Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/GQJzYd12l2gfDVPhlmR_aKRhEyA.roa
File: GQJzYd12l2gfDVPhlmR_aKRhEyA.roa (raw, json)
Hash identifier: xh5ah4k9XVXMjO9r80vTIDptCQjcqBplYD7VLD/QYvI=
Subject key identifier: 19:02:73:61:DD:76:97:68:1F:0D:53:E1:96:64:7F:68:A4:61:13:20
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 018CC424D431B64DAA815C8C83A6788471A0
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/GQJzYd12l2gfDVPhlmR_aKRhEyA.roa
Signing time: Mon 01 Jan 2024 08:29:57 +0000
ROA not before: Mon 01 Jan 2024 08:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 185.33.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d4:31:b6:4d:aa:81:5c:8c:83:a6:78:84:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 1 08:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19027361dd7697681f0d53e196647f68a4611320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:0f:86:b2:8b:e7:bf:9c:b4:e7:b1:14:7e:
8c:e6:4a:19:f4:93:c2:91:01:51:1a:ff:00:e8:16:
28:c9:b7:5c:6d:90:33:f9:1e:65:dc:23:31:bb:3c:
fc:27:c7:51:a2:93:42:0f:68:07:1b:e9:0f:99:9b:
5b:74:39:59:7d:68:7e:97:0b:72:98:17:4f:d7:44:
5f:8b:09:f1:c1:14:0a:9c:6f:7d:96:4a:82:cc:09:
85:40:cc:5c:d5:5e:fe:cd:21:9b:0f:2c:3d:4f:ac:
6b:55:99:34:74:a9:26:3c:17:ca:a2:bb:f4:f6:63:
78:9e:84:fc:73:ae:f0:e7:01:e2:91:df:f9:fb:94:
0c:47:42:57:28:74:e4:6b:74:6c:99:2a:60:c3:38:
55:2d:10:fc:64:8c:1a:ba:a6:23:51:b3:99:95:f7:
8d:43:19:c0:0b:63:a0:da:cf:cd:08:41:95:2b:bc:
91:68:24:a5:c2:b3:1e:67:d2:ef:04:4d:43:eb:51:
61:e4:21:0c:63:cd:e4:3a:18:2a:1e:6d:eb:5c:b3:
9a:92:8b:d7:b3:1e:0c:09:95:96:a4:8d:01:e6:0f:
50:66:10:cc:93:cb:9c:0e:a4:e6:2b:26:12:c0:5c:
a3:27:27:91:16:e4:bf:95:84:04:61:ba:c8:06:47:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:73:61:DD:76:97:68:1F:0D:53:E1:96:64:7F:68:A4:61:13:20
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/GQJzYd12l2gfDVPhlmR_aKRhEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.184.0/22
Signature Algorithm: sha256WithRSAEncryption
89:9a:6c:b6:e5:ee:80:f2:d3:80:6b:46:f4:24:7d:e2:a2:3a:
30:d0:27:b5:25:97:e7:56:97:fe:67:cb:24:34:2b:0d:ec:2c:
59:29:24:34:4e:43:6d:29:4d:6c:df:c3:04:6d:7e:79:2f:50:
f7:93:be:5d:53:34:40:07:af:63:3a:1b:31:fb:67:4b:9f:4c:
9a:4b:65:91:2c:da:1d:8e:c7:20:65:81:4a:28:fa:c0:8e:f5:
1b:36:8c:13:41:15:52:d8:35:34:b0:57:d9:d6:c3:83:0a:a0:
3c:05:bd:a9:89:22:08:6c:97:48:04:00:7b:ea:e1:17:fa:db:
ab:19:6a:d4:79:1f:44:d5:7b:df:63:a4:f5:25:0c:4d:2d:70:
75:85:3f:0c:e0:4c:d7:ed:ac:01:ce:4d:f3:f4:83:d8:26:ba:
2f:51:5a:5c:38:4c:b9:dd:af:85:3f:79:8c:3d:f1:94:c0:a4:
f3:31:b4:42:da:58:e3:22:3f:f1:4b:52:3e:b1:af:02:99:a2:
7b:95:67:ad:08:9c:d9:fc:19:a9:0d:22:43:b3:fc:82:fa:c7:
13:79:4a:cb:02:5b:41:b6:60:f8:00:79:64:0c:b6:fe:b4:f2:
ad:57:50:10:07:e5:ea:7b:20:68:ca:e4:7e:0d:b2:48:80:d4:
a7:de:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:29:15 2024 by rpki-client on console-ams.rpki-client.org