Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gzovzl1StKae95ZyrzyA3zvK-LU.roa
File: Gzovzl1StKae95ZyrzyA3zvK-LU.roa (raw, json)
Hash identifier: /BCsPdgBRkPvUlUAU1Atywxj6ngDpj24847zlhSEZfc=
Subject key identifier: 1B:3A:2F:CE:5D:52:B4:A6:9E:F7:96:72:AF:3C:80:DF:3B:CA:F8:B5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955A3731870276CE6EC488D06D9511
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gzovzl1StKae95ZyrzyA3zvK-LU.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57646
IP address blocks: 86.107.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5a:37:31:87:02:76:ce:6e:c4:88:d0:6d:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3a2fce5d52b4a69ef79672af3c80df3bcaf8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:a7:04:c4:42:ad:54:4b:cc:fd:18:d4:50:
74:9a:97:a9:30:f3:a5:5b:b0:64:d5:3c:58:77:3e:
3a:c2:ac:d9:4d:b0:be:7e:12:42:4d:62:e5:b4:d4:
9e:5c:2c:63:54:63:93:3a:97:b5:f4:73:c0:99:c2:
73:61:3c:f9:e7:5b:f7:6a:61:71:8a:96:83:4b:a2:
28:8d:66:9d:dc:eb:0b:f1:40:8d:75:7f:17:b2:7b:
19:25:f2:72:17:ee:b4:7f:3b:f0:36:7b:03:6f:37:
64:0f:98:4b:2f:a7:18:24:d7:fe:b0:e6:7c:e1:e2:
80:c5:3c:29:58:c8:bc:3b:ad:6e:d1:fb:1b:50:3f:
2a:78:b1:8b:76:58:64:47:ae:c9:5c:5d:22:b3:4e:
fc:19:e1:25:f4:84:64:58:b3:77:fc:bc:66:dc:fd:
1c:48:d2:c1:d3:70:a4:55:67:ed:8c:97:1c:04:97:
32:40:d6:96:34:d9:35:19:ed:57:04:6e:a6:85:a6:
5b:3f:fe:cd:92:27:e6:c3:b8:49:a8:74:54:10:04:
8e:1d:93:db:3f:da:4a:e1:38:95:f2:24:15:53:d6:
63:d8:d9:36:c6:af:12:c4:c5:7b:ea:10:1b:a4:e9:
b2:a0:60:3f:d9:e7:24:d8:6e:85:eb:45:25:9e:24:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:2F:CE:5D:52:B4:A6:9E:F7:96:72:AF:3C:80:DF:3B:CA:F8:B5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Gzovzl1StKae95ZyrzyA3zvK-LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.185.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:ee:7d:9c:1d:7c:74:d6:ae:17:1e:31:9f:0c:7c:08:cf:
2f:79:2d:97:41:fd:3d:9e:3e:94:37:ba:8d:8f:45:d4:f7:76:
16:8d:84:cd:6f:13:b9:8c:35:09:91:be:9a:f7:f1:67:42:ed:
bc:b8:39:7a:bc:64:f2:88:8e:fe:14:e7:e9:78:21:d5:bf:be:
59:18:d3:6c:85:95:d0:ce:04:1c:0e:a5:bc:f0:4e:7a:bf:8d:
9d:11:67:2e:e9:ce:68:f5:e0:5e:73:50:08:ff:58:99:05:cc:
24:91:52:06:b9:5e:b7:82:1c:0a:9e:f6:4f:69:5d:66:2a:17:
08:11:5d:ff:a6:fe:46:7e:69:98:18:d4:26:13:92:c3:1e:f4:
1e:1b:3e:f9:83:05:8a:b3:e3:af:d9:93:ad:24:9f:24:fb:8b:
60:6f:1d:08:ba:74:22:82:ca:a7:52:b2:0c:74:42:cd:3a:12:
52:8f:23:56:00:9e:84:53:16:5d:c5:b1:ed:4b:f6:9a:1b:5e:
2a:23:3d:1e:3d:d2:4f:f2:74:4f:84:a6:d2:b2:2f:20:82:19:
71:5a:01:46:a9:52:02:6e:46:a3:d2:3d:47:5e:3f:6d:ab:14:
9d:69:dc:bc:dc:6a:3a:a4:31:a9:e4:ba:08:30:dd:4f:ee:b0:
97:70:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:36:59 2024 by rpki-client on console-fra.rpki-client.org