Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcsbjuctFCipksneTi5FMGKwWZQ.roa
File: GcsbjuctFCipksneTi5FMGKwWZQ.roa (raw, json)
Hash identifier: CKUC54HYwdiOQ90RhC/bTWgxR+AyComKmm+77uskIi4=
Subject key identifier: 19:CB:1B:8E:E7:2D:14:28:A9:92:C9:DE:4E:2E:45:30:62:B0:59:94
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1D27A66984A64F048BAEDEB6A6CBED52
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcsbjuctFCipksneTi5FMGKwWZQ.roa
Signing time: Fri 08 Mar 2024 08:22:01 +0000
ROA not before: Fri 08 Mar 2024 08:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9260
IP address blocks: 94.154.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:27:a6:69:84:a6:4f:04:8b:ae:de:b6:a6:cb:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 08:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19cb1b8ee72d1428a992c9de4e2e453062b05994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:02:55:ae:2e:ab:58:1d:4f:a7:9c:89:88:
5d:b0:0c:91:b0:44:62:8a:33:e3:57:4c:0d:36:59:
d7:76:ca:93:4e:b5:3d:ed:b4:8f:7c:84:f3:2f:c4:
4a:24:95:c5:e1:94:db:42:49:a0:f2:45:bc:a2:2e:
3c:ae:0e:82:bc:b1:92:e8:eb:a8:76:cb:89:9d:32:
cc:60:bc:e1:d6:56:8c:a5:c6:fb:c1:48:f0:e2:ae:
e5:dd:27:be:82:65:2c:23:02:b6:43:46:2c:3f:01:
c8:2a:a9:eb:f8:51:b6:38:b2:e8:0b:11:15:c1:a2:
17:0d:36:73:6e:42:0f:24:08:df:3c:7c:fe:69:e8:
6a:c4:fc:bc:93:55:cb:cf:e3:51:7b:da:08:86:92:
fc:09:f2:b3:88:28:62:8d:2c:47:4d:fe:bc:03:03:
62:bc:9f:2e:24:2a:90:34:e1:fc:6b:f0:ca:6e:bc:
c3:7a:bd:07:1a:ff:e5:fd:77:e7:63:bf:f8:4e:67:
ba:4f:87:fa:3c:f4:a4:77:c2:b5:1f:cb:5f:bc:82:
19:23:77:69:6f:89:9f:84:9c:84:64:a7:03:43:1a:
24:26:46:0a:a7:f9:b1:2e:72:66:bb:17:e4:cd:47:
c1:e7:5b:25:d5:b7:a3:4e:70:4c:fb:8a:98:36:02:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:1B:8E:E7:2D:14:28:A9:92:C9:DE:4E:2E:45:30:62:B0:59:94
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GcsbjuctFCipksneTi5FMGKwWZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.160.0/24
Signature Algorithm: sha256WithRSAEncryption
82:41:ec:ef:a2:20:38:23:f2:7f:c2:09:a1:64:e8:e0:b1:3b:
4d:a7:34:f0:d2:d8:1c:d5:4a:01:a6:98:86:59:87:a0:37:be:
d0:85:cf:f4:bb:f2:ea:af:1d:a4:08:16:d6:45:48:ca:33:e4:
cd:01:a5:bc:11:a8:75:bb:c8:a0:a7:d0:d0:44:e5:03:9f:d1:
ff:03:5c:8b:5b:38:39:d9:d9:67:92:d4:eb:44:cf:5c:b7:48:
7b:63:dc:20:8e:47:c5:a7:e8:92:9a:9d:e9:08:e2:59:74:cb:
79:fb:26:31:16:da:2f:45:e1:0f:18:4b:4e:b4:6f:81:20:eb:
0a:9b:82:c2:c4:76:9f:15:10:0d:ef:68:a1:c3:27:e6:88:e0:
a6:19:35:1d:f8:f4:d8:53:40:f6:9c:b8:f3:a0:07:07:9c:c7:
3a:9b:2e:01:12:3d:d5:bd:60:08:c1:7f:ed:ba:20:81:9f:ab:
45:b9:a9:a2:28:48:26:6c:67:5c:c1:12:ff:e0:6d:1e:b6:4a:
35:b5:29:0a:bb:c6:03:6b:ab:bd:c0:b0:32:83:eb:f7:2f:e6:
d6:61:11:ab:e6:8a:41:39:af:58:fc:2b:f9:1c:08:dd:fc:0a:
99:ce:0f:6b:7d:6f:3a:a2:ce:d2:6d:84:20:cf:06:dd:2d:0b:
0c:d2:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:45 2024 by rpki-client on console-ams.rpki-client.org