Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/GanlBJdb2pr7VV04ogaTHUPUlUg.roa
File: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (raw, json)
Hash identifier: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=
Subject key identifier: 19:A9:E5:04:97:5B:DA:9A:FB:55:5D:38:A2:06:93:1D:43:D4:95:48
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 0194266BA148FEE8929EF60583B9123A6CC3
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/GanlBJdb2pr7VV04ogaTHUPUlUg.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 185.155.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a1:48:fe:e8:92:9e:f6:05:83:b9:12:3a:6c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a9e504975bda9afb555d38a206931d43d49548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:d8:93:9c:9a:22:55:6b:bf:d5:fc:f5:ae:
56:db:b8:84:59:01:dd:9b:8b:25:f9:e6:7b:7f:36:
48:21:2a:73:c9:8b:94:f4:51:cc:93:14:c0:9a:ec:
91:58:1a:1e:81:e1:2e:a4:2d:dc:2c:c0:8f:30:6e:
4a:da:47:47:76:ba:79:fb:ac:46:2e:1a:75:17:2c:
e1:cb:a4:75:24:ef:31:fc:be:90:3a:02:89:c1:92:
4a:f9:8a:e0:3f:17:2e:7f:c0:fb:a3:cc:44:80:c1:
d1:70:6e:21:9a:79:60:c8:d9:2d:ed:5b:26:89:76:
27:e0:75:4b:02:c5:40:65:4c:be:3f:c0:04:73:5f:
76:96:67:ad:32:d9:bd:bf:a7:ec:3a:89:ea:f6:3d:
c0:65:a7:b1:d6:60:d4:42:9e:ad:3c:8b:e5:c6:c2:
e5:b7:c7:74:85:3d:91:4f:d3:f5:85:17:b0:95:21:
46:12:64:81:4c:3d:bf:49:40:d8:ee:04:3f:f6:ce:
82:c8:da:5d:6b:f1:bd:24:a4:a3:6e:3f:1a:3e:65:
fc:f7:28:d0:54:51:54:a1:ca:30:83:16:76:1e:96:
63:a1:58:bc:fd:94:b0:ec:f6:bf:89:a2:24:49:27:
d5:35:df:8f:79:ed:5f:d7:a6:a0:2e:ef:ef:a1:8f:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:E5:04:97:5B:DA:9A:FB:55:5D:38:A2:06:93:1D:43:D4:95:48
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/GanlBJdb2pr7VV04ogaTHUPUlUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.72.0/24
Signature Algorithm: sha256WithRSAEncryption
57:33:fe:97:c7:51:d7:9f:d8:9e:a5:9f:c7:20:e2:3b:36:1b:
40:f9:bd:fd:eb:98:9c:21:10:dd:00:5a:cc:91:bc:9b:72:38:
90:92:a0:a2:43:1b:64:f5:06:ad:36:5f:a8:37:dd:04:b2:7b:
c1:a5:57:00:42:9d:cd:f0:0b:d9:e0:52:a3:9d:68:12:43:75:
9f:11:10:e5:19:00:cc:4c:6e:d4:5d:93:5e:08:2d:43:fe:73:
83:0b:b2:9f:c0:36:7e:7e:a0:9c:f5:e0:ac:c3:c3:da:6d:bc:
5a:a8:d3:79:7d:98:1f:fc:5a:1b:a0:6d:81:57:9c:c2:dd:a9:
ee:49:ea:32:be:d3:7f:8a:13:93:b5:b6:e1:af:fe:29:57:fa:
e0:75:0f:f7:06:b6:25:22:b8:0d:9b:41:8a:9a:9e:8e:5b:6f:
96:d4:37:04:80:70:6f:89:c7:be:ee:31:4c:ce:eb:82:68:4f:
96:e4:23:8d:94:0e:ee:9d:a4:b6:9b:0a:ca:67:e1:61:29:19:
7a:34:7b:91:0a:1e:b5:80:d6:d9:06:b1:ed:2a:cf:e8:9f:b7:
f7:62:bb:10:0b:d7:8f:6f:ea:76:7d:3c:6e:2d:03:84:3e:59:
33:6a:93:9a:2c:27:4b:7f:37:c1:be:7f:48:35:e7:73:a8:97:
34:6c:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:19:04 2025 by rpki-client