Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GGUHyBSxqp4WeRXH-NZ2wDGUmIg.roa
File: GGUHyBSxqp4WeRXH-NZ2wDGUmIg.roa (raw, json)
Hash identifier: k+R2WJPOBEhLwsbSnjRzA+CfRa0rK9gLf2TvTsGnrZA=
Subject key identifier: 18:65:07:C8:14:B1:AA:9E:16:79:15:C7:F8:D6:76:C0:31:94:98:88
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E0975B6ED7C7A0D4C5C5AB21A5A0F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GGUHyBSxqp4WeRXH-NZ2wDGUmIg.roa
Signing time: Tue 02 Jan 2024 08:33:03 +0000
ROA not before: Tue 02 Jan 2024 08:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208491
IP address blocks: 195.187.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:09:75:b6:ed:7c:7a:0d:4c:5c:5a:b2:1a:5a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186507c814b1aa9e167915c7f8d676c031949888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:a7:da:6b:35:a2:f1:39:ca:d7:2a:7a:e4:
c2:ca:7f:74:82:72:24:13:ac:1b:f3:15:b0:05:5a:
ff:c8:c5:63:80:bd:1c:64:3d:35:4e:db:44:8b:be:
a3:16:ae:4b:f3:49:11:5c:e7:6d:3b:6d:48:eb:13:
fd:69:5c:59:1c:2a:4a:72:7d:08:a5:81:1a:52:97:
97:7c:d1:bb:a1:8b:cb:2c:b0:a7:1c:c6:75:cf:95:
d3:ee:eb:78:76:bc:de:c1:6c:dd:c5:f6:8e:ab:39:
2c:ec:ca:97:28:58:f4:3d:cc:62:61:95:e6:ef:c0:
16:8f:0d:c8:69:13:fc:d4:7e:b6:18:a7:42:f7:d1:
f7:7e:a0:67:59:a5:a7:c3:22:8f:21:f3:08:d0:36:
ac:2c:14:58:d8:51:96:6a:4d:ef:31:99:11:3b:6e:
ff:d8:8b:60:bc:42:5f:9f:d8:42:63:f6:28:35:11:
ee:90:c3:21:c4:f0:85:a2:64:71:c2:b7:87:04:fe:
58:f1:f2:5c:f3:a7:31:b3:8c:82:8b:08:97:e4:ae:
45:48:9e:d9:ea:8c:fc:2f:88:2b:4c:b4:54:02:ef:
00:47:33:8c:92:d1:3f:a4:1d:e1:64:5f:4f:b3:be:
14:b3:53:8d:e7:cb:3f:17:ed:ea:0c:87:41:78:47:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:07:C8:14:B1:AA:9E:16:79:15:C7:F8:D6:76:C0:31:94:98:88
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GGUHyBSxqp4WeRXH-NZ2wDGUmIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.32.0/24
Signature Algorithm: sha256WithRSAEncryption
85:93:7e:a4:8f:fc:38:0b:af:6d:d1:d4:76:9f:4a:28:a3:26:
08:f0:be:ff:24:45:02:23:15:1b:01:26:21:da:01:8a:3a:af:
b4:90:d7:bf:71:fa:45:b5:f4:a4:4d:24:c9:fd:34:42:83:17:
86:15:d9:f3:80:1f:ae:50:a0:55:3a:a7:71:36:7a:23:ff:2a:
98:7d:69:b0:03:33:e5:87:4c:d4:46:fa:7e:c5:b0:5d:ae:35:
a7:a6:48:3b:b7:e3:e4:70:3c:7a:f7:4b:02:2d:31:65:8b:c9:
84:88:1c:0c:e8:25:66:a5:e8:ed:a3:d6:2c:e2:a8:f1:8a:d4:
d8:f8:a1:55:f8:1b:41:4f:c9:28:8c:10:eb:cc:c9:a0:fd:f9:
c1:78:8a:df:3c:18:15:98:19:1d:66:13:67:c7:8b:0a:24:6d:
52:91:74:51:27:ac:b2:fb:bc:38:ab:86:92:b5:30:f1:e0:09:
21:fa:d1:78:a2:6e:98:9c:bd:6f:a8:bb:d0:59:85:41:f1:92:
10:7a:46:e0:9b:e1:e8:c0:16:b6:d0:55:b1:b0:74:c8:4a:70:
ee:ef:5d:30:ff:65:52:18:ab:d1:c6:a1:2e:c8:c0:f9:f8:f8:
45:dc:94:b0:c1:6e:d3:fa:d1:9a:bf:b5:99:fc:15:58:0d:41:
14:29:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:08 2024 by rpki-client on console-fra.rpki-client.org