Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gdP_WlXtUNlvre71GXo3uuWHW68.roa
File: gdP_WlXtUNlvre71GXo3uuWHW68.roa (raw, json)
Hash identifier: SfslHbYe33TNHmAgcnEo1HmOZsdugu2sTg/p4Kw73GA=
Subject key identifier: 81:D3:FF:5A:55:ED:50:D9:6F:AD:EE:F5:19:7A:37:BA:E5:87:5B:AF
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 018CC34951E9ADE2D873AF1EF2C166ED375D
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gdP_WlXtUNlvre71GXo3uuWHW68.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44668
IP address blocks: 185.11.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:51:e9:ad:e2:d8:73:af:1e:f2:c1:66:ed:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d3ff5a55ed50d96fadeef5197a37bae5875baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:8f:d5:93:c2:4d:45:df:52:a8:29:e3:45:
a0:6f:4d:ea:14:95:66:56:08:48:96:a4:da:e1:11:
74:a4:01:02:90:98:9e:ae:cd:99:c0:bb:96:cc:93:
20:2d:92:f6:65:03:cd:87:41:3e:d5:73:06:1c:df:
b5:3b:1c:6c:2b:66:f1:7b:65:72:a9:06:20:74:fb:
09:e0:84:06:3b:a3:e3:8f:b3:e7:14:0e:89:99:92:
e8:05:6d:93:e7:0e:b1:89:c3:42:e0:50:a3:58:69:
30:2f:b2:c6:58:64:f6:df:c5:70:c1:1e:1f:8a:f9:
36:18:e5:eb:41:69:26:51:9a:51:fc:7d:51:97:ca:
de:64:dd:dc:1d:1e:82:75:aa:0d:dc:d7:9b:f9:d7:
66:56:ae:af:a1:c2:aa:75:a3:56:07:5c:1b:e8:37:
70:39:1c:95:b3:b9:22:61:cf:32:af:10:91:52:85:
a8:93:c2:fe:ed:58:f3:8a:ba:ae:34:a7:44:ef:48:
61:1f:ca:f4:9a:c6:bb:2b:82:aa:f5:ff:58:9c:f4:
8f:fa:de:28:d3:9c:46:81:29:74:dc:4a:6b:c8:04:
59:62:87:9a:52:6f:71:c8:98:b4:b7:de:02:2d:95:
28:ef:2a:6c:1e:d4:bd:dc:b1:a4:d7:35:3f:df:bb:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:FF:5A:55:ED:50:D9:6F:AD:EE:F5:19:7A:37:BA:E5:87:5B:AF
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gdP_WlXtUNlvre71GXo3uuWHW68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
28:2b:ff:98:90:6f:a9:85:ac:bb:51:15:67:d8:a9:19:f4:58:
b2:87:2e:c5:47:2a:7f:13:f3:13:56:a2:7b:9a:c3:59:02:04:
48:1c:94:b4:be:b1:7f:7a:c1:92:a1:98:6c:22:2e:96:eb:20:
4f:91:02:02:db:e7:7f:39:6e:29:7b:70:75:8a:ea:d7:dc:33:
0a:26:85:41:14:62:6d:99:93:5a:11:d9:60:ba:75:ea:d0:3c:
9d:f7:65:73:80:3c:5e:df:96:64:13:99:f4:95:25:71:23:7f:
92:03:7e:f3:52:04:91:0d:b4:62:52:6d:09:40:e0:58:c0:9c:
4f:83:b9:32:d1:99:db:b9:83:2b:60:e1:d2:f1:da:a7:7d:21:
44:85:13:48:70:be:fc:f7:51:e0:2f:ff:e1:e4:5c:ea:26:8f:
20:55:ca:2d:82:78:c4:87:aa:58:9c:31:10:e2:b1:cd:ca:50:
93:e9:0a:ad:5c:e4:44:b4:bb:53:55:80:02:6d:39:bb:30:91:
d0:d5:58:89:f4:01:bd:d7:0c:28:4f:13:45:61:86:ff:66:5d:
85:32:f3:40:2d:3f:1d:06:80:f2:bb:d9:dc:2c:9e:59:8e:dd:
ec:79:78:24:c9:92:5a:2c:f2:ad:58:6f:1d:58:75:83:e2:52:
56:b8:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:05:26 2024 by rpki-client on console-fra.rpki-client.org