Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GWb13RZyserln3FjkOGgxeYzlSs.roa
File: GWb13RZyserln3FjkOGgxeYzlSs.roa (raw, json)
Hash identifier: vj3ee/HwHRDmFN5FxHmida0s3ceGyl3hEXJiC2LNavA=
Subject key identifier: 19:66:F5:DD:16:72:B1:EA:E5:9F:71:63:90:E1:A0:C5:E6:33:95:2B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018F7E09D96992E34E6A92B2CD629796D756
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GWb13RZyserln3FjkOGgxeYzlSs.roa
Signing time: Wed 15 May 2024 20:55:25 +0000
ROA not before: Wed 15 May 2024 20:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 94.154.33.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7e:09:d9:69:92:e3:4e:6a:92:b2:cd:62:97:96:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 15 20:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1966f5dd1672b1eae59f716390e1a0c5e633952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:dc:df:7c:17:39:4d:3e:31:cb:1e:db:32:
b8:37:22:45:69:d4:3b:80:59:ed:ec:a8:a0:a3:6d:
57:81:3d:87:ad:9b:fe:bc:9b:15:1e:d3:53:c5:fa:
d5:28:2f:ec:91:ce:bf:ac:0b:b2:3b:b4:6b:0b:89:
7f:da:54:46:ec:e4:e4:51:4d:98:bc:64:8b:87:60:
9f:76:72:8d:54:a9:bf:89:f7:b8:4a:a7:fc:c9:c1:
17:ce:94:9e:94:f6:1b:52:fa:20:bd:7e:85:c5:3d:
2b:84:ba:4d:7c:4d:ae:85:28:15:d0:d8:51:ad:09:
3b:f4:e3:b5:b5:cb:fb:0d:85:0d:38:dd:57:93:1a:
cb:d8:5b:68:b6:cd:7b:07:7e:a9:fc:00:b5:7f:85:
dc:fa:d0:f4:27:b6:63:17:da:b8:d8:a6:00:3d:60:
67:33:84:9a:5e:8f:0c:c1:f5:94:57:23:d3:d5:30:
4e:56:bc:47:aa:1b:d2:ae:50:4c:26:5a:50:4c:13:
18:60:67:40:55:82:ae:04:11:69:d2:75:c4:84:5f:
92:73:c4:43:fb:46:7e:43:3d:24:58:4b:fd:7a:e8:
b8:86:ff:03:32:65:77:3f:e3:fa:4f:43:a1:99:d8:
8b:99:4f:c3:23:72:f9:72:a4:2c:93:67:70:3f:dc:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:F5:DD:16:72:B1:EA:E5:9F:71:63:90:E1:A0:C5:E6:33:95:2B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GWb13RZyserln3FjkOGgxeYzlSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bb:ea:b5:6c:01:ff:f7:50:c0:bb:42:ea:c9:3d:99:0c:90:
aa:75:4c:da:04:de:d2:d4:14:bf:7c:96:5a:a7:52:e6:c0:99:
60:f5:8e:3c:82:10:21:51:14:3d:06:67:e2:8b:57:de:91:6d:
1a:91:f4:7f:35:64:1c:85:fd:4c:96:d2:d6:00:87:bf:cc:44:
cb:e0:a8:73:f7:48:23:67:7e:78:16:3e:88:94:12:8c:55:5f:
2d:07:c3:ad:8d:32:ee:37:c3:2c:7c:8a:d1:f4:78:c1:19:f5:
b6:4c:c0:c8:f2:bb:46:3d:27:d0:82:cc:2b:1d:4d:98:8e:53:
ae:c9:2e:10:27:7c:36:65:25:9b:8c:f4:4e:ce:e3:d4:b2:86:
1e:5a:96:0e:07:72:93:1d:04:da:7b:18:10:fb:4f:53:88:dd:
e1:e8:0d:1b:2a:fd:99:ca:71:0c:ba:d9:cd:b1:3e:a0:3e:8b:
cf:0b:dc:83:de:6a:b2:82:61:3d:30:bd:31:5a:99:c4:cd:c8:
a8:ab:7e:32:36:26:99:70:98:30:20:dc:df:61:28:3c:71:b8:
5d:a9:fa:e6:fc:0b:ba:18:35:08:3f:4f:27:e8:38:1c:26:c9:
19:2f:2e:f3:45:c2:6d:06:e9:58:b1:cd:ce:bb:e4:ab:95:ab:
6e:b9:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:09:49 2024 by rpki-client on console-ams.rpki-client.org