Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/gpppUrsMj1LPNJjZDG6ZXPC5ysY.roa
File: gpppUrsMj1LPNJjZDG6ZXPC5ysY.roa (raw, json)
Hash identifier: LwbRF4oG4KdLd1d+bf75ZEDSGvaelW+s094F2tLFtRM=
Subject key identifier: 82:9A:69:52:BB:0C:8F:52:CF:34:98:D9:0C:6E:99:5C:F0:B9:CA:C6
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 018CC8DCED819B35473F412D8620C56D48AD
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/gpppUrsMj1LPNJjZDG6ZXPC5ysY.roa
Signing time: Tue 02 Jan 2024 06:29:31 +0000
ROA not before: Tue 02 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.211.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ed:81:9b:35:47:3f:41:2d:86:20:c5:6d:48:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Jan 2 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829a6952bb0c8f52cf3498d90c6e995cf0b9cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:15:ff:8c:2a:35:1f:fd:31:79:c5:8b:00:33:
9e:cb:fc:14:ec:1f:81:6b:e9:92:d8:9d:c4:6f:fa:
14:49:6e:68:b4:5e:50:7f:e5:0a:f0:19:03:5b:b0:
07:bb:ac:c7:39:b1:ce:56:80:61:4d:2d:74:57:39:
07:b8:48:23:9c:f3:d7:d1:94:dd:20:b5:3e:14:2f:
97:65:3f:ea:28:ec:54:c3:fc:44:d4:23:4a:c3:f1:
09:de:cc:2c:aa:09:ef:ba:f2:eb:f4:2a:00:d1:63:
5d:b6:f5:4f:18:ba:60:e9:2a:31:54:6c:bd:43:fc:
9f:9a:11:4c:c8:63:ba:2c:a5:d5:51:46:55:57:cd:
9b:90:8d:27:14:d8:eb:49:e1:48:e6:2a:a1:6c:f4:
d3:b9:9a:8a:36:eb:72:6c:44:6f:b6:a4:1e:45:5a:
43:56:a1:b6:7c:99:87:97:a4:33:0c:8a:d2:6e:45:
ea:51:bf:ed:c3:b9:6b:cb:67:56:89:61:15:7d:47:
5e:bc:da:01:5b:14:07:a4:3a:c4:52:4e:f5:f4:b9:
63:c6:21:ac:81:a8:68:eb:97:61:ca:ca:62:da:71:
c5:95:98:62:2d:de:87:62:84:79:9d:f3:1e:0b:b2:
13:15:74:62:31:1f:38:90:a0:c7:75:1e:b8:f6:a0:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:69:52:BB:0C:8F:52:CF:34:98:D9:0C:6E:99:5C:F0:B9:CA:C6
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/gpppUrsMj1LPNJjZDG6ZXPC5ysY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.208.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d7:4f:9b:61:9e:de:46:ac:9b:65:10:fe:47:e3:f2:93:05:
5c:18:e5:0f:33:bf:89:a0:56:b5:55:e6:af:a9:4b:d4:b3:c1:
fd:6c:e0:2b:d9:ee:6e:c3:6c:8f:d4:3f:76:fc:e9:83:08:34:
c8:3c:a6:e0:01:79:1a:74:1b:4e:b0:6b:2c:08:2f:fa:f7:ab:
21:87:9d:2d:4c:f4:97:84:6a:05:a6:59:75:54:90:a3:4a:09:
08:32:fe:03:96:38:7d:e0:c8:5d:14:a6:87:1b:cb:e6:66:60:
e3:77:f7:62:19:77:85:09:f6:74:35:d7:b4:dc:32:1d:5d:c0:
ed:e2:87:29:f3:e4:b0:c3:6a:9e:b4:a2:75:4f:cf:0f:2b:53:
b9:ad:f5:85:2c:17:f5:ac:f1:a4:30:9f:ca:a0:58:d2:de:21:
2b:e0:6f:f9:af:7a:64:68:00:36:b2:61:4a:06:70:0e:d8:28:
74:5f:07:5b:1e:57:ad:d4:02:fc:2d:62:d7:13:e3:76:5e:27:
5b:c2:98:a0:29:df:e6:c4:ca:c2:8a:74:ab:ea:7a:74:79:90:
d8:f2:69:0c:21:ee:8b:05:d8:ea:8f:30:33:5b:e8:90:ce:57:
2e:a4:1f:e3:49:ab:52:cf:4c:c9:b1:53:63:21:b0:fb:a5:bb:
1c:1e:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:16:32 2024 by rpki-client on console-fra.rpki-client.org