Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/gcDCkH1j-flr9sYW3A3CZuadLEU.roa
File: gcDCkH1j-flr9sYW3A3CZuadLEU.roa (raw, json)
Hash identifier: GBXQKPw1pUwmHqeLayw1fOJTcE9pnwcDImPHNdOz7pI=
Subject key identifier: 81:C0:C2:90:7D:63:F9:F9:6B:F6:C6:16:DC:0D:C2:66:E6:9D:2C:45
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 018E5D2A6DACA239F7E1823FB636FBA3E3BA
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/gcDCkH1j-flr9sYW3A3CZuadLEU.roa
Signing time: Wed 20 Mar 2024 18:40:45 +0000
ROA not before: Wed 20 Mar 2024 18:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60064
IP address blocks: 91.239.55.0/24 maxlen: 24
185.63.252.0/24 maxlen: 24
185.63.253.0/24 maxlen: 24
185.63.254.0/24 maxlen: 24
185.63.255.0/24 maxlen: 24
2a04:f780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:2a:6d:ac:a2:39:f7:e1:82:3f:b6:36:fb:a3:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Mar 20 18:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c0c2907d63f9f96bf6c616dc0dc266e69d2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:8d:8f:99:a3:02:4b:0f:a2:cf:f2:f6:76:
cf:67:97:64:6b:d3:33:ad:9e:03:42:f9:c7:7c:91:
4d:95:8a:93:ac:c9:da:53:ab:a6:da:a1:42:c7:8b:
d6:18:e5:a5:07:03:71:3b:0b:c4:fb:fb:9c:d7:7f:
7b:2f:5d:2c:5a:2a:36:d3:0c:1a:53:2c:0a:d6:b8:
0a:14:bc:f6:4f:cf:0f:72:71:47:61:6a:d7:46:70:
fb:91:3a:e8:2a:1f:3c:fa:9f:32:b1:0d:44:62:5d:
05:17:d7:c6:58:a4:17:74:a4:b7:28:2c:a5:8b:77:
80:7e:11:db:f9:c5:8a:02:cb:5c:fc:36:fe:8f:d0:
74:e8:dc:46:54:e4:fe:ce:e2:b6:34:75:9e:3e:ae:
15:30:82:f9:e4:cf:fd:61:33:4a:1b:30:dd:50:41:
7c:dc:d6:2a:28:e3:7f:7d:db:c0:bc:d4:7f:b2:0d:
b9:ca:08:06:19:c3:02:5f:aa:20:e0:8b:7a:eb:71:
be:9c:ff:50:66:31:10:40:9c:a8:d2:fd:f4:1e:c8:
ef:30:f8:96:c1:3b:3e:4b:79:d5:e7:ba:c5:fd:d5:
3c:2c:5b:ef:37:dd:8e:5b:05:07:d3:5a:93:5d:76:
28:2b:e9:59:37:af:7c:79:bf:c3:fc:96:b9:d5:65:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:C2:90:7D:63:F9:F9:6B:F6:C6:16:DC:0D:C2:66:E6:9D:2C:45
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/gcDCkH1j-flr9sYW3A3CZuadLEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.55.0/24
185.63.252.0/22
IPv6:
2a04:f780::/32
Signature Algorithm: sha256WithRSAEncryption
83:89:9d:7e:65:33:92:52:ac:c0:c6:69:6f:4f:e3:cc:da:dd:
ac:24:6b:93:11:03:08:eb:e3:c4:27:c1:84:ba:28:03:2e:18:
dd:51:35:c3:80:a9:07:99:2a:8e:8a:5c:86:23:92:9f:ae:6f:
21:89:b5:6a:fb:7a:83:bd:47:e4:ff:09:fb:d2:b9:7d:d6:23:
6f:02:ba:4f:6d:10:df:29:48:15:20:87:2f:58:f9:2b:2c:32:
f2:38:46:c9:76:48:56:b5:4d:07:0d:26:b5:5d:45:5e:32:33:
04:a9:19:16:2a:3e:e6:4d:d9:a1:33:a4:86:cf:2c:30:3f:d2:
3e:07:49:b0:05:1e:d7:ed:75:96:61:c9:dc:3f:a5:48:41:4f:
3d:06:2a:b9:a2:fc:c0:09:b7:e9:e6:16:1e:b7:8d:69:05:f3:
0b:0a:9f:be:d9:dc:89:6a:91:e9:43:52:a6:29:a7:c8:63:98:
c5:17:5a:3c:22:34:3b:b5:88:ff:f4:4f:28:44:a9:ae:5f:69:
c9:01:d4:2c:00:fe:dc:a7:04:96:d5:17:15:ab:d7:d3:b1:a5:
ea:0e:e3:ae:38:30:9f:d6:3c:91:47:c5:af:3a:08:2a:43:28:
96:a3:04:f4:67:44:b2:29:77:ed:ab:8c:42:a0:79:1a:26:da:
0d:0d:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:37:53 2024 by rpki-client on console-ams.rpki-client.org