Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/gkENYYsPBuXf0NOzpkVsfrs1AMk.roa
File: gkENYYsPBuXf0NOzpkVsfrs1AMk.roa (raw, json)
Hash identifier: 0B6P3AEGbU58Ebht8aWiZFc1mfEyRA46sL3PJRWk5Qo=
Subject key identifier: 82:41:0D:61:8B:0F:06:E5:DF:D0:D3:B3:A6:45:6C:7E:BB:35:00:C9
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01923551885AA05EFEF2F6F349954AC8D5C7
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/gkENYYsPBuXf0NOzpkVsfrs1AMk.roa
Signing time: Fri 27 Sep 2024 21:09:48 +0000
ROA not before: Fri 27 Sep 2024 21:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12595
IP address blocks: 185.117.226.0/24 maxlen: 24
185.133.88.0/22 maxlen: 24
188.116.45.0/24 maxlen: 24
193.142.212.0/24 maxlen: 24
212.11.88.0/22 maxlen: 24
2a10:7180::/29 maxlen: 29
2a10:7180:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:51:88:5a:a0:5e:fe:f2:f6:f3:49:95:4a:c8:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Sep 27 21:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82410d618b0f06e5dfd0d3b3a6456c7ebb3500c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:5c:e3:1c:fc:60:61:6c:65:33:61:6d:dc:
a5:77:a0:4e:bd:f0:d5:c3:14:12:30:5b:8a:1e:e1:
8a:eb:60:16:52:34:61:15:f2:e4:aa:77:f8:b8:c3:
c0:ac:47:b5:d2:d0:b4:89:54:08:e2:88:a0:59:45:
0d:c4:81:2b:81:d7:dc:ba:2f:d4:7a:f1:38:bf:ed:
bc:44:47:3b:3b:7a:a7:2e:6c:76:1a:91:ea:bb:a3:
21:2e:0a:77:5b:8e:fd:14:0c:a8:ac:3e:bd:da:1d:
00:4f:97:a1:92:c4:7a:a5:00:f3:f7:55:89:87:4c:
7d:eb:58:f7:87:d5:d5:ae:29:56:14:d8:63:a6:48:
c4:00:b4:0b:9c:17:49:5a:32:0f:fb:27:5b:8b:db:
15:31:a1:83:29:54:f8:42:61:ff:ee:2b:d6:5d:0b:
59:5a:3b:f3:d7:30:08:77:17:0b:55:31:c5:ea:4d:
8c:09:0d:f1:3c:1e:d3:b0:dc:be:30:12:56:04:13:
8d:21:4a:b3:8a:4e:14:da:17:2d:7e:a6:de:7f:a0:
28:6b:6e:8a:9f:b2:f7:27:0e:7c:02:77:1f:35:ed:
93:3a:8d:71:1c:4b:52:86:62:fc:d8:d2:1c:d9:b5:
55:58:4e:99:47:b5:3f:13:df:0a:06:f0:a9:b1:66:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:0D:61:8B:0F:06:E5:DF:D0:D3:B3:A6:45:6C:7E:BB:35:00:C9
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/gkENYYsPBuXf0NOzpkVsfrs1AMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.226.0/24
185.133.88.0/22
188.116.45.0/24
193.142.212.0/24
212.11.88.0/22
IPv6:
2a10:7180::/29
Signature Algorithm: sha256WithRSAEncryption
75:27:c7:2f:46:bf:46:cd:1c:e7:d5:3a:a3:6c:e8:a5:c0:f6:
4f:81:11:5e:f8:5b:94:43:13:8d:e7:6d:83:c2:5e:9f:dd:ae:
3d:e5:21:35:0b:b8:22:74:41:77:bd:ab:1a:76:30:f2:7b:b2:
d2:9d:e2:25:d5:0b:0b:a3:26:88:4b:ea:32:74:29:9c:8e:b7:
dc:e2:af:47:39:50:5a:c0:ea:e8:b7:c1:15:31:69:bc:80:f7:
3b:49:8e:19:5d:2b:89:ba:cf:b8:8c:d5:ae:7e:d6:ef:02:80:
a2:08:6f:64:9d:3f:df:7a:00:6b:eb:f9:9e:7f:6d:b8:46:4a:
52:8e:8e:00:f3:83:65:3a:eb:13:6d:ed:13:ef:f6:f0:27:94:
69:46:05:54:73:cb:b0:71:b8:7e:d5:d8:47:fd:5e:bd:1f:66:
aa:8a:78:73:1e:0d:18:fc:2b:aa:a0:f9:9b:09:f9:41:0d:54:
cb:fd:33:73:a5:8d:f6:89:fd:19:a3:79:8a:4d:14:f5:b7:40:
eb:db:67:5c:d2:13:07:66:15:20:87:52:c3:21:c1:20:23:e3:
93:13:ad:6f:30:16:57:a8:a1:89:41:cc:47:b3:26:a7:e9:a1:
46:3d:b7:ef:bb:e3:6b:a2:78:7b:d0:b1:ae:ec:4b:45:be:27:
60:d8:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:11:57 2024 by rpki-client on console-ams.rpki-client.org