:75:81:da:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:49:47:3C:82:26:D6:62:74:93:49:18:E2:A3:BD:C1:F9:E8:D3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBRJRzyCJtZidJNJGOKjvcH56NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:7c:70:ed:83:28:79:37:5d:9d:a3:af:98:41:10:3c:f1:7d:
7f:97:d9:36:84:1d:31:2a:da:83:a1:00:40:98:fa:e0:a7:21:
a4:00:df:77:61:69:bd:2f:99:be:a8:8a:92:bd:98:3a:ca:3b:
d8:df:24:ab:ea:34:98:e5:c3:7a:98:18:78:29:73:56:ad:71:
a1:25:9a:4e:bd:b4:a6:68:a6:4a:40:ac:9e:64:c9:de:d8:62:
19:21:de:f9:b1:a0:da:58:eb:81:7a:7c:6c:90:ec:49:a4:a4:
e7:48:23:dc:42:a4:cb:08:17:91:0a:34:a2:dd:eb:96:ff:da:
fa:13:c8:9b:42:41:22:ba:f7:91:84:88:23:ea:80:9c:03:e4:
93:9a:38:86:b4:b3:32:59:ce:b4:0b:21:0b:48:89:a3:88:81:
e7:89:c6:60:4d:03:b1:62:1f:00:84:57:53:bc:0a:da:58:96:
2e:a5:53:7d:fa:63:bd:8b:47:4c:eb:af:af:7d:cb:81:70:f6:
f8:15:d6:18:bb:cf:56:59:82:f2:ec:e0:43:42:28:76:16:86:
2d:9d:ff:86:4b:71:4c:e4:7d:6c:5c:ec:01:87:5b:74:fc:72:
dd:4c:1b:0d:c2:7d:60:00:33:50:b9:5b:65:e8:3b:fb:c3:93:
4a:db:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:34:32 2025 by rpki-client