Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/gcdAImjELBoGMV8dUO9IlEQdUgI.roa
File: gcdAImjELBoGMV8dUO9IlEQdUgI.roa (raw, json)
Hash identifier: tfjnWIVKL9KPsIMOEFUwEZb+DeCxqxis7XJ1CMT3CbQ=
Subject key identifier: 81:C7:40:22:68:C4:2C:1A:06:31:5F:1D:50:EF:48:94:44:1D:52:02
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 019197788109D6E956A3945BE59183732CAA
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/gcdAImjELBoGMV8dUO9IlEQdUgI.roa
Signing time: Wed 28 Aug 2024 05:32:22 +0000
ROA not before: Wed 28 Aug 2024 05:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212341
IP address blocks: 2.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:78:81:09:d6:e9:56:a3:94:5b:e5:91:83:73:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Aug 28 05:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c7402268c42c1a06315f1d50ef4894441d5202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:3e:53:22:2b:58:d4:94:d3:94:07:a9:35:
e9:2c:d5:cb:47:9d:f1:14:3b:82:00:cc:4f:d4:dd:
96:1f:8a:00:b2:bb:ae:c2:bf:67:4a:47:74:45:72:
e8:84:b0:4d:6a:91:d5:a1:4d:dc:9a:76:3c:72:07:
48:01:9a:56:49:bd:ff:2a:c3:82:ce:f4:05:50:17:
8e:db:c8:a4:41:31:21:40:63:94:bc:2e:85:8d:45:
c3:44:1c:2d:1a:7d:2c:d0:3e:eb:83:38:71:3a:e5:
da:16:f8:83:aa:9e:16:1b:25:42:76:c8:58:03:ff:
7c:64:48:62:34:5c:bb:01:c2:7c:5c:40:66:13:59:
72:bb:ed:8a:57:23:62:58:b2:07:89:ba:c3:ec:bc:
77:9a:b2:fc:65:92:12:03:98:c9:07:79:79:24:c9:
e5:9a:38:b1:89:0b:f8:e4:f4:8c:3c:a5:8b:cc:03:
52:85:76:3b:24:51:5f:67:97:c6:5c:0c:5b:42:7f:
a4:5d:14:26:be:d8:73:0c:c2:9d:31:71:16:44:1b:
65:ca:e9:c0:6c:b4:8e:4f:b6:81:c3:76:80:23:18:
68:85:4f:ce:4e:d7:a5:60:2b:45:40:dd:55:89:49:
75:0b:22:2d:f2:9f:ab:88:c9:43:f2:04:97:99:6b:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:40:22:68:C4:2C:1A:06:31:5F:1D:50:EF:48:94:44:1D:52:02
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/gcdAImjELBoGMV8dUO9IlEQdUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6e:aa:2d:e9:39:67:fc:8e:d2:d9:47:2e:d2:c7:e9:c3:69:
ef:b8:3e:25:05:1a:99:ea:ea:e6:bd:ec:40:7d:8b:e7:48:ef:
5c:99:56:0d:01:9e:c1:3e:f9:9b:9b:f5:fc:1d:ed:59:55:9c:
00:33:f6:27:1b:54:19:c4:e2:c1:6f:52:de:45:e7:aa:22:64:
94:0c:ab:30:93:af:8f:03:d0:80:2f:15:43:bb:3c:26:13:9e:
6a:db:38:8c:2a:cb:74:5c:e7:60:bc:11:57:29:cf:3b:ec:2a:
39:b1:5b:50:31:1f:e8:32:fe:af:77:4a:0a:22:eb:4d:b2:e9:
7b:b8:49:2c:75:32:ec:1e:44:c1:21:67:72:82:94:c4:af:d3:
8f:4b:f8:8c:4c:ef:c6:7b:51:fa:33:3e:a7:ed:95:53:7e:e2:
43:18:a0:66:8e:03:4e:5a:5a:e6:59:6e:99:97:d4:91:11:20:
d3:b8:b9:75:de:6a:01:20:11:01:94:63:57:d3:59:34:66:72:
2c:25:cc:bd:55:dd:35:5e:d7:68:8c:84:67:c3:d5:ff:f4:cb:
0c:65:7a:c2:88:a1:52:d4:95:fb:91:51:80:e4:1b:75:cb:1d:
ac:df:54:18:a0:51:f0:dc:4c:a8:6e:91:05:ff:26:d5:d7:45:
ac:87:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:06:37 2024 by rpki-client on console-fra.rpki-client.org