Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Gmz_kWmZp1KcIbBKSPvzju2TZWE.roa
File: Gmz_kWmZp1KcIbBKSPvzju2TZWE.roa (raw, json)
Hash identifier: zGjHAjoJw1ZSQdfUvck3Qoeh8l4EbdK8KFXgNiVum00=
Subject key identifier: 1A:6C:FF:91:69:99:A7:52:9C:21:B0:4A:48:FB:F3:8E:ED:93:65:61
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 018E7A181FF6A4B9C71EE9CA1C2E37740232
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Gmz_kWmZp1KcIbBKSPvzju2TZWE.roa
Signing time: Tue 26 Mar 2024 09:29:45 +0000
ROA not before: Tue 26 Mar 2024 09:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 193.151.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:18:1f:f6:a4:b9:c7:1e:e9:ca:1c:2e:37:74:02:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Mar 26 09:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a6cff916999a7529c21b04a48fbf38eed936561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:7c:6b:ae:0d:ff:3b:dc:82:ac:bb:c0:e1:
02:3e:a0:a8:0a:7e:dc:27:10:39:80:fd:36:61:15:
24:85:04:08:d2:bd:3e:9d:37:df:7d:e8:19:68:12:
86:ed:0e:4d:27:ac:92:00:ee:7e:8d:c7:2f:d7:ad:
5a:e4:bb:00:15:c7:24:3b:12:31:9d:f7:b1:45:5f:
06:c1:ae:24:e6:9e:e7:6d:94:cc:e2:26:c5:a7:8b:
09:b9:45:ee:14:6a:f8:e0:7d:72:00:c8:0b:3e:5d:
39:5c:22:9a:15:24:9b:54:26:ca:ed:1d:e5:1a:bd:
06:db:a8:36:a3:2f:98:f4:77:4a:be:be:0d:b7:4e:
49:ea:8d:6b:95:4d:35:ba:60:15:d0:74:bb:01:5f:
f1:a4:02:b7:0b:c4:86:33:5f:bc:c6:55:20:5a:7e:
8a:0e:d4:57:2e:8b:f2:7c:44:f9:78:b9:6f:71:23:
72:e7:47:7c:fd:98:3d:05:0c:e3:b3:45:f7:25:12:
93:9d:a6:30:3e:24:a3:2a:2c:2c:c5:c4:bc:78:7b:
3b:e6:6d:c4:27:62:74:00:16:71:a5:8b:f0:f8:03:
62:ea:fe:2e:49:e4:d6:da:0a:32:63:e7:22:de:e6:
a2:9d:ee:fb:81:97:dc:1b:d6:86:a3:11:fc:8b:ef:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:FF:91:69:99:A7:52:9C:21:B0:4A:48:FB:F3:8E:ED:93:65:61
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/Gmz_kWmZp1KcIbBKSPvzju2TZWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f7:4f:cd:3e:de:cb:de:4e:0b:20:af:7f:08:1d:21:97:ee:
5d:d2:8a:d3:c9:7e:04:28:aa:bb:41:38:e8:73:99:9d:93:2d:
cd:3e:02:49:4b:79:cf:71:df:b0:43:f6:cd:3f:fc:77:a0:9b:
50:b2:e8:53:09:92:48:87:77:b6:de:c3:b1:d6:6a:31:60:c7:
a1:1a:d9:7a:0d:d8:92:ee:85:ed:5c:fc:dd:a2:c1:5d:0f:b5:
f0:bc:26:9d:9b:05:9b:43:d6:32:03:ca:c5:c5:8c:bc:45:bc:
ca:36:ee:ee:4d:33:88:ac:85:dd:76:1d:75:80:46:e4:9c:27:
9e:34:3c:18:f3:39:5d:e2:76:16:b4:71:a1:b4:f4:7c:5f:77:
63:40:58:e5:5e:4d:66:84:42:fe:9c:cc:ee:51:28:6b:8d:4a:
04:7e:20:42:f9:bf:28:df:87:e0:7e:6f:4e:fc:28:d2:1e:49:
18:b8:1f:ed:cb:56:fa:82:91:67:5c:af:d6:d6:d8:99:8b:1b:
ca:02:52:6a:54:1c:6c:7d:08:e4:42:79:f2:c4:36:65:f5:01:
60:17:9e:1e:f0:39:66:c4:aa:ef:6a:e6:c7:8a:b2:11:a2:2c:
67:09:33:fe:4b:4b:21:df:21:91:9e:96:a3:b8:43:b0:24:ac:
e6:69:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:55:35 2024 by rpki-client on console-ams.rpki-client.org