Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/gZk8yrdkfh6FrWipj46ad2zUth4.roa
File: gZk8yrdkfh6FrWipj46ad2zUth4.roa (raw, json)
Hash identifier: wYG1bbxzZdcc55SqOAsqbPQDL10st03ZgGepqjCnxWE=
Subject key identifier: 81:99:3C:CA:B7:64:7E:1E:85:AD:68:A9:8F:8E:9A:77:6C:D4:B6:1E
Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial: 018CC8011C70560E2159562BEA980800F945
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/gZk8yrdkfh6FrWipj46ad2zUth4.roa
Signing time: Tue 02 Jan 2024 02:29:25 +0000
ROA not before: Tue 02 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394434
IP address blocks: 185.187.132.0/23 maxlen: 24
185.187.134.0/23 maxlen: 24
2a0b:a580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1c:70:56:0e:21:59:56:2b:ea:98:08:00:f9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81993ccab7647e1e85ad68a98f8e9a776cd4b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:66:9b:a5:90:ed:67:48:28:95:d0:d6:d9:
d6:01:b6:f2:cf:90:49:cb:4d:6c:ea:2c:0d:a8:2b:
cd:c4:71:4d:dd:67:e1:f0:14:ed:b1:fe:9b:5f:c2:
cc:ed:9a:18:4f:67:11:bf:83:35:c4:9c:35:95:83:
91:ba:81:6b:7a:69:c8:c7:4d:d2:81:2e:5c:03:7d:
c0:6f:31:55:35:c9:3d:63:06:ab:41:32:f0:21:4f:
01:84:ca:a4:af:de:2b:aa:85:8d:7f:d6:57:83:17:
d1:4a:35:b5:70:c5:f3:58:ed:a1:85:83:39:bd:e5:
b5:4e:a0:2b:f4:ef:c4:94:02:39:8c:31:b1:0a:f0:
20:9a:b6:32:8c:98:63:a4:13:85:b1:92:7b:0f:ee:
ef:cb:ab:32:d6:6d:dd:0f:78:cc:8f:b1:8b:d9:5c:
f3:ff:15:13:1f:19:69:05:d8:f0:98:6d:2e:47:e6:
52:20:46:4d:26:f0:6c:52:a4:9e:fb:fe:4d:f1:d1:
de:8f:c6:c9:62:05:45:7f:73:2d:2c:dc:c5:56:45:
d3:fb:9c:9e:29:7e:99:d7:77:5d:a6:54:5a:ce:fe:
a4:de:66:9e:18:be:e7:9f:3a:3c:14:98:6b:a6:3a:
ca:97:8e:ca:dc:22:b4:8c:05:15:14:e8:1e:02:2e:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:3C:CA:B7:64:7E:1E:85:AD:68:A9:8F:8E:9A:77:6C:D4:B6:1E
X509v3 Authority Key Identifier:
keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/gZk8yrdkfh6FrWipj46ad2zUth4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.132.0/22
IPv6:
2a0b:a580::/29
Signature Algorithm: sha256WithRSAEncryption
70:34:a6:ef:63:e4:66:5b:7c:dd:84:1d:e9:e7:52:e4:98:91:
50:9f:22:c7:fa:25:fd:90:97:15:1b:03:f2:01:b4:c7:11:4b:
81:ad:54:f3:07:d1:08:ab:7a:88:f7:88:43:e7:af:eb:96:df:
c1:20:75:c3:2c:ee:c2:2d:77:ae:99:f9:2f:a7:7e:e3:0b:52:
cc:10:e5:78:6e:8d:50:18:56:38:4e:28:28:09:f1:90:56:9c:
3a:1a:62:2d:51:c6:eb:95:08:6a:04:71:8a:b2:9a:a2:9a:15:
7d:6c:43:85:41:7f:02:f2:0b:fd:96:38:3d:af:cb:70:e9:5c:
ad:16:86:69:56:83:67:62:a1:8f:5f:3b:96:21:be:66:36:28:
78:de:35:a8:98:a1:4d:60:07:d6:8e:db:ce:4f:2b:bb:b4:af:
37:23:fb:8c:bb:39:08:61:2a:67:ed:73:d8:df:a8:ce:92:fa:
a3:b5:98:34:9e:9f:55:e0:53:ac:e5:60:e1:f3:95:ea:6d:2b:
17:18:2d:e4:5f:45:e6:a4:21:00:ed:a4:ef:ce:88:8c:1e:ba:
99:22:1f:12:09:6d:26:53:92:f4:1c:80:6a:4c:45:82:54:43:
f8:75:19:1e:13:81:30:ab:1d:67:23:ce:cb:aa:4e:ab:39:03:
8f:de:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:05:49 2024 by rpki-client on console-ams.rpki-client.org