Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Gq3ZT6bIXdmXcg8c_usJWTADloA.roa
File: Gq3ZT6bIXdmXcg8c_usJWTADloA.roa (raw, json)
Hash identifier: pcjrr2V82T01v9BGN/y/LxJTVfRLhs8qJBHiJqKopKk=
Subject key identifier: 1A:AD:D9:4F:A6:C8:5D:D9:97:72:0F:1C:FE:EB:09:59:30:03:96:80
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018CCA2AA16F00BD99AD8971998A3168892B
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Gq3ZT6bIXdmXcg8c_usJWTADloA.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208300
IP address blocks: 89.248.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a1:6f:00:bd:99:ad:89:71:99:8a:31:68:89:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aadd94fa6c85dd997720f1cfeeb095930039680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:88:87:08:e6:1b:d4:de:cf:72:38:69:28:
ce:84:09:23:57:9b:1b:83:59:59:34:14:a3:26:10:
de:34:42:13:90:a4:db:a6:17:7f:89:cf:f1:f9:04:
f5:c7:96:3c:a3:63:d0:f0:77:e3:ca:94:99:82:e0:
62:6d:20:10:a2:c7:80:d5:86:e0:ff:a9:15:bc:cd:
19:06:fe:5a:0f:77:ed:34:48:53:22:a9:38:c1:fa:
8e:54:33:0c:d0:45:8d:fd:9f:bc:5c:68:a5:9b:48:
c8:b2:22:bc:a0:56:cf:97:12:41:1b:1a:c9:84:b3:
e4:e5:50:42:eb:96:19:08:98:92:37:d5:a5:01:61:
a1:d4:0c:3b:4f:ba:77:e1:93:34:be:6e:90:95:2f:
f7:a3:ab:40:70:95:1b:94:b7:ea:da:1a:db:33:e5:
f5:34:f7:73:e4:13:cf:ef:08:50:5d:33:3b:77:2d:
73:8b:79:0c:1f:5e:4c:46:59:3d:f7:68:80:83:92:
ba:74:5e:d9:94:22:26:bf:49:e2:39:45:04:01:16:
fa:c2:49:4d:ba:c8:8d:bc:63:a3:a9:08:cc:af:80:
dc:2b:ca:bb:94:d8:27:ec:77:4b:ce:14:7e:ae:e1:
c8:ce:2a:55:e8:d9:4a:e1:ee:e8:53:9c:00:47:43:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:D9:4F:A6:C8:5D:D9:97:72:0F:1C:FE:EB:09:59:30:03:96:80
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Gq3ZT6bIXdmXcg8c_usJWTADloA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:76:15:b6:88:2e:9b:48:cf:8b:de:66:94:02:c9:bc:7b:99:
88:ff:8b:9d:d0:fb:44:31:d6:91:99:9b:24:f9:b8:7b:4a:56:
be:f0:ec:6a:8e:81:18:f5:fa:fd:8b:08:9e:2d:41:12:08:04:
ec:bb:e4:09:d7:cf:43:af:0e:56:81:8c:dc:1e:0e:03:e4:3a:
7f:9f:f4:62:22:7b:d6:85:44:82:9a:00:a2:8b:05:da:bd:79:
c9:4b:8e:87:00:18:d7:6f:ce:ee:58:96:0a:a2:4d:9a:93:b5:
a4:7d:e9:73:08:47:4e:6e:6e:39:e6:a2:3f:81:ed:ae:52:fa:
84:ec:88:19:95:99:11:f0:c8:17:75:df:bb:23:c7:fc:df:f1:
dc:9a:65:c1:f3:68:5c:53:1b:7c:40:f7:9b:3b:50:31:29:4e:
40:d6:45:52:0a:d9:2b:61:f5:a2:4c:fa:c9:e4:c3:45:b3:5b:
76:49:a0:de:74:c6:b7:30:9e:4a:c9:a8:5c:77:2e:d5:f1:c9:
ae:72:d6:03:a4:53:6b:66:ac:d6:8d:75:87:87:4a:18:d3:dc:
0f:e9:45:a7:ae:b7:79:9e:b4:09:54:8d:14:d3:c2:61:41:35:
2b:6e:44:6c:e1:06:87:29:e8:58:0c:3e:fe:f6:9a:26:87:40:
fc:4c:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:25:19 2024 by rpki-client on console-fra.rpki-client.org