Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/GvfycZ7D71B1eRufHkpUfZqkKiM.roa
File: GvfycZ7D71B1eRufHkpUfZqkKiM.roa (raw, json)
Hash identifier: TmWBzn7E6S2lyPoj563PouJDPsyNGgOYJO4cKptJPls=
Subject key identifier: 1A:F7:F2:71:9E:C3:EF:50:75:79:1B:9F:1E:4A:54:7D:9A:A4:2A:23
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 018CC3B69E30FE44C4078960C6FB096A4CAE
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/GvfycZ7D71B1eRufHkpUfZqkKiM.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208757
IP address blocks: 45.86.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9e:30:fe:44:c4:07:89:60:c6:fb:09:6a:4c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1af7f2719ec3ef5075791b9f1e4a547d9aa42a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:cc:69:e2:17:37:e7:30:3f:f4:81:b0:fa:
7f:20:60:b3:fb:22:b5:aa:9c:12:d6:de:8a:11:d5:
74:af:5e:35:26:2b:39:70:22:2f:a1:5e:94:1b:2c:
13:7c:86:65:92:1e:7f:60:22:3a:dc:06:77:00:c0:
60:fb:3b:43:fa:73:7f:dc:2e:8f:38:73:8a:df:3f:
f6:08:d5:21:ab:1d:4b:24:a6:ce:fa:f6:ab:33:2c:
67:2d:2b:bf:55:60:03:e5:1d:9e:9d:44:49:35:a8:
36:5d:3d:86:00:e6:0f:a8:de:ba:4a:e8:bb:ee:1e:
d8:5a:11:b1:30:aa:1e:09:fc:c7:1f:88:64:e2:b2:
72:a1:a8:a2:34:08:34:0c:3f:25:a2:3a:53:55:4d:
15:d1:b0:eb:69:b9:44:c0:4e:c9:fd:3a:80:e4:f2:
50:5f:35:e9:21:5f:ee:71:53:eb:bb:de:87:ed:26:
0d:4e:7f:89:66:72:3f:30:ea:d3:15:53:4c:37:79:
4a:3a:79:1d:04:05:30:6c:63:72:d2:2d:6c:8b:80:
a9:c7:58:41:88:b8:b7:5e:20:97:56:96:2d:21:b9:
28:25:a4:60:44:12:43:5e:02:ae:17:44:83:ca:a2:
56:a5:da:f6:7f:d8:7d:39:08:d4:0b:10:18:66:fa:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:F2:71:9E:C3:EF:50:75:79:1B:9F:1E:4A:54:7D:9A:A4:2A:23
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/GvfycZ7D71B1eRufHkpUfZqkKiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.48.0/22
Signature Algorithm: sha256WithRSAEncryption
93:2f:70:b7:9f:73:bc:2e:70:95:f4:e7:6b:b3:2b:c8:24:9e:
5a:57:af:1d:60:0d:fb:11:58:1b:4b:f5:00:05:00:7e:26:89:
af:d0:d9:e2:86:9c:15:79:04:94:0b:44:21:be:bf:47:65:29:
da:54:fa:15:6f:0d:2b:73:53:a1:b1:19:1b:cc:14:1c:df:36:
34:a9:78:65:50:bf:5f:65:ee:e4:53:ce:4c:28:a4:2d:60:21:
2c:11:96:fb:62:81:ba:ad:1a:9a:8a:9e:bc:0d:42:b6:29:f8:
7e:26:f7:f2:8c:bd:2b:d3:bc:d2:fb:67:04:ac:87:5a:3a:db:
21:de:8a:d2:db:3a:73:b4:5c:d1:b5:97:ca:8f:5c:7a:0a:df:
e0:2f:0b:ef:8f:f3:30:19:ff:ca:71:d7:cc:7b:41:aa:4f:07:
df:0a:af:48:e9:2f:0c:a7:0f:e6:54:5d:86:14:3f:0a:eb:4f:
ac:ea:7b:e2:f8:fd:c3:bc:97:fb:99:87:26:2c:7d:6e:3a:c8:
41:80:15:82:f9:dd:21:bc:37:41:27:73:24:c0:b1:4a:a6:44:
7c:fb:3c:27:4c:ae:0d:a7:4c:c1:f4:be:5a:f9:66:7e:cf:96:
9e:f2:c1:37:24:a1:7c:1f:b2:83:b7:49:91:ea:da:36:99:a7:
68:57:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:50 2024 by rpki-client on console-fra.rpki-client.org