Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gpYWZk-Egj5MF22zFwU-crBmDtQ.roa
File: gpYWZk-Egj5MF22zFwU-crBmDtQ.roa (raw, json)
Hash identifier: t/SkyizqcVfEiDxgFfWSmRhWsIw4ahSJDv2Zq5NJzPU=
Subject key identifier: 82:96:16:66:4F:84:82:3E:4C:17:6D:B3:17:05:3E:72:B0:66:0E:D4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D6C1D74AC96DD6FFA6327498DB3E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gpYWZk-Egj5MF22zFwU-crBmDtQ.roa
Signing time: Tue 02 Jan 2024 00:31:09 +0000
ROA not before: Tue 02 Jan 2024 00:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60949
IP address blocks: 109.122.45.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d6:c1:d7:4a:c9:6d:d6:ff:a6:32:74:98:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829616664f84823e4c176db317053e72b0660ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:0f:4f:68:da:7b:98:47:29:f7:35:4f:01:
f3:ae:9c:79:25:df:b3:63:ee:9b:3c:4e:fe:4c:87:
30:c8:85:75:24:a9:f9:e4:72:97:b5:62:d0:c8:9f:
d7:c0:d9:ad:ba:f6:26:6a:4a:94:ec:be:95:3c:42:
6f:9f:fa:9c:c9:e8:c2:d4:a4:b1:cb:1d:cb:09:f8:
2c:30:61:84:e4:5f:8b:34:34:62:19:95:b1:ca:f3:
ef:4a:a8:6f:6f:f0:ba:b2:a9:44:f8:b3:ec:dd:cb:
a1:7d:74:71:33:d7:8a:01:f0:d5:3d:6b:40:68:85:
3b:07:65:51:92:19:57:6b:f1:35:0d:86:d4:3d:0d:
a6:50:60:e8:92:b8:64:61:68:8f:c9:ab:fe:21:10:
36:75:b8:b2:8f:51:f9:ec:34:dc:8e:2d:b1:9a:e1:
29:00:b6:18:e6:ec:6c:d5:b8:bb:2f:f2:8c:c2:30:
50:4d:cc:06:46:1e:48:c5:b4:db:7b:1b:55:fa:7e:
71:b1:5c:ba:6c:32:68:d5:a7:b0:3e:20:3b:92:c9:
b5:af:ad:c0:ad:50:09:76:18:f7:5b:32:44:03:96:
24:dc:49:b2:99:b2:61:df:ed:d6:ed:cd:2f:e6:18:
07:b5:f4:95:5f:c5:d6:0e:a5:90:39:c1:fc:26:e4:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:16:66:4F:84:82:3E:4C:17:6D:B3:17:05:3E:72:B0:66:0E:D4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gpYWZk-Egj5MF22zFwU-crBmDtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.27.0/24
109.122.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:20:0d:c7:bb:a7:45:38:cb:ad:a1:c1:13:18:a8:d3:f3:11:
54:4f:66:20:d7:75:49:45:7f:ea:1b:90:9e:e3:ef:0d:98:70:
64:ed:49:4d:73:36:4a:36:27:bb:72:4c:4e:fb:cb:6f:0b:1f:
9b:47:8f:a6:c7:e5:7b:ee:6a:ec:5e:a2:1b:c2:9a:70:1c:42:
8c:2f:5a:12:c5:73:3f:2a:6b:b2:d0:17:8a:fe:4a:c5:a9:8a:
ca:39:82:06:7e:96:fd:aa:67:a5:64:3a:67:e9:07:de:40:87:
03:8f:78:a4:52:64:55:cb:e0:38:15:60:73:a0:f6:cd:9e:76:
76:9e:5f:cd:69:18:5d:d4:c5:66:fb:22:fe:3e:18:b7:15:4d:
99:75:c8:8b:6b:d6:6d:61:e7:1f:aa:ad:fd:31:84:5f:22:34:
35:94:86:b7:88:e3:9b:45:8c:5c:cf:69:64:09:f6:4d:d1:60:
dd:bf:91:3d:af:8e:00:dd:7e:25:03:7a:ee:c5:e4:ef:6a:68:
45:c8:98:0e:40:7a:fa:b3:78:b9:b0:ca:fe:49:0c:5a:f1:d7:
65:cd:b4:44:3d:b1:76:cc:9b:2e:7a:16:be:a7:86:e0:77:b7:
e6:62:a3:c7:df:43:1b:a7:00:5d:d4:77:f0:2d:88:88:9d:b7:
77:5f:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:37 2024 by rpki-client on console-fra.rpki-client.org