Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/Gv0yz1ypAuPzcPi0aDKrWMmxU-s.roa
File: Gv0yz1ypAuPzcPi0aDKrWMmxU-s.roa (raw, json)
Hash identifier: dEX04OZRtG5sFqJEX6g9WsApWVCsd7iy7t7PiOL54l8=
Subject key identifier: 1A:FD:32:CF:5C:A9:02:E3:F3:70:F8:B4:68:32:AB:58:C9:B1:53:EB
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 018CC56E9C85F895B04B945F03479BD0CFE6
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/Gv0yz1ypAuPzcPi0aDKrWMmxU-s.roa
Signing time: Mon 01 Jan 2024 14:30:09 +0000
ROA not before: Mon 01 Jan 2024 14:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213231
IP address blocks: 194.48.191.0/24 maxlen: 24
194.45.217.0/24 maxlen: 24
194.45.233.0/24 maxlen: 24
194.48.3.0/24 maxlen: 24
2a07:e6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9c:85:f8:95:b0:4b:94:5f:03:47:9b:d0:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Jan 1 14:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1afd32cf5ca902e3f370f8b46832ab58c9b153eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:08:e4:7d:f8:8f:58:1d:b2:41:13:96:f2:
9d:c0:b7:1e:26:43:1f:78:70:36:23:e2:57:c6:ff:
21:be:61:69:40:64:f4:7b:a1:6a:27:52:6b:1f:05:
1d:50:68:98:ac:ac:d5:70:5c:7f:1f:c7:71:21:8b:
8e:29:a5:70:0a:f2:00:d1:0d:1e:13:ac:0d:03:33:
7c:d0:eb:49:02:3f:c0:79:07:87:dd:59:e6:c6:94:
58:20:c6:ce:35:c6:60:21:be:85:49:be:d2:e4:62:
d0:89:10:00:8f:1a:68:4f:8f:b9:02:5c:8c:f4:e3:
d1:0c:70:00:16:95:6e:4f:8d:1c:2e:57:5e:aa:2b:
9c:c2:d5:23:59:84:13:bf:54:aa:7a:d9:61:3e:13:
ca:02:bb:0c:d1:01:66:58:02:d4:6d:5a:41:b7:d9:
4f:57:4f:9b:40:0d:85:c8:93:81:84:d9:ae:38:c4:
fd:83:fb:a1:58:e4:53:1d:7a:61:5f:f3:31:93:89:
ef:8c:81:ef:8e:53:39:59:30:0b:f6:d1:e7:7d:88:
66:b8:5c:f1:c3:36:b3:16:33:22:3f:c9:39:96:66:
bd:0f:c2:c6:33:d5:c9:d3:18:bf:25:6c:eb:1a:71:
1a:0a:c2:e5:81:65:cf:76:a0:43:df:fa:a5:51:b6:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:32:CF:5C:A9:02:E3:F3:70:F8:B4:68:32:AB:58:C9:B1:53:EB
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/Gv0yz1ypAuPzcPi0aDKrWMmxU-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.217.0/24
194.45.233.0/24
194.48.3.0/24
194.48.191.0/24
IPv6:
2a07:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:8b:ab:b7:b9:24:e1:5f:ab:dc:2b:1a:de:4c:22:8b:91:9d:
df:67:e0:2e:1a:37:85:42:dc:99:59:04:fa:61:a2:53:5c:6b:
30:b3:9f:df:23:ef:2a:9b:60:e2:96:67:af:ad:a7:e0:e0:56:
55:13:5c:23:37:bd:fa:d8:4a:7f:a4:32:38:b9:49:b5:41:9a:
9e:21:fa:72:66:9d:25:22:0c:87:39:42:bb:bf:19:2c:ad:d6:
a7:6f:8f:a5:b8:c9:eb:75:95:47:53:ef:28:54:3b:11:03:64:
3a:cd:a2:d0:31:44:f2:c5:7b:d2:5c:ea:ad:d1:bd:cf:b5:71:
a4:c7:45:24:77:23:a3:ee:d3:33:87:ed:68:e4:58:5e:44:23:
91:e9:80:94:07:65:dc:61:e7:fc:8e:d8:e0:9d:db:75:32:e0:
5f:03:e4:3d:8b:b4:ab:55:1c:89:66:60:35:1d:17:ad:10:05:
71:aa:ee:ae:b3:87:27:ff:dd:34:c6:0f:a0:43:97:ec:16:5d:
35:bb:79:78:13:fc:3b:2f:f8:04:31:bb:3c:3b:4e:97:f5:ec:
9b:09:31:58:d0:7c:70:b6:f5:02:1b:78:83:d5:ef:48:61:3a:
bf:9f:3c:97:cb:b3:e6:91:42:ba:d5:f9:ba:19:55:54:6a:ab:
85:d4:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:30:34 2024 by rpki-client on console-fra.rpki-client.org