Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/gvk0M31K5R27d5ekxKAEjHyLeks.roa
File: gvk0M31K5R27d5ekxKAEjHyLeks.roa (raw, json)
Hash identifier: afGg9kUoiBa/+OV3fg/P3pDy3AMc9zi0jJrKm2NN9GA=
Subject key identifier: 82:F9:34:33:7D:4A:E5:1D:BB:77:97:A4:C4:A0:04:8C:7C:8B:7A:4B
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 018CC349462C64B71A16BD835AE0C86AFC85
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/gvk0M31K5R27d5ekxKAEjHyLeks.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204440
IP address blocks: 185.248.248.0/24 maxlen: 24
185.248.248.0/23 maxlen: 24
185.248.251.0/24 maxlen: 24
185.248.250.0/24 maxlen: 24
185.248.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:2c:64:b7:1a:16:bd:83:5a:e0:c8:6a:fc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f934337d4ae51dbb7797a4c4a0048c7c8b7a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:4f:23:0b:4c:13:ba:a5:a5:ca:39:7d:e8:
cd:4c:c1:c9:a9:b2:11:fc:08:14:04:a8:1f:af:59:
64:8c:91:d8:eb:c4:b8:4d:b1:8c:25:19:63:87:8a:
12:1c:b4:65:51:16:85:5a:81:e3:b0:3e:76:3f:63:
11:9d:e1:6e:6a:a1:eb:0d:60:6f:79:06:91:f0:26:
78:8c:b9:ba:e1:c9:ed:87:ae:4e:09:1b:4b:3e:d5:
1e:9a:51:8d:24:76:cc:ae:0f:51:ab:cd:f5:83:c4:
fb:73:a6:39:f5:e4:19:f6:05:a0:b9:93:ee:4f:fc:
e3:b5:52:b7:45:b2:e3:37:2e:08:95:6a:3b:77:3d:
48:a9:bf:3b:7e:8d:80:15:67:37:dc:c5:9d:97:7a:
93:eb:d1:b3:10:1a:21:e5:4a:69:ab:25:98:db:1d:
ed:00:ad:76:c8:fd:d6:c4:08:3b:d5:f0:e6:e7:13:
f2:51:9b:fc:48:10:1b:ff:ff:b8:ef:de:35:ef:b5:
73:0b:56:e6:0d:2d:89:74:72:a2:e0:eb:8f:71:3f:
dc:8b:ee:fa:bf:1c:51:dc:f3:88:c4:98:47:a1:4d:
52:4a:46:d2:90:2b:58:eb:12:9c:25:4d:0d:8c:c9:
1f:65:48:fc:24:31:12:25:06:ca:85:17:74:4d:36:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:34:33:7D:4A:E5:1D:BB:77:97:A4:C4:A0:04:8C:7C:8B:7A:4B
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/gvk0M31K5R27d5ekxKAEjHyLeks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:8d:c3:61:2e:cc:c3:e3:77:95:53:76:28:cf:ff:25:c3:3c:
72:35:38:5a:c8:f6:9f:41:76:91:c9:79:f2:de:fa:25:2e:85:
f1:4d:2d:f8:42:c4:a6:11:68:dc:22:42:62:88:26:8d:ca:82:
7e:96:82:ad:a3:e2:9c:64:72:07:1d:1f:64:60:19:ee:69:3c:
5c:ee:53:81:16:4e:f8:5a:cd:01:15:c9:d1:88:a4:a2:99:4b:
b5:34:7b:70:81:ec:10:41:b9:aa:b0:fe:85:21:bf:1a:38:ac:
b2:53:a2:58:79:a5:ab:83:1d:1e:ad:4d:ba:07:cc:e0:d2:e4:
bd:b3:94:e6:07:6f:06:e0:6e:39:6e:9c:4a:f9:7e:c9:a6:6c:
ff:7f:70:68:d6:a5:e5:a3:42:08:19:d1:90:e8:de:06:d9:b8:
38:a8:9f:ec:12:55:95:b9:b3:1d:0c:80:6f:26:fb:1e:43:42:
bf:33:be:b5:e7:b5:f3:4c:7e:41:78:11:85:6d:6d:fb:92:aa:
ea:5d:8b:37:4c:d6:88:09:ce:60:93:53:f6:8f:fb:9f:23:73:
7e:46:83:7b:1a:ca:ea:23:90:13:ce:5a:5e:e0:d0:b7:f4:5f:
dd:38:ee:7f:0f:58:7a:84:e0:61:2c:dc:b9:73:fb:06:7d:60:
a6:e7:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:03:20 2024 by rpki-client on console-fra.rpki-client.org