Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gjahU4oFEamOcV7s40IYqf-2LA4.roa
File: gjahU4oFEamOcV7s40IYqf-2LA4.roa (raw, json)
Hash identifier: QT4WQJuJM84fRJVAWcuXZ9G3zaj5BjJaSYgW2JLjXtg=
Subject key identifier: 82:36:A1:53:8A:05:11:A9:8E:71:5E:EC:E3:42:18:A9:FF:B6:2C:0E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649F1E8901897D8696FAFD3B8AD6F8D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gjahU4oFEamOcV7s40IYqf-2LA4.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210853
IP address blocks: 88.203.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f1:e8:90:18:97:d8:69:6f:af:d3:b8:ad:6f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8236a1538a0511a98e715eece34218a9ffb62c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:ff:30:61:8b:80:df:2d:6f:30:d4:20:fb:
7b:84:b9:1d:ef:b6:52:41:34:40:f6:cc:45:26:5d:
8b:46:2c:63:26:74:b5:f9:a1:6a:cc:9e:63:cc:a5:
c1:9f:e6:a0:c5:28:9b:4b:1f:c2:7a:61:f4:56:48:
1c:fc:5f:bd:05:1b:d4:5b:86:ed:fa:0a:bb:7b:17:
4b:5b:a9:d2:2c:db:2f:a2:1e:c6:8d:e9:4e:f8:c8:
78:6e:59:b6:6b:ca:c3:eb:48:a2:d7:74:23:f3:13:
a7:45:62:01:54:76:04:83:2e:9c:11:f4:41:21:3d:
d4:2d:b6:5a:72:63:db:3a:ed:0b:37:51:a9:fe:ee:
8d:b7:e7:3e:be:8b:e9:71:f4:4d:da:e4:dc:e8:b0:
85:a3:ab:a1:86:08:b9:2b:8b:88:b8:78:7d:d3:fd:
4f:32:16:da:0d:49:fd:17:80:0e:7f:eb:95:0b:78:
8f:c5:f2:80:0c:c9:31:ff:25:64:37:3a:17:15:5d:
10:60:8d:19:e5:06:8b:53:0a:93:96:ee:7b:24:1e:
82:22:00:a3:4c:9a:6e:69:37:1e:12:75:11:aa:c6:
a0:19:29:9d:39:aa:4a:20:ec:e3:35:d7:ba:81:45:
71:2c:42:a0:4d:88:35:c6:0e:cf:e4:6c:48:70:7d:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:A1:53:8A:05:11:A9:8E:71:5E:EC:E3:42:18:A9:FF:B6:2C:0E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gjahU4oFEamOcV7s40IYqf-2LA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.177.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fc:ff:5c:dd:ec:0b:0d:8a:6f:10:a6:66:73:7f:31:56:74:
1a:29:c9:ed:92:e7:8e:8b:66:9b:27:f4:cc:ba:01:b0:ca:14:
22:03:54:80:89:23:40:be:a8:1e:99:c9:01:09:73:d0:2b:6a:
43:ac:22:bf:9a:58:5c:76:fa:5b:26:0e:39:b8:c1:d7:69:fd:
1b:c8:50:02:01:2d:4c:fe:31:da:88:e3:a5:23:be:c8:52:5e:
97:df:b9:17:e7:6e:8e:d1:e8:14:a5:a1:32:46:b3:38:0c:63:
33:9b:77:9f:10:ea:cb:89:8e:5e:e2:b8:24:b2:c1:05:79:7a:
42:46:3f:c2:8b:f0:78:77:a8:a4:c2:ed:9e:22:43:4e:49:38:
30:05:bb:07:dc:5a:0b:6d:3a:9b:9a:c8:eb:96:24:77:a1:02:
2c:72:3a:f7:df:93:10:8f:10:c0:1f:8d:00:e5:17:f1:e9:b1:
97:91:d4:ed:b4:5d:2a:6a:35:1c:db:bb:5c:d4:97:22:c4:d0:
dc:d1:ab:98:db:70:5c:7b:d3:9a:6c:2d:0f:e5:b0:d6:da:00:
87:ff:86:a9:b0:bf:5f:55:ce:1c:36:77:bc:d2:57:e3:01:4b:
25:d0:a4:69:29:2d:1a:87:07:15:c2:84:90:61:96:fb:ff:47:
aa:49:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:19:57 2024 by rpki-client on console-fra.rpki-client.org