Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/GBDoXNdNdQUPNr8-Usdh3vCWUWk.roa
File: GBDoXNdNdQUPNr8-Usdh3vCWUWk.roa (raw, json)
Hash identifier: xlhwEd6DynmpmUZ1TNqCpT1QwgyqBe+K5SgTJD6EJWE=
Subject key identifier: 18:10:E8:5C:D7:4D:75:05:0F:36:BF:3E:52:C7:61:DE:F0:96:51:69
Certificate issuer: /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial: 018E38FB1E80C313834FE5D587B04DE4C6BC
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/GBDoXNdNdQUPNr8-Usdh3vCWUWk.roa
Signing time: Wed 13 Mar 2024 18:02:45 +0000
ROA not before: Wed 13 Mar 2024 18:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49990
IP address blocks: 193.104.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:fb:1e:80:c3:13:83:4f:e5:d5:87:b0:4d:e4:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
Validity
Not Before: Mar 13 18:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1810e85cd74d75050f36bf3e52c761def0965169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:4b:05:68:57:7f:5f:12:79:b1:ac:a6:c3:
b8:01:7e:89:4e:42:8f:5a:d8:5a:7e:42:b8:f2:66:
25:76:d2:d8:e2:89:4e:d0:5e:76:a3:9a:3b:00:9d:
cb:3d:56:3e:75:af:3f:14:d2:0b:1c:84:43:b6:61:
77:b8:95:3d:90:37:6f:33:d6:f5:d5:a1:41:97:38:
d7:cf:73:08:b1:08:03:27:b3:49:49:94:42:d6:62:
2b:ae:ee:7e:73:c7:7d:94:76:f1:f2:60:27:e3:26:
a8:00:63:09:ab:55:a3:70:0d:9a:8c:d6:5c:4f:a1:
f5:df:28:c8:d9:e1:54:75:78:6b:96:5b:cf:df:89:
48:76:c4:69:47:61:74:76:cc:1b:5d:fd:83:1a:83:
7c:4f:d6:18:e7:67:5b:5c:1d:e3:b7:73:07:39:34:
fa:70:21:51:59:e4:9a:62:11:83:5f:3d:7f:22:93:
5c:e2:6a:35:20:28:6f:fe:f3:a3:79:8a:c7:71:55:
71:1e:b4:59:0b:9d:8e:14:40:4b:bc:4e:57:0c:f1:
82:b7:70:ac:7c:d5:c8:a6:84:a8:3c:99:5a:6d:84:
b2:4f:53:dc:8b:cf:05:61:7c:b3:21:12:71:92:11:
38:ae:ed:36:dc:4e:f7:ce:ae:f8:47:95:2f:4e:3d:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:E8:5C:D7:4D:75:05:0F:36:BF:3E:52:C7:61:DE:F0:96:51:69
X509v3 Authority Key Identifier:
keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/GBDoXNdNdQUPNr8-Usdh3vCWUWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.73.0/24
Signature Algorithm: sha256WithRSAEncryption
65:98:f1:e7:95:5e:04:70:e1:be:cd:85:2a:02:80:7b:9a:98:
a2:0d:94:49:ef:19:33:db:85:35:ac:54:e2:07:bd:d1:57:ea:
85:3a:d8:7a:16:34:c0:02:f3:5a:71:d7:55:81:c1:63:e7:15:
75:73:d0:76:a2:8d:9b:56:da:32:47:19:9c:bb:5e:a2:b7:9e:
50:17:45:e7:c6:8f:dd:0e:40:68:77:b0:a6:5e:0b:c2:1c:36:
e8:76:f3:2f:8f:ca:10:dc:07:29:0e:3c:a3:5e:5f:e6:42:6b:
52:bb:d6:7e:1e:7c:32:cc:cf:a7:8a:4f:4f:4a:13:f5:23:df:
7f:ea:e8:fd:bb:ed:11:b8:69:7b:b9:74:2c:6b:d3:f2:20:cb:
3e:f3:2e:e5:8a:f4:3a:56:b1:ae:b2:79:33:7b:df:e5:d5:e3:
e4:a4:db:00:0e:4b:44:68:12:f4:dd:b0:b3:1f:5a:b3:29:a4:
6c:ed:79:e7:e1:0b:19:3a:66:62:c4:0a:3d:94:e8:35:28:d4:
27:6c:13:9f:a2:81:e7:0d:e8:52:77:ad:fd:e5:89:6f:9f:75:
80:a5:f5:ce:a2:8a:02:73:0f:85:bc:43:4b:8f:d3:b6:db:9e:
59:86:3e:bb:de:34:d9:22:84:c9:39:b6:7d:d2:ae:2a:09:58:
25:f1:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:41:30 2024 by rpki-client on console-fra.rpki-client.org