Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Gj0hEA7WZ4Gr0Hb6E9lO-4xyIYw.roa
File: Gj0hEA7WZ4Gr0Hb6E9lO-4xyIYw.roa (raw, json)
Hash identifier: dw6uQQi9dhtmA98spSpRnJgvUD3a5wJhp1UlWD3FdvY=
Subject key identifier: 1A:3D:21:10:0E:D6:67:81:AB:D0:76:FA:13:D9:4E:FB:8C:72:21:8C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E408F90206CCFE88C32CEA227906
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Gj0hEA7WZ4Gr0Hb6E9lO-4xyIYw.roa
Signing time: Mon 01 Jan 2024 18:29:40 +0000
ROA not before: Mon 01 Jan 2024 18:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62411
IP address blocks: 92.247.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e4:08:f9:02:06:cc:fe:88:c3:2c:ea:22:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a3d21100ed66781abd076fa13d94efb8c72218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:d0:f3:8c:25:62:cf:af:df:6c:cf:32:b4:
e3:5a:59:0e:e2:55:97:23:2d:22:4d:d0:b8:42:3f:
8f:4b:a8:dd:1c:93:ce:e6:fb:b2:c8:78:08:ef:03:
c3:6d:1a:3e:fe:4c:7a:3c:aa:50:65:90:72:d7:73:
ce:49:07:e5:35:46:b0:2f:98:1f:b2:28:d7:c7:db:
0a:5c:cb:46:17:53:0d:2b:53:f3:b1:3e:eb:ce:33:
ef:be:76:02:2a:1b:07:df:88:d4:f4:5e:a6:4f:9c:
dd:8f:77:50:1c:92:b3:c9:8e:d9:89:ec:5d:3b:f0:
6e:15:60:60:68:a4:b8:37:6e:ca:7f:0c:78:b5:41:
f9:9a:69:2b:8d:2f:7c:fd:db:c7:f4:4b:33:2d:f4:
68:b3:1f:85:34:16:d8:48:04:d3:d1:d7:31:f6:77:
56:3e:55:36:c6:c0:8f:e7:13:43:6a:17:9c:b4:77:
31:f9:d8:e8:e7:d1:b8:ac:9f:73:b0:0a:79:6b:cb:
d7:24:54:61:f3:db:47:0b:6c:ec:74:23:08:26:e7:
04:97:83:9c:71:2d:26:4c:f1:19:f8:ab:e0:11:47:
7e:55:dc:72:79:4e:4a:23:a1:bd:41:f0:45:80:8d:
37:47:99:72:89:39:30:29:29:a6:8d:41:24:0a:df:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:21:10:0E:D6:67:81:AB:D0:76:FA:13:D9:4E:FB:8C:72:21:8C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Gj0hEA7WZ4Gr0Hb6E9lO-4xyIYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9d:ba:82:b7:78:6c:4a:78:8e:4d:69:e8:96:02:33:3d:87:
e1:04:7f:fb:cf:93:22:89:c4:31:86:87:2d:4a:e2:11:ef:2a:
af:0a:03:dc:cc:bd:16:a7:3b:57:a3:e8:ce:0e:c3:b0:69:a7:
8f:52:f0:dd:c9:58:26:45:77:1b:cc:cd:9a:1a:aa:1e:a9:05:
b8:b6:d4:5a:a8:d7:8d:3e:00:25:00:51:17:51:3a:0b:9b:a9:
e6:9a:5e:9a:23:49:e4:36:52:5c:5c:0f:3c:e5:a6:98:81:a8:
75:59:f4:8c:71:4a:5d:94:f4:e5:e5:2e:67:6e:a5:b1:a7:2e:
d7:c8:08:9e:f7:58:0d:38:ec:80:bb:37:29:c1:43:f7:aa:82:
6b:db:aa:99:54:a0:06:a6:ca:ee:07:78:dc:d5:01:d1:69:e1:
e6:76:f8:a0:a2:c5:20:4b:90:cd:54:1c:f0:7b:cc:5e:7c:f1:
14:14:0e:91:8e:23:73:c7:7a:f7:26:5f:ef:a7:08:35:64:23:
ea:3b:72:24:7b:f8:fd:2e:64:a0:6a:f9:85:b2:36:95:e8:de:
f3:a9:da:09:3e:5d:c8:6f:4b:3f:fb:c7:61:ff:70:2e:ae:49:
6a:39:8d:33:db:af:9b:bf:e9:47:44:df:db:e9:e1:f6:26:06:
c8:3a:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:49 2024 by rpki-client on console-ams.rpki-client.org