Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/GkebkevSBCy16KBmVsEn-BA41Mw.roa
File: GkebkevSBCy16KBmVsEn-BA41Mw.roa (raw, json)
Hash identifier: OStG5TfqHqqGMFSKuX7TAfxd7LqPsBc5si+5GUvYcys=
Subject key identifier: 1A:47:9B:91:EB:D2:04:2C:B5:E8:A0:66:56:C1:27:F8:10:38:D4:CC
Certificate issuer: /CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Certificate serial: 018CC94D5EC8551DC59964C2CA22C03F58BF
Authority key identifier: D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/GkebkevSBCy16KBmVsEn-BA41Mw.roa
Signing time: Tue 02 Jan 2024 08:32:20 +0000
ROA not before: Tue 02 Jan 2024 08:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44821
IP address blocks: 185.23.138.0/23 maxlen: 23
5.253.132.0/23 maxlen: 23
5.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5e:c8:55:1d:c5:99:64:c2:ca:22:c0:3f:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Validity
Not Before: Jan 2 08:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a479b91ebd2042cb5e8a06656c127f81038d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:03:e2:19:42:ad:54:c5:15:f0:42:96:02:
a9:8a:e0:8f:b6:be:2b:a2:17:db:d2:8d:ed:43:bc:
62:a6:0e:7c:fc:be:9a:0a:3f:ec:ac:c1:7d:6d:99:
1d:86:44:05:05:6b:87:cb:49:e2:02:38:06:dc:f5:
b8:1e:f7:27:ff:25:67:85:dd:4e:53:48:01:c7:11:
d0:98:72:fa:67:66:04:b3:46:9b:59:9d:d7:4f:b6:
bc:57:b1:98:cf:e8:2a:c5:f3:97:ec:f6:df:bc:6b:
75:6d:41:39:13:29:c7:34:1a:65:8f:3a:cf:11:1b:
4e:e5:21:e9:92:61:4a:df:31:69:24:ab:f7:55:9c:
d6:03:6f:56:74:06:31:93:d6:5d:b9:0c:ee:41:c5:
cf:e7:ac:42:1c:c2:90:60:4f:53:83:7e:42:02:a2:
9e:9a:bb:01:bc:60:58:1a:63:ec:87:45:23:41:13:
3a:f6:3d:21:1d:3b:18:6b:86:cc:b6:8b:cd:91:1d:
85:6d:a5:0c:12:2a:33:5f:40:10:74:9c:69:c6:97:
49:0b:8c:4b:b2:4f:c7:92:e6:02:d8:17:50:13:66:
38:03:55:bf:c7:57:a4:5c:f0:23:60:cf:f4:c7:19:
8f:34:1d:f5:0e:73:61:27:d6:da:68:3e:09:9c:1c:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:9B:91:EB:D2:04:2C:B5:E8:A0:66:56:C1:27:F8:10:38:D4:CC
X509v3 Authority Key Identifier:
keyid:D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/GkebkevSBCy16KBmVsEn-BA41Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.132.0-5.253.134.255
185.23.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:88:9f:df:bb:f6:da:75:fe:a7:dc:47:32:d9:80:f9:8c:52:
00:93:6c:8c:9a:8f:0c:4b:e4:1e:76:ee:d1:9b:0c:86:dd:88:
a7:24:5f:7b:e8:81:a0:38:1c:bc:69:52:b6:25:00:3e:b5:0a:
42:70:9d:e7:00:9a:90:9c:5b:bb:2e:1c:b1:d3:ac:47:1c:a3:
f7:e2:11:30:40:00:c9:3f:39:9e:e8:29:5f:39:f4:4a:ac:70:
e6:a6:c5:06:62:9b:3e:e5:4d:45:9c:4f:0f:70:31:32:61:cf:
ba:3c:f9:25:e9:c3:72:13:b9:29:76:c1:02:22:af:5f:81:95:
75:75:fa:38:e7:42:6e:5c:70:de:f7:cd:a9:41:0f:1c:67:f8:
03:f0:36:cf:97:b2:cb:a8:d6:69:db:9f:92:7b:9d:70:92:d4:
19:4c:8a:e9:5a:6c:30:27:e2:8b:88:ad:04:21:f9:da:ce:b7:
28:6f:54:04:50:6c:d4:a7:59:00:52:be:ba:ba:50:00:c3:a6:
aa:91:14:08:ef:75:87:3d:98:34:d6:db:ac:ab:58:c4:ab:50:
18:7e:44:40:ad:86:8f:ea:44:3d:2f:e8:43:63:0e:39:7b:89:
b8:8f:1b:5a:97:f3:3a:49:88:c9:fb:b5:31:6b:30:bc:9a:25:
45:7e:70:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:50:51 2024 by rpki-client on console-fra.rpki-client.org