Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa
File: ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa (raw, json)
Hash identifier: C85jmLr3jaGGjh3HRSNMK8usD16B8LJMDCk/j9tGYIU=
Subject key identifier: 82:01:CB:EC:4F:31:A1:C7:6F:47:65:A4:A2:3E:03:91:D5:26:9D:72
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 018CCA99213AFEAA6030515C153B62C1C94D
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa
Signing time: Tue 02 Jan 2024 14:34:42 +0000
ROA not before: Tue 02 Jan 2024 14:34:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41585
IP address blocks: 194.9.124.0/23 maxlen: 23
194.9.126.0/24 maxlen: 24
91.195.50.0/23 maxlen: 23
91.194.254.0/23 maxlen: 23
91.136.128.0/17 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:21:3a:fe:aa:60:30:51:5c:15:3b:62:c1:c9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Jan 2 14:34:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8201cbec4f31a1c76f4765a4a23e0391d5269d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:78:b9:a9:4e:b7:bb:e1:b3:f7:de:80:ba:
8e:67:af:cb:57:8d:28:2c:7a:64:8b:b0:92:5d:5a:
5b:eb:4f:17:77:1a:3e:a3:89:8f:97:83:3f:19:02:
43:a8:1f:72:8e:0a:33:38:4d:19:ae:cd:d0:b6:0f:
bb:d6:a2:c0:9c:49:96:ca:ca:a4:b8:bb:14:bf:f9:
fe:88:2e:f6:24:f6:44:49:49:97:ee:6e:41:73:30:
dd:cc:f9:98:69:80:a4:cb:02:7d:58:4f:02:15:d9:
b9:6a:bd:33:93:a3:6d:b1:96:75:5c:dd:6b:22:1c:
1a:46:d9:72:d6:1e:a8:2c:2c:ba:4f:22:ba:04:d8:
d9:67:0e:a1:08:7b:98:4b:54:b2:47:c4:56:9c:df:
6f:d2:1c:67:f6:a1:b9:75:15:05:1b:3c:54:b4:9c:
ac:ca:e1:e5:72:e9:d1:d4:d2:34:da:57:3e:92:34:
05:f1:0a:06:f5:4b:0a:fa:76:53:8d:c4:b0:39:54:
0e:2c:84:2a:93:e8:d0:a2:4d:cc:19:a1:bc:f6:81:
d7:57:51:e7:50:d7:c6:5d:63:bf:e4:13:4d:ad:16:
92:78:28:c9:77:62:8a:0f:47:12:82:eb:ac:f6:1a:
9d:1c:3c:07:e0:7a:7d:de:c4:87:98:5d:23:13:24:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:CB:EC:4F:31:A1:C7:6F:47:65:A4:A2:3E:03:91:D5:26:9D:72
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.136.128.0/17
91.194.254.0/23
91.195.50.0/23
194.9.124.0-194.9.126.255
Signature Algorithm: sha256WithRSAEncryption
55:59:dd:ca:74:c2:1c:f2:21:10:60:72:11:2a:f8:e7:97:58:
b7:74:c8:ba:ae:40:1a:ba:28:88:1b:ef:55:f6:d1:98:b8:78:
75:5a:45:7e:a0:c1:53:a6:72:c8:24:11:71:66:44:19:fb:8d:
1c:e4:89:3c:93:bd:f8:9b:bc:1d:59:4f:e6:b1:24:ca:79:d2:
fa:fd:6d:bd:6b:6a:f1:10:9f:67:53:be:a9:b4:8d:3f:d1:54:
00:b4:98:11:21:61:13:4f:dd:e5:02:b4:3a:23:86:83:24:ee:
21:d3:c3:98:8b:4d:43:e3:3b:12:e6:7c:8f:ca:e1:99:65:49:
3a:72:03:6e:e6:87:dd:db:92:4d:89:f3:98:27:71:29:83:b1:
ac:e8:97:71:7c:fe:bc:9f:ca:ca:6e:58:d7:72:c1:37:7e:5d:
0f:ad:f0:10:4f:31:5a:16:58:39:7c:f0:2c:80:bb:84:13:66:
35:0b:57:12:ac:37:b8:8d:e7:76:85:8d:54:5e:64:05:00:2f:
27:ee:dc:dc:4f:a1:d4:32:59:ab:47:a6:9a:fd:5b:7e:8c:fc:
80:48:66:0b:95:2c:d4:df:a8:38:64:a6:41:61:9f:91:33:e0:
83:57:01:58:a0:36:82:00:2b:6d:2c:fd:bf:cb:9a:52:33:c8:
29:0e:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:40 2024 by rpki-client on console-fra.rpki-client.org