Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/gld-UXK7BJQJzvR5kcWe-fNAhSw.roa
File: gld-UXK7BJQJzvR5kcWe-fNAhSw.roa (raw, json)
Hash identifier: CwEWOKksg7cXUNTy6P0aiK/+sZboUAm5uQld3uxKGx4=
Subject key identifier: 82:57:7E:51:72:BB:04:94:09:CE:F4:79:91:C5:9E:F9:F3:40:85:2C
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 018CC6B824EE73FD4E0E9754766349DE0FDF
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/gld-UXK7BJQJzvR5kcWe-fNAhSw.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211007
IP address blocks: 212.6.40.0/24 maxlen: 24
185.207.244.0/22 maxlen: 24
2a10:1f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:24:ee:73:fd:4e:0e:97:54:76:63:49:de:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82577e5172bb049409cef47991c59ef9f340852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:dd:8c:f3:9a:8d:4e:39:e4:6b:2d:89:e6:
4b:1f:ea:15:82:0f:93:eb:2f:4b:2c:d2:4b:d4:a2:
05:53:95:b4:65:f8:5b:ee:3b:11:f4:6a:c9:fa:15:
10:01:ae:d2:a0:54:db:bb:c8:f6:4e:88:35:f7:04:
eb:28:4d:d3:0e:83:69:03:09:01:c9:13:fb:5c:0c:
54:3d:74:9a:cb:5d:79:24:0d:f1:8b:de:4a:f1:4c:
ac:b2:18:c7:d8:6b:91:ae:d9:d1:22:43:eb:e0:41:
93:e3:ef:31:94:c1:d6:2d:f9:a0:df:18:3a:93:04:
c9:3d:22:ae:bb:5d:4d:fb:1f:01:39:cf:29:22:a8:
8b:fe:ee:92:ea:42:e2:df:d5:05:f3:54:61:f9:db:
b1:d2:d5:65:e4:fe:7b:43:ad:7c:02:21:7e:7c:6a:
d2:f5:a3:5f:f4:8e:49:60:95:81:f2:55:36:1d:cb:
0d:e7:a8:59:70:03:be:a6:66:a3:dc:8c:e0:0a:d1:
28:43:64:cb:f0:56:18:e1:fa:e8:b9:bf:62:2a:9c:
65:ea:e5:70:8b:3c:fc:00:90:73:5e:21:4b:fe:3c:
ce:a3:5a:ac:b5:22:25:5f:8c:9d:b0:a3:85:64:a9:
1a:af:4f:33:04:a3:c0:2a:40:3b:89:53:82:2a:3a:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:7E:51:72:BB:04:94:09:CE:F4:79:91:C5:9E:F9:F3:40:85:2C
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/gld-UXK7BJQJzvR5kcWe-fNAhSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.244.0/22
212.6.40.0/24
IPv6:
2a10:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
14:af:51:70:26:2b:d0:93:38:7d:03:dc:5a:cd:25:83:06:b3:
f9:d7:e2:9f:62:cb:1a:f5:0f:60:fe:67:f9:7b:60:2e:10:f7:
20:28:1f:9d:d2:6f:15:cf:08:bc:bb:21:98:f9:8f:91:e0:4b:
26:87:50:59:7d:31:bd:8d:92:5e:f0:92:72:d6:42:84:93:72:
73:2d:a2:67:0f:59:24:35:df:ce:66:ca:aa:71:75:a8:7c:38:
aa:85:b8:f9:8b:b7:02:a3:72:17:51:43:21:a5:e2:00:b4:a4:
8b:69:97:05:2d:0c:89:57:36:9f:32:ba:87:4c:c6:3c:4e:40:
63:c6:a3:e0:ea:38:2d:14:70:78:55:cc:7f:2b:33:2d:9c:be:
9c:ee:be:31:05:5c:93:df:ec:2d:4e:da:d9:64:3a:6c:98:eb:
7a:98:ef:3f:75:30:22:3e:31:52:a5:8b:20:09:a6:93:40:05:
13:af:a0:89:21:55:d1:34:fd:24:15:e7:fd:e5:fe:ae:ed:55:
24:d5:07:66:3b:86:7a:20:6c:9f:22:09:be:b1:b9:49:ad:86:
37:d8:06:1c:c7:7d:c3:08:a6:5b:1c:8d:53:4e:a0:2d:f2:ae:
26:ab:64:03:73:97:fc:fd:0e:9e:f9:ec:c6:ec:de:6b:e7:a0:
98:46:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:47:54 2024 by rpki-client on console-ams.rpki-client.org