Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/GYVrkvpPj6G5upYsh5eD-Oa3vng.roa
File: GYVrkvpPj6G5upYsh5eD-Oa3vng.roa (raw, json)
Hash identifier: vb+NZdnjVTJmib/Gxv6t/0TCk/1UwODf88Lo2anomHQ=
Subject key identifier: 19:85:6B:92:FA:4F:8F:A1:B9:BA:96:2C:87:97:83:F8:E6:B7:BE:78
Certificate issuer: /CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Certificate serial: 018D5EC568A7E2E9A6C53AE27BEB5A219AF9
Authority key identifier: AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/GYVrkvpPj6G5upYsh5eD-Oa3vng.roa
Signing time: Wed 31 Jan 2024 09:06:52 +0000
ROA not before: Wed 31 Jan 2024 09:06:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 194.48.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c5:68:a7:e2:e9:a6:c5:3a:e2:7b:eb:5a:21:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Validity
Not Before: Jan 31 09:06:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19856b92fa4f8fa1b9ba962c879783f8e6b7be78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:ee:61:07:88:94:ec:a8:9b:42:e4:75:b7:
ca:ec:b2:f0:2c:35:73:e3:00:b1:f7:d8:5f:5b:45:
ac:63:1b:7c:74:8c:2d:b3:dc:0c:63:0b:2e:7e:e1:
2d:ac:b4:20:b2:ee:97:94:ae:e4:e5:b1:bd:47:e9:
49:60:aa:33:3f:0d:0e:f2:5a:d5:fb:96:c8:50:d0:
80:41:1c:8a:25:6f:b1:aa:f2:ee:43:e2:fe:96:d8:
44:8c:38:00:5e:00:07:c1:58:b7:d2:11:35:cc:83:
17:e0:1f:8b:4a:26:c4:18:51:96:09:d2:de:de:dd:
b7:4c:17:ad:12:a3:fb:80:b2:84:9c:5f:a6:1f:0d:
c6:ae:bb:73:d7:d8:e5:2f:9d:8c:85:2f:0d:e5:cf:
00:71:f8:96:ce:63:0e:9e:5e:17:c3:a9:04:1d:23:
bb:5f:3d:a6:4b:d5:f3:4f:e2:63:c7:e7:06:a9:2f:
5d:6c:88:29:0b:5b:90:da:99:aa:ab:61:35:25:db:
a3:39:c8:a5:ea:c2:b5:48:1f:13:0d:4a:f9:98:14:
8f:10:57:50:7e:15:9e:d6:9d:ba:45:67:7b:72:65:
fa:b5:83:f0:27:c7:35:1e:03:e0:f6:88:3d:26:6a:
38:45:ab:9d:f9:a9:8e:c2:0c:49:0a:7f:c5:d3:44:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:6B:92:FA:4F:8F:A1:B9:BA:96:2C:87:97:83:F8:E6:B7:BE:78
X509v3 Authority Key Identifier:
keyid:AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/GYVrkvpPj6G5upYsh5eD-Oa3vng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c5:37:e6:cb:e8:22:5c:4a:0b:f5:b6:74:0a:44:53:51:2d:
ca:44:12:8d:18:1d:c9:72:1f:24:c7:dc:90:2d:b1:a6:5d:cc:
03:23:12:74:54:75:95:5b:29:21:4b:bb:25:a8:60:a2:74:09:
99:67:af:60:dc:5b:ba:89:b4:75:ba:61:81:b3:0e:3a:dd:26:
e5:a2:51:76:5f:65:4e:80:14:c6:71:c7:d4:f7:81:0d:7b:1f:
56:c5:29:04:bd:bd:e1:bb:54:60:87:13:12:26:4c:0e:f2:95:
d6:b9:c7:c3:cf:89:1d:5a:90:68:f2:df:7c:2d:95:43:3b:7b:
96:ff:c5:db:63:aa:1e:36:20:2a:24:94:d5:4d:fa:14:83:5e:
ad:84:16:bf:47:8f:d5:8d:4f:41:35:da:0f:09:88:43:cf:43:
e0:a7:8c:f0:d1:59:ce:f2:6b:c1:e1:cd:92:7d:2b:9b:89:f2:
96:68:d2:18:99:ba:19:4f:74:14:4d:f7:89:8e:39:de:2b:90:
f2:a0:4c:cf:93:9c:51:ed:ee:39:50:56:41:46:d6:56:32:b1:
a3:4e:34:68:8a:d8:3b:a2:21:4f:8f:13:50:e6:e1:5d:49:2c:
b9:02:3e:40:15:d6:0c:05:8f:8b:68:2b:a0:af:44:07:fe:20:
30:d9:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:36 2024 by rpki-client on console-fra.rpki-client.org