Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/GMFdjAhka1ddS1YFS0CyC3k_kGc.roa
File: GMFdjAhka1ddS1YFS0CyC3k_kGc.roa (raw, json)
Hash identifier: 2CQgLXEzR4mx/f9eWPww53lqfc5JHkTo2P9NlXBIVzA=
Subject key identifier: 18:C1:5D:8C:08:64:6B:57:5D:4B:56:05:4B:40:B2:0B:79:3F:90:67
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 018CC500C87105BFD191B438EE63603BB5B6
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/GMFdjAhka1ddS1YFS0CyC3k_kGc.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49570
IP address blocks: 195.64.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c8:71:05:bf:d1:91:b4:38:ee:63:60:3b:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18c15d8c08646b575d4b56054b40b20b793f9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:76:41:2c:40:2d:73:57:d2:b5:ca:76:97:
ee:be:90:59:16:0e:7f:a9:b2:f0:ce:df:e5:c8:2b:
66:20:b7:4e:c1:c2:83:e0:3d:e6:13:55:98:94:3c:
2e:2f:e5:73:4b:21:ec:c2:28:5f:0c:ee:e6:03:c7:
99:4a:8a:99:8c:bf:b7:cf:bf:fe:c8:e2:ea:43:44:
1c:80:36:4e:1c:61:68:10:b1:10:c8:d4:43:e4:3d:
09:61:d5:46:a2:a5:78:d3:4c:71:fa:a4:45:a7:46:
45:93:99:a9:f5:c5:a3:f2:b4:a7:92:89:0d:73:26:
f7:5a:fd:42:f5:05:c1:e5:c4:ae:9d:30:08:06:45:
13:f0:83:57:ab:cd:02:43:43:98:94:ef:28:33:a1:
8b:69:d6:a5:11:44:aa:f6:6a:6c:45:68:b9:b6:5a:
5a:ba:f1:75:e2:e6:17:75:ce:cf:c0:81:ad:18:9a:
80:9a:92:3d:28:df:99:0f:52:19:8f:b4:91:91:29:
9a:bd:c5:ef:84:23:d6:65:78:1a:53:13:fe:b7:b0:
c0:0c:53:41:a3:62:1d:62:ec:ca:31:3f:86:3d:40:
82:25:d7:31:3a:ce:ee:dd:40:48:bf:ee:16:38:87:
6f:62:da:2f:57:55:16:aa:b0:e4:44:32:07:4f:a9:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:5D:8C:08:64:6B:57:5D:4B:56:05:4B:40:B2:0B:79:3F:90:67
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/GMFdjAhka1ddS1YFS0CyC3k_kGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.184.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e1:42:c7:f4:a9:ba:9c:a9:a6:70:a1:ee:a3:ae:9c:1b:53:
e2:7f:4e:3a:33:12:68:b3:50:84:b0:9e:9f:fd:5f:b4:32:ee:
0e:5b:d9:11:87:6c:a6:2f:f4:9d:13:f5:db:af:99:c8:c9:eb:
cb:cb:25:fc:a0:01:84:12:a8:fc:05:c0:a9:ca:13:2d:2d:43:
76:7d:b5:de:af:32:4f:ad:ce:62:e8:a8:3a:c4:eb:1a:6b:64:
e7:50:7f:16:b6:fd:98:88:cc:53:e4:7d:73:63:1f:64:f7:99:
4e:56:2e:8d:cb:75:5e:2b:4a:3b:3f:fb:9c:83:aa:5c:29:ea:
b7:50:d0:c9:fb:06:a1:03:0a:b2:8f:65:d4:df:68:ee:bb:31:
9e:3f:06:23:d4:41:d8:d9:78:d2:03:ee:31:33:82:cf:e0:0c:
fd:75:02:7b:16:53:cc:b6:58:01:45:6d:57:da:74:16:d3:19:
2c:3b:5c:d4:7e:62:ec:90:2a:d7:87:ba:f9:27:d6:a1:89:d9:
b0:13:9f:34:07:9b:48:3f:82:86:d0:78:45:d0:8a:76:2a:b0:
44:b2:c0:97:54:9f:99:98:60:d8:54:fa:43:a3:54:0f:94:5c:
8c:38:be:66:d1:f6:5b:04:8b:cf:34:a2:06:dd:52:9b:21:9a:
b9:b1:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:43:00 2024 by rpki-client on console-fra.rpki-client.org