Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/1-GVEqnOf59Q4miN7arDubSayAwA.roa
File: 1-GVEqnOf59Q4miN7arDubSayAwA.roa (raw, json)
Hash identifier: t/25PbUeMaA4of5FKDZqt+CEO+Fbno/VDo4rgM6L0UY=
Subject key identifier: F8:65:44:AA:73:9F:E7:D4:38:9A:23:7B:6A:B0:EE:6D:26:B2:03:00
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 018CC8708EFC9D67B44D07BAFB1E6D120706
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/1-GVEqnOf59Q4miN7arDubSayAwA.roa
Signing time: Tue 02 Jan 2024 04:31:08 +0000
ROA not before: Tue 02 Jan 2024 04:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198227
IP address blocks: 91.232.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:8e:fc:9d:67:b4:4d:07:ba:fb:1e:6d:12:07:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Jan 2 04:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f86544aa739fe7d4389a237b6ab0ee6d26b20300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:42:a8:0f:12:f9:ac:42:13:e9:24:00:81:
3e:3d:10:8c:e0:ac:ea:6a:fe:6c:87:d6:d2:89:2c:
3c:42:fa:1f:e1:18:34:e4:13:5f:bd:96:1f:b6:ab:
ae:d3:bf:95:4e:1e:27:2c:83:64:ac:43:da:f3:e1:
c1:82:20:01:fc:82:59:b3:ad:40:1b:8c:34:3d:a4:
94:a2:93:d7:f9:5b:b0:84:e1:3b:5d:f3:24:cb:80:
7a:0f:1d:45:17:23:4d:0a:77:9f:c3:ad:0a:66:20:
c2:c3:3d:a0:eb:c1:79:db:60:3a:86:a4:5b:b4:fb:
be:de:88:95:ee:26:12:5c:a6:2d:38:66:8e:8a:c4:
6a:01:5f:85:c1:20:20:47:20:e6:70:73:bc:b9:55:
63:6a:4b:90:ac:0b:d1:08:c6:57:29:3a:07:3f:41:
ac:7d:b2:a4:55:de:fe:b6:f8:37:ae:af:17:5d:30:
b2:2f:71:3d:0f:16:75:df:23:da:89:21:7b:6c:3a:
fa:db:d2:35:bf:44:b9:3f:e2:92:52:2e:42:c8:f2:
ed:fc:03:94:2a:dd:fd:d6:0a:64:ce:87:e4:16:78:
9b:03:4f:88:4c:9a:d8:f8:0c:73:93:90:db:61:5e:
23:e7:31:6d:7d:c4:05:47:fb:c7:ab:26:be:30:af:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:65:44:AA:73:9F:E7:D4:38:9A:23:7B:6A:B0:EE:6D:26:B2:03:00
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/1-GVEqnOf59Q4miN7arDubSayAwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.158.0/23
Signature Algorithm: sha256WithRSAEncryption
88:82:9e:8d:90:2c:4d:05:01:87:7f:ed:a8:3c:0d:1a:0e:f9:
d4:21:07:bc:08:f3:69:d3:46:c1:7a:52:b6:52:07:b9:f1:c4:
32:a7:97:f8:f7:da:b3:38:43:e0:96:de:c9:1f:2c:f9:60:a4:
14:11:0f:92:ee:0e:dc:ee:62:f1:e2:82:0c:81:7f:49:3c:6d:
7a:0c:03:f3:6c:fb:25:1b:17:19:aa:68:60:8a:95:a3:a8:2e:
43:28:ee:e8:46:60:37:76:40:d8:1b:db:2a:37:3c:4a:ae:d5:
86:38:ba:c8:e7:77:69:65:c8:0a:d5:47:53:50:11:5d:26:60:
42:93:5d:ae:59:c6:e8:28:f4:38:a2:6d:bf:76:14:73:54:91:
7c:fc:b6:bf:5d:70:1e:8a:fc:02:9a:8f:97:22:39:6e:83:1a:
f2:c2:c7:ac:da:07:e3:ab:60:be:27:a4:a6:42:4d:e1:e9:c9:
a4:ff:cc:23:71:74:e9:94:aa:d1:15:de:dd:4a:5f:dc:14:9a:
ea:7a:c9:64:a2:85:ec:7a:e1:64:04:9f:09:3b:a8:5a:dc:ed:
6e:2a:b3:bd:92:56:bf:4d:df:8e:5c:6e:fd:17:41:09:6f:77:
ca:c5:53:c2:6f:8c:de:d4:65:8f:9b:b0:4e:29:9b:5b:be:5b:
e8:d1:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:26:52 2024 by rpki-client on console-fra.rpki-client.org