Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVQ7yVEnB5zGtJssb6XNbidzcLk.roa
File: GVQ7yVEnB5zGtJssb6XNbidzcLk.roa (raw, json)
Hash identifier: zKpglyGxg8KYqMsj51OM9RX8UYUyTzhPMNyRGYkaHik=
Subject key identifier: 19:54:3B:C9:51:27:07:9C:C6:B4:9B:2C:6F:A5:CD:6E:27:73:70:B9
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018CC86F2654E0E03B0C6799A9E32BFC8EFC
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVQ7yVEnB5zGtJssb6XNbidzcLk.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 94.26.89.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:26:54:e0:e0:3b:0c:67:99:a9:e3:2b:fc:8e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19543bc95127079cc6b49b2c6fa5cd6e277370b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:b2:4b:7c:4f:55:fc:b1:fd:b4:62:f1:97:
42:8d:37:4d:e9:f9:52:3b:0e:22:ba:d5:b8:ab:51:
df:3c:c9:5c:6f:ac:89:20:80:47:84:05:c0:28:13:
2b:85:7e:ac:71:88:01:7f:4f:5c:f5:3a:98:12:ac:
1d:1a:98:98:01:50:3b:63:dc:8e:f0:e5:f0:a6:85:
f7:64:3d:74:e2:71:0f:e3:00:29:0f:5d:54:a4:11:
28:18:5c:59:65:9e:37:70:8b:11:c5:66:b0:09:dd:
48:6b:3d:86:46:c5:0e:39:5d:84:57:b2:b9:76:07:
7e:a5:b1:6a:24:b8:13:01:25:b2:37:c9:6c:ef:2b:
0a:fe:3e:08:c6:51:5e:05:e7:bf:22:35:a3:04:e2:
eb:d1:fa:92:71:27:3c:48:5f:31:49:39:0e:f7:16:
b2:3d:67:13:60:71:92:08:bc:d4:4f:f8:1f:4d:e6:
d6:d2:5c:86:02:7b:43:8b:52:09:95:42:aa:99:7b:
75:e5:29:0a:5b:6a:a2:e9:ab:c6:4e:b3:46:d9:12:
34:32:e0:8e:27:0e:60:0c:fd:2f:5e:f8:45:73:f9:
d5:c8:41:03:f2:ff:a1:ca:4a:77:31:58:85:13:a5:
c7:65:2b:13:18:ca:04:30:02:ed:6e:13:1c:7d:fe:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:3B:C9:51:27:07:9C:C6:B4:9B:2C:6F:A5:CD:6E:27:73:70:B9
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVQ7yVEnB5zGtJssb6XNbidzcLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.218.0/24
93.152.222.0/24
93.152.226.0/23
94.26.89.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:70:87:fe:9e:c4:13:a7:c7:d0:c8:1c:72:fa:41:cd:27:
c5:ee:5a:07:ac:9f:26:17:48:a0:10:4f:77:e5:f6:91:c3:7e:
30:6f:4f:e4:50:1b:fc:3c:2d:3b:19:4d:95:19:08:6d:4a:de:
3e:a1:bc:84:7b:8d:b8:13:ad:72:e9:4d:0e:0a:e1:49:0f:e4:
a5:e1:60:0c:61:ea:fa:3c:1b:d8:21:6b:a2:53:7a:ce:7f:a2:
a9:ee:53:35:ee:83:23:30:8f:3e:f1:e3:b7:54:cf:e6:e5:22:
e4:29:d4:a9:2d:1e:ad:98:9a:7c:50:35:f7:2c:fd:a0:42:40:
50:5d:ff:f8:40:95:55:23:55:13:7a:25:96:1f:cf:6e:1b:56:
5d:fd:97:07:99:00:ce:60:46:71:60:3d:08:a2:7e:bd:27:cf:
8b:a6:a9:f6:43:22:7c:4c:a4:36:d2:d5:e6:f1:1c:94:b8:24:
fc:67:19:78:df:94:f3:d3:ab:0b:24:26:f9:67:e0:4d:0f:05:
2d:25:12:19:16:b7:98:46:d8:00:bb:b7:f4:ac:36:e0:f3:5e:
21:d4:c8:f9:72:cc:3f:5b:19:5c:b2:1f:6b:8e:19:67:c7:33:
2a:91:b8:85:a2:3f:ba:76:f4:88:63:b0:45:50:ae:72:fd:d6:
0f:d3:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:24:54 2024 by rpki-client on console-fra.rpki-client.org