Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/gBmDsJa9GGkokxLAk2d4GQIqq14.roa
File: gBmDsJa9GGkokxLAk2d4GQIqq14.roa (raw, json)
Hash identifier: aw2r36sx0ng+vxgNNGx3AtTsvibpKEbBap+MmysWyp8=
Subject key identifier: 80:19:83:B0:96:BD:18:69:28:93:12:C0:93:67:78:19:02:2A:AB:5E
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 018CC56E1DBA8CB089B339EA9DA93D5FAB2C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/gBmDsJa9GGkokxLAk2d4GQIqq14.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42947
IP address blocks: 213.181.78.0/24 maxlen: 24
213.181.78.0/23 maxlen: 23
213.181.79.0/24 maxlen: 24
176.57.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1d:ba:8c:b0:89:b3:39:ea:9d:a9:3d:5f:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801983b096bd1869289312c093677819022aab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:ef:23:57:e9:41:a7:47:0d:fe:0e:0e:b9:
e5:02:d2:ee:09:3b:ea:68:64:18:95:dd:98:d3:44:
89:b0:a8:f5:49:e5:c8:ae:ab:b6:6b:34:55:a2:53:
bf:df:f1:f9:3a:b4:03:49:1e:ed:37:7a:e3:f5:01:
fc:f1:60:81:e4:88:27:12:b1:c5:78:43:73:ec:c4:
84:cf:79:b5:ff:37:55:23:31:ec:e8:9e:6b:d1:6e:
e9:2c:23:c3:57:7a:c5:55:fb:1b:44:b6:84:98:6d:
86:df:94:26:a5:cf:b1:61:71:73:b4:72:74:23:8c:
41:ac:8f:a4:76:b0:ef:e8:e9:8e:c2:ba:5d:db:5c:
f7:3f:36:0f:6d:69:e3:c7:c5:5b:9d:5a:d9:9b:7d:
11:9b:cd:f4:23:96:66:72:3a:fd:3b:bc:e4:4b:34:
ea:2d:2d:23:15:51:2e:bb:71:d9:df:7a:a7:68:2a:
7d:6e:b9:91:53:97:35:58:56:58:9e:74:4f:01:a5:
c1:f4:da:44:8a:2d:ac:3c:d8:25:72:fc:39:b9:e6:
6b:29:d6:4e:0f:fb:bd:25:81:e8:04:ee:12:fc:47:
12:dc:2f:32:16:19:9d:70:3d:f1:55:e5:16:f9:23:
b7:01:65:a6:4b:4e:83:21:ec:4b:3d:c8:b4:2f:85:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:19:83:B0:96:BD:18:69:28:93:12:C0:93:67:78:19:02:2A:AB:5E
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/gBmDsJa9GGkokxLAk2d4GQIqq14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.98.0/23
213.181.78.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:4b:17:3e:a1:09:f5:d7:ea:ba:c7:fb:2d:0d:70:af:f3:f1:
36:f6:dc:39:ac:05:f8:23:70:e2:1a:41:54:fd:36:87:65:4d:
db:9b:88:03:62:a7:a9:a1:a4:05:e9:24:b8:a3:a1:46:12:0e:
d5:61:72:39:b9:7e:19:d9:33:be:54:1a:7e:cc:6e:3f:b1:bd:
f2:e2:11:03:56:54:b8:e5:00:af:8d:3b:93:c3:8c:e3:0b:6e:
e9:5c:e3:a1:90:d3:f0:81:33:4b:99:e0:78:fd:2c:55:38:6e:
00:db:ae:6b:cf:54:79:0c:6d:fb:64:8f:63:ba:c2:58:d3:7b:
46:97:8a:67:4b:34:2a:e5:4d:53:d8:13:d9:a9:89:10:0c:e9:
6c:74:7b:2c:0b:8e:f0:8f:73:e8:a9:9c:9b:8d:0f:7c:d4:22:
75:60:7a:3b:2b:c1:17:5c:43:7a:92:88:6f:4a:23:79:67:0c:
16:74:5e:27:8f:ba:c2:2a:4f:d7:b9:f1:ee:cc:bb:ff:c4:ea:
44:c1:83:b1:4d:98:18:27:f6:3a:3c:96:d9:7c:92:27:40:24:
5e:61:58:19:b6:51:fa:00:85:31:f3:dd:e3:dc:66:3a:da:a0:
b9:c6:8b:87:af:48:6c:56:56:c3:c3:ac:16:d2:d3:a3:d3:7e:
61:82:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:45:09 2024 by rpki-client on console-ams.rpki-client.org