Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gtNQBUifUfoJWUKidx21Qee9bn4.roa
File: gtNQBUifUfoJWUKidx21Qee9bn4.roa (raw, json)
Hash identifier: dZ7bqvpWWP/XOwWALkICj1JiNc8kTHSpTi0QVYsr0Zw=
Subject key identifier: 82:D3:50:05:48:9F:51:FA:09:59:42:A2:77:1D:B5:41:E7:BD:6E:7E
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193006334081E7D00DE2418AC1B04C37A22
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gtNQBUifUfoJWUKidx21Qee9bn4.roa
Signing time: Wed 06 Nov 2024 07:32:01 +0000
ROA not before: Wed 06 Nov 2024 07:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:63:34:08:1e:7d:00:de:24:18:ac:1b:04:c3:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 6 07:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d35005489f51fa095942a2771db541e7bd6e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:44:3b:44:4a:16:4f:fb:33:4c:0f:76:a2:
b4:4f:b2:be:03:53:2f:a8:22:20:d4:14:1e:cf:0f:
26:98:24:60:5f:b1:7f:cb:ea:4f:35:ba:e4:83:97:
66:99:f2:06:18:0f:12:22:8d:d0:f8:77:72:df:fe:
e9:82:92:02:4b:9e:2b:51:cf:87:86:44:b6:0c:0c:
11:ca:13:fc:1c:14:a4:10:05:a1:58:cd:b2:04:8c:
ca:24:17:c4:d1:a0:3e:37:31:9d:63:b4:02:b5:09:
49:b7:da:f8:96:79:c1:f5:9c:fd:86:9a:f9:4c:a5:
da:98:3a:a0:5a:9a:5e:a7:5d:8b:5d:d2:aa:e5:46:
b9:f5:35:97:de:1f:67:cb:55:4a:fb:44:92:d2:99:
56:36:ca:da:e4:cf:f7:47:54:8b:7a:b2:e1:8a:1c:
73:0d:38:54:6e:66:66:ee:29:e8:e9:a9:08:80:c0:
bf:a7:61:4a:c5:56:f9:c8:5d:33:ad:68:33:fd:f2:
95:0d:d2:b0:ea:bb:a5:1f:b3:06:eb:ca:68:a5:96:
56:fc:e6:50:81:9d:b0:ef:6f:07:d2:2a:61:4c:5b:
d2:7e:07:78:4a:45:e9:cd:f8:22:9f:e7:55:82:74:
18:04:cc:6f:92:85:c0:cc:27:af:6e:df:d4:ea:b3:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:50:05:48:9F:51:FA:09:59:42:A2:77:1D:B5:41:E7:BD:6E:7E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gtNQBUifUfoJWUKidx21Qee9bn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
11:23:b0:50:c4:28:4f:aa:6f:df:bf:13:f1:f8:c0:b7:5b:e4:
b9:24:5b:a9:6c:6f:93:5e:c4:4e:e4:ab:b0:3d:d2:a5:c0:38:
6c:a0:b1:33:9a:ef:3a:b4:e7:75:3e:7c:6c:6f:bc:c5:a5:90:
58:98:de:f0:71:07:62:f3:2d:c9:49:6f:e1:a5:a0:82:0c:69:
bb:3c:a5:d9:e2:45:8c:d0:df:91:19:cd:0d:e2:e2:27:dd:b8:
84:84:4b:45:a5:8d:53:77:f0:19:02:24:c4:fc:7b:a7:ac:c0:
9e:83:ad:c7:ca:c2:bc:8c:31:76:4c:64:54:11:c8:62:14:60:
c1:43:86:66:d7:61:89:60:a6:fa:79:e5:cb:38:a2:ca:68:85:
30:2b:92:4f:72:7f:26:fa:e0:dd:72:7c:d0:19:af:fe:0b:01:
fe:35:2a:50:02:60:56:8c:26:88:e4:b4:92:a8:9d:c4:96:9e:
2d:5d:88:7f:54:31:03:26:54:d7:69:d3:5a:12:74:c4:f3:22:
2c:1a:8a:83:53:4f:93:74:5e:1d:b6:47:82:e1:10:6a:e7:a5:
2e:b8:36:4b:ee:b8:97:9b:e1:f4:87:ca:ea:11:87:6d:f8:db:
19:a7:ed:79:11:40:e8:02:58:81:d3:66:59:21:0d:87:4e:1c:
d4:6b:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:52:18 2024 by rpki-client on console-fra.rpki-client.org