Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/GVNJhF-wiO7QEgdiCx4ycOoGKuA.roa
File: GVNJhF-wiO7QEgdiCx4ycOoGKuA.roa (raw, json)
Hash identifier: Qn10mfvjYpxG6isoA3+2wpYv50KFY1PEB23wY7dnTho=
Subject key identifier: 19:53:49:84:5F:B0:88:EE:D0:12:07:62:0B:1E:32:70:EA:06:2A:E0
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 01922DF820B78D35BCAF9C380B1E2F946E16
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/GVNJhF-wiO7QEgdiCx4ycOoGKuA.roa
Signing time: Thu 26 Sep 2024 10:54:48 +0000
ROA not before: Thu 26 Sep 2024 10:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205831
IP address blocks: 185.210.208.0/22 maxlen: 22
185.210.210.0/24 maxlen: 24
2a0b:2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:f8:20:b7:8d:35:bc:af:9c:38:0b:1e:2f:94:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Sep 26 10:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=195349845fb088eed01207620b1e3270ea062ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:7d:b3:46:2b:d8:3c:6c:31:84:97:70:42:
65:7f:a0:44:21:ae:5c:ac:17:58:13:57:31:b8:05:
0b:a4:b2:c0:78:ec:52:80:66:5e:4e:81:f8:78:2a:
33:1c:9d:35:b1:2f:36:4a:11:d0:6f:6b:58:60:a3:
4f:5a:8d:57:da:0c:3f:94:00:f9:35:07:ad:8e:76:
68:c4:d0:31:e7:0c:ff:a1:c1:08:36:c1:05:ec:f9:
8d:f5:91:1e:6f:b3:63:96:88:45:9d:08:e6:eb:e8:
2e:71:14:bd:fb:a6:11:59:1e:56:8b:39:bc:7b:a9:
fa:11:4d:5c:c8:60:3e:85:66:5c:2f:88:7e:ce:60:
c4:62:bc:93:41:f7:8a:32:28:d2:6f:b9:7f:8a:3a:
73:df:2c:5e:1e:48:62:f8:68:f9:af:88:be:06:3e:
14:cf:51:70:1b:f0:dc:80:82:06:38:95:7b:c8:c1:
39:2c:65:eb:e7:fb:e3:f8:42:67:2d:04:12:86:57:
bc:16:86:23:8d:7b:fb:56:19:a0:35:84:fc:1e:94:
3b:32:e0:32:8c:8b:5c:bc:0f:6c:61:2e:4c:99:11:
ee:ef:14:a9:98:05:fb:7f:c2:ba:4b:70:08:3c:d1:
88:8e:db:82:19:af:e8:f4:ac:d4:44:eb:bf:63:ef:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:49:84:5F:B0:88:EE:D0:12:07:62:0B:1E:32:70:EA:06:2A:E0
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/GVNJhF-wiO7QEgdiCx4ycOoGKuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.208.0/22
IPv6:
2a0b:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:f5:5e:2d:3e:ca:db:15:76:3f:d0:01:5f:88:9f:9f:8b:1b:
6c:72:b3:79:64:eb:8f:4b:fa:83:7a:67:2e:09:27:04:68:ad:
3b:58:6d:95:c9:13:a2:53:df:58:53:ef:d2:33:c6:89:e9:bd:
32:99:dc:70:f5:54:17:24:e9:f0:9d:6b:5b:f7:68:4e:7d:27:
13:f9:ad:00:34:e5:16:97:32:f3:a4:1f:1e:cb:ed:62:06:7a:
f3:97:00:56:41:3a:82:b6:9d:70:3c:bb:6e:cb:f6:c8:d6:4d:
59:fc:eb:4d:64:5b:a3:22:d3:61:c1:0c:31:f7:e4:7c:28:e0:
eb:7a:3c:00:a3:fc:e9:74:96:12:88:86:a3:ef:c8:c9:6b:12:
75:80:b5:2a:31:22:1f:a6:2b:85:f7:31:58:7a:1d:2e:92:e9:
70:9e:14:cf:7a:6a:bb:f9:58:d1:e6:98:6a:66:24:37:ff:4b:
4f:8f:10:61:99:f9:fd:0a:4f:b1:da:22:e1:be:90:dd:5c:02:
3f:de:3b:ae:a6:3f:26:c2:fb:31:24:2b:5c:79:1d:fb:33:b8:
0d:85:75:08:e9:17:cf:a5:33:43:31:62:76:0b:d9:27:3f:3c:
1d:88:91:4f:41:aa:b6:ec:e6:28:32:38:96:c5:f1:a4:8b:ca:
98:b9:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:25:20 2024 by rpki-client on console-ams.rpki-client.org