Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GPk6cOOiOxMtHaF1qaL5ogxxt48.roa
File: GPk6cOOiOxMtHaF1qaL5ogxxt48.roa (raw, json)
Hash identifier: vJsuFvtgajJrSGMAknrCiwg5mqDnW5jGGBTFUrbPJ5k=
Subject key identifier: 18:F9:3A:70:E3:A2:3B:13:2D:1D:A1:75:A9:A2:F9:A2:0C:71:B7:8F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0191B301289B76446318FA0DA512A7911BA8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GPk6cOOiOxMtHaF1qaL5ogxxt48.roa
Signing time: Mon 02 Sep 2024 13:51:23 +0000
ROA not before: Mon 02 Sep 2024 13:51:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:01:28:9b:76:44:63:18:fa:0d:a5:12:a7:91:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 2 13:51:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18f93a70e3a23b132d1da175a9a2f9a20c71b78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:29:e6:57:3c:61:e9:d6:24:33:98:35:73:
f2:08:f0:f0:64:6a:60:d9:e1:9b:82:d1:27:1e:cf:
a0:c8:5a:0a:50:8d:84:f0:49:a4:bf:51:12:5a:de:
a8:04:cb:61:49:05:c1:8a:e4:90:b7:8c:bb:35:7c:
df:d6:ea:22:1f:7c:07:da:70:7e:34:c4:33:10:84:
f1:c6:fc:5f:01:43:60:ed:d9:cb:62:1b:0f:b6:5e:
bd:cd:48:6a:96:2a:22:73:be:f7:9e:66:e4:6d:5b:
a0:c0:34:af:96:e6:d8:8a:46:9c:35:9d:fd:aa:f1:
8c:0f:c7:37:de:85:7f:98:ac:66:d8:b8:2a:86:b0:
ec:54:5e:f1:d6:4b:bd:e7:cb:06:b5:b6:bc:33:69:
e3:8d:b5:9b:22:c6:cf:04:02:f3:ad:95:c8:a8:fa:
a3:26:34:8c:b7:82:21:ef:b1:f4:80:01:10:9a:1a:
77:8b:13:9f:da:5e:28:fa:ad:bf:e6:04:60:59:16:
e6:d0:2a:e7:e0:e7:ee:bc:77:6a:32:f3:17:6a:83:
93:fd:bb:87:4a:38:3e:28:3d:b6:6b:15:3d:49:62:
45:72:a3:07:47:5a:35:ab:81:0c:01:3e:a7:0f:27:
5a:26:38:e2:dc:7e:22:73:a0:26:6e:1c:6d:e7:fc:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:3A:70:E3:A2:3B:13:2D:1D:A1:75:A9:A2:F9:A2:0C:71:B7:8F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GPk6cOOiOxMtHaF1qaL5ogxxt48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:eb:fe:05:fb:aa:50:f2:a4:a4:87:05:b0:50:51:65:15:56:
79:6f:c7:3d:4d:e5:7a:54:d9:2c:a9:d6:47:1d:92:11:6e:94:
47:da:ca:66:e4:d1:d4:01:5f:e8:85:18:40:90:c1:34:14:06:
de:99:fe:9b:fa:d7:94:a0:fb:12:c2:f5:9e:c4:c4:c9:4a:70:
a9:40:e8:a6:c9:b1:2e:56:81:92:a1:cb:2e:10:82:50:a3:cc:
56:09:78:ea:2b:b6:4f:af:de:25:9d:19:98:1d:77:d6:3e:0a:
8b:fb:47:13:bd:6e:a1:a2:55:33:9a:65:63:ff:c1:d3:4e:5b:
33:50:3b:0f:2a:22:d3:42:6f:b6:3d:15:83:74:1d:53:d2:f6:
d0:23:47:09:dd:c5:35:f3:03:55:8d:ab:5a:0f:ff:fe:1f:8d:
9f:7a:80:99:1b:03:e3:99:6a:62:48:d9:4e:cd:1a:ec:7c:06:
7b:0f:de:8c:bd:f9:c6:55:1a:fb:32:0f:7f:c9:4d:90:86:ed:
d8:41:fb:f3:a5:a0:78:a2:84:8d:99:86:de:59:2d:c7:fe:f0:
5a:1e:cd:14:2f:de:98:ab:92:43:95:a9:5e:21:6c:9e:36:88:
76:24:e7:15:c1:26:86:38:4a:b8:10:e0:6a:db:ad:73:89:47:
2e:2e:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:45 2024 by rpki-client on console-ams.rpki-client.org