Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/GMcM3n-cpPNm_F2vDoGjmenwwuc.roa
File: GMcM3n-cpPNm_F2vDoGjmenwwuc.roa (raw, json)
Hash identifier: WZFQcOUUGFlFtXiDC/RdZF33URbIrpbhnj9X0K99hD8=
Subject key identifier: 18:C7:0C:DE:7F:9C:A4:F3:66:FC:5D:AF:0E:81:A3:99:E9:F0:C2:E7
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 018CC802D1AA129614C48FCED84F1D9968A2
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/GMcM3n-cpPNm_F2vDoGjmenwwuc.roa
Signing time: Tue 02 Jan 2024 02:31:17 +0000
ROA not before: Tue 02 Jan 2024 02:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57956
IP address blocks: 91.237.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d1:aa:12:96:14:c4:8f:ce:d8:4f:1d:99:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Jan 2 02:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18c70cde7f9ca4f366fc5daf0e81a399e9f0c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:83:ea:67:87:c2:ac:8f:88:c9:fb:9e:0f:
fb:06:6b:1f:ac:8f:f3:a7:98:20:72:4a:0c:e3:f7:
a0:72:e4:62:f3:58:63:7c:f6:c1:fc:f1:4a:f2:1d:
8f:25:f1:9c:d0:bd:d7:6f:4e:99:b0:35:48:a0:56:
4b:83:30:bd:01:49:f5:7e:61:cd:11:e7:6a:74:72:
5d:d7:65:6b:d4:82:33:28:9f:76:f7:94:e3:b1:f5:
3c:c0:7f:b9:3e:2b:d9:fd:c1:47:f4:de:de:fd:77:
73:91:5e:20:f7:f1:1d:5b:76:4f:e7:7b:dd:5f:75:
5a:07:5b:02:1e:9b:88:36:f1:7a:db:e4:8c:b6:b4:
81:35:fa:37:ee:72:ee:42:e7:42:3d:ed:92:4e:67:
38:94:b8:3f:1a:49:77:e6:9b:70:c1:db:f0:b1:a2:
f8:aa:43:89:79:51:30:0f:19:74:b8:10:74:69:7c:
00:f3:8a:04:12:a3:d3:c5:9a:97:f0:56:12:56:d9:
d0:8e:39:bf:96:5a:e5:42:5d:bd:d8:81:60:29:43:
5a:13:f4:17:33:49:8b:64:20:8b:b9:d0:b8:59:dc:
2a:30:b3:5e:3b:66:4d:c4:21:fc:9e:4c:3a:12:b9:
cf:f5:16:d6:37:8b:89:21:a2:9e:36:c1:24:e4:98:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:0C:DE:7F:9C:A4:F3:66:FC:5D:AF:0E:81:A3:99:E9:F0:C2:E7
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/GMcM3n-cpPNm_F2vDoGjmenwwuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.42.0/24
Signature Algorithm: sha256WithRSAEncryption
29:81:6f:08:95:73:4f:10:e5:9f:37:ee:9c:80:08:a5:7d:77:
4c:2b:31:7d:dd:e4:74:9f:ff:f7:3f:f7:97:ba:c0:13:87:c1:
e4:b9:93:6b:43:79:fe:3f:b9:f8:4d:4e:8e:e3:d9:7f:4d:4b:
45:74:3b:d0:b1:e1:06:eb:54:21:e8:62:14:77:9b:ee:28:5e:
48:8f:00:6d:ba:6d:61:d5:b3:0d:82:a9:f7:4e:40:9b:ef:65:
cd:02:4f:13:2e:41:62:77:ce:1b:b9:ce:0f:53:c7:af:4f:d7:
c7:b6:f5:9b:2f:57:34:cc:8e:0e:84:75:58:2b:90:0d:78:cf:
4d:b0:75:5e:8b:50:98:b4:05:1d:68:84:c8:ea:90:5f:08:9d:
83:5c:43:bc:c9:fa:97:17:17:60:aa:27:8b:33:50:7d:9f:e7:
d2:5b:48:b2:86:7e:e2:26:93:40:cc:c7:d0:40:40:21:99:a6:
60:ad:5d:ce:98:16:50:bb:8e:9b:aa:b7:fc:c6:1e:36:82:03:
ae:04:fd:9b:91:7a:b4:2e:e5:06:65:4d:5f:22:55:d0:09:4c:
9a:70:2e:1f:08:d9:35:3d:27:ed:7d:01:89:48:11:f7:b0:bf:
04:41:17:49:13:5b:74:aa:b6:db:9a:8b:9b:45:3e:7a:bc:ce:
d6:41:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:23:01 2024 by rpki-client on console-fra.rpki-client.org