Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa
File: GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa (raw, json)
Hash identifier: R2IhZ/x9hNwlh+TKo8F3mQifo7UyRgek0acnMkUyUR8=
Subject key identifier: 1A:9B:26:1D:5F:04:47:12:3A:06:47:FF:A9:50:A6:50:2F:BA:63:0E
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 018CC492463253E832B0A9AAD8AB162C6CA0
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212649
IP address blocks: 194.152.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:46:32:53:e8:32:b0:a9:aa:d8:ab:16:2c:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a9b261d5f0447123a0647ffa950a6502fba630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:e8:8d:4a:80:4f:86:50:83:6a:d8:31:35:
f0:30:95:b9:f1:c1:68:07:a5:4a:b5:32:59:58:5b:
d2:38:1d:11:69:e5:2d:34:a8:5b:12:ad:28:98:a0:
f3:0d:c7:9e:1f:f6:1d:8e:a0:80:48:1d:a1:81:8b:
67:2d:5e:36:b4:9a:20:0b:ad:0c:54:70:5f:4b:bb:
2d:c6:73:3a:32:53:71:91:66:b1:b6:e2:85:a6:19:
43:27:ae:a0:2f:29:22:b6:ea:43:6a:1f:b8:8a:2c:
10:15:88:b8:f5:65:60:5f:72:da:14:7e:24:cf:92:
de:dd:2e:ac:36:33:ce:ce:d6:8d:23:2c:88:af:07:
33:c1:e4:f5:60:4a:cc:cb:0c:12:96:59:7b:23:34:
12:a4:af:62:cb:6d:43:15:61:11:b4:52:2a:a0:27:
25:64:82:8b:4e:3e:f4:38:d9:54:a9:18:c8:c7:77:
48:ae:8a:cb:09:3d:82:b2:00:db:a6:e8:78:3d:f0:
60:20:40:48:14:0f:c6:1c:dc:86:20:13:d7:7c:63:
ef:2b:bc:02:2b:5d:1c:5e:69:bb:00:ea:77:1e:64:
d8:b3:1c:bb:34:11:fb:33:05:5f:d0:61:87:fd:89:
82:fe:e7:b8:c8:69:42:e8:75:ad:cb:5f:b0:7a:eb:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:26:1D:5F:04:47:12:3A:06:47:FF:A9:50:A6:50:2F:BA:63:0E
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.45.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6c:db:4d:48:75:61:33:b8:7b:8b:34:e4:00:45:20:40:38:
61:21:76:f6:b8:ae:7d:c9:4a:3c:0c:d0:cd:c3:d1:e7:b6:6d:
19:b3:97:2e:cb:ca:e4:c3:4a:b1:59:b9:b6:92:0e:07:16:b5:
42:f7:a1:14:ad:51:92:75:65:83:e3:f5:17:0a:85:3a:92:45:
02:7b:fe:92:97:85:c5:b1:87:5f:34:ed:e6:5a:79:92:07:41:
6e:10:95:3a:da:83:ed:f4:cf:96:aa:13:9b:ac:b6:c5:bb:85:
3b:c7:d9:b7:82:0e:27:bb:f6:9c:a1:7c:eb:ae:44:b4:e1:9a:
78:e8:29:a3:bf:10:97:29:98:0f:26:62:11:c2:3b:50:c6:77:
a8:b5:a4:e8:5f:1b:d7:dd:5c:92:ea:d0:7e:16:a6:8e:af:8f:
b3:e1:b2:e6:c3:dc:7a:a8:f9:72:99:98:3d:6d:95:c8:56:57:
15:2f:26:b0:84:95:7c:02:4e:b6:5c:b4:e6:c5:bd:30:5a:b5:
f8:09:ce:dd:71:1e:ec:0d:a4:dd:60:f6:43:ae:4a:f6:b5:aa:
68:eb:d8:9f:c5:52:6f:75:e8:01:86:80:3e:fb:4f:6e:04:a1:
e5:26:a0:59:5f:31:f5:c7:9b:44:6d:18:0d:f5:59:dc:63:53:
94:1e:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:24 2024 by rpki-client on console-ams.rpki-client.org