Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GwY7aqP6WD1VZfdUMWD5hpn3Gtw.roa
File: GwY7aqP6WD1VZfdUMWD5hpn3Gtw.roa (raw, json)
Hash identifier: KM8VeZyBdq/62P9d/7r/Yu9hFrPIddN1gV8lL3yUSfg=
Subject key identifier: 1B:06:3B:6A:A3:FA:58:3D:55:65:F7:54:31:60:F9:86:99:F7:1A:DC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0196A1A24E2153D2C73CF826B30E4D228619
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GwY7aqP6WD1VZfdUMWD5hpn3Gtw.roa
Signing time: Mon 05 May 2025 18:08:10 +0000
ROA not before: Mon 05 May 2025 18:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:a2:4e:21:53:d2:c7:3c:f8:26:b3:0e:4d:22:86:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 5 18:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b063b6aa3fa583d5565f7543160f98699f71adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:be:0d:25:96:25:bd:c6:6a:a1:09:1c:12:
00:cf:9a:b7:65:8d:1e:7e:6f:63:0e:6d:2f:2e:d2:
69:89:4b:ac:ab:5e:21:6a:9d:61:7b:c8:cc:21:5a:
76:6d:d9:4b:5e:6f:7e:24:59:c4:47:4f:f8:b5:1c:
db:09:9f:07:39:8c:4f:64:c4:f5:6a:c9:55:4f:a9:
a3:9d:36:82:d5:61:91:38:99:b2:a9:38:06:cd:58:
76:84:22:30:a5:08:e9:91:0e:cb:79:d6:f0:a0:63:
f0:52:f1:ac:b3:fe:9a:26:95:0e:f9:bb:b6:04:08:
e4:24:d6:80:55:26:56:ad:f7:34:47:ab:9e:a4:4a:
06:89:e8:32:a7:d3:0b:23:3b:0c:1b:15:cb:28:f2:
59:37:d4:31:2f:a4:fb:20:0e:eb:9c:dd:27:de:54:
26:b5:0e:ed:f9:0d:53:18:35:bf:c8:07:b2:64:14:
7a:f7:e5:f9:ce:87:92:dd:f0:7f:3e:62:33:e0:ef:
72:bf:a9:3c:09:75:85:a1:94:4f:c2:37:6f:9a:34:
8f:67:a9:15:ed:f5:3a:eb:e0:46:e9:3a:33:77:b9:
4a:93:7f:23:d6:06:5f:46:fb:14:73:99:8b:4e:27:
f7:77:71:e6:3d:6a:e0:dc:4f:3b:79:e1:cc:7a:a7:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:3B:6A:A3:FA:58:3D:55:65:F7:54:31:60:F9:86:99:F7:1A:DC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GwY7aqP6WD1VZfdUMWD5hpn3Gtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c4:60:7a:03:cf:00:0f:a9:7f:ef:40:69:99:97:01:d3:c0:
b8:7a:f5:92:2f:d4:3e:e6:6d:54:9b:4a:57:1d:b3:2a:f9:1d:
37:e8:a9:76:fa:0a:0f:1f:e3:fe:81:3a:d1:46:96:bb:fc:20:
dd:f6:87:c9:67:9f:33:e7:ba:59:bc:c1:4a:c1:13:45:f5:d6:
15:90:92:6a:b3:b0:46:de:29:31:c9:4e:3e:74:ad:9d:9a:09:
8a:34:2c:11:c6:4d:e1:ee:2b:4f:52:f3:a2:0c:11:f3:9b:1f:
9b:f7:19:9e:0a:a0:1b:e4:61:03:34:1c:f4:13:b7:57:24:ef:
0a:b6:b5:7a:87:69:4d:c6:e4:da:a3:5d:ca:d5:1b:53:f2:d2:
9f:b3:26:0f:75:3c:e9:0f:0e:cf:fa:25:01:a8:46:0e:74:ec:
83:f4:28:50:f5:67:d4:fc:bf:b7:aa:df:af:5a:6e:34:30:fe:
68:84:08:ce:fb:20:92:74:58:e3:fa:01:d5:de:7c:7b:bb:a9:
50:93:19:5f:1a:ac:e3:28:e9:bf:81:e0:57:f8:fd:64:15:1d:
55:79:e3:52:c4:f4:9d:10:ef:9b:78:cb:58:b8:81:ac:b2:f1:
b7:cc:27:6f:42:dc:95:bd:b5:b4:79:d2:ee:89:fc:bc:e9:9d:
65:c5:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:20:24 2025 by rpki-client