Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/GAjcmqDja0Ch9gTV9uBoX2UHUXU.roa
File: GAjcmqDja0Ch9gTV9uBoX2UHUXU.roa (raw, json)
Hash identifier: of8PwfObhOIfEMmuHEaZncVkBzQp+8FuhLtTULNgspo=
Subject key identifier: 18:08:DC:9A:A0:E3:6B:40:A1:F6:04:D5:F6:E0:68:5F:65:07:51:75
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01934E34D559F4295F2FE1CCCC8F25B0727A
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/GAjcmqDja0Ch9gTV9uBoX2UHUXU.roa
Signing time: Thu 21 Nov 2024 10:11:45 +0000
ROA not before: Thu 21 Nov 2024 10:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24611
IP address blocks: 185.226.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:34:d5:59:f4:29:5f:2f:e1:cc:cc:8f:25:b0:72:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Nov 21 10:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1808dc9aa0e36b40a1f604d5f6e0685f65075175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:a8:3a:53:e4:7b:26:f2:58:1c:89:11:6f:
06:f2:d9:d2:2f:ba:6b:fc:ae:03:60:c7:dc:1d:07:
83:9d:f1:77:9d:8c:8a:da:d3:50:34:4f:66:43:60:
5c:7e:d2:c4:90:e9:a2:4c:e9:f3:91:cb:92:39:e5:
18:0a:16:0e:93:50:3e:ca:94:cd:d2:be:50:43:0a:
23:44:b8:ef:79:81:53:c7:63:89:5f:b1:de:55:d8:
b2:9b:1a:ba:ea:21:ab:23:c0:06:28:80:be:31:e7:
a7:90:23:f0:a3:17:19:bf:b2:1e:37:ab:c5:36:8f:
b3:b5:7a:df:05:3d:6a:7b:72:f8:dc:e5:f8:9a:01:
70:92:34:85:af:4f:e6:09:ab:ed:44:61:d1:b2:d3:
8d:55:fc:c6:8f:f2:96:aa:86:c1:61:58:36:ad:84:
69:28:5b:67:62:a6:49:3c:e1:ca:96:fe:45:1e:ac:
f9:7c:58:8b:29:23:27:74:8c:4b:7f:c5:8b:83:3a:
ce:07:b7:48:c7:3f:60:89:0d:8f:7a:81:38:29:c5:
e3:39:07:12:d8:5a:a6:b5:1b:9c:b7:6b:70:68:86:
0d:83:c1:b1:76:c4:b0:5b:e6:a0:3c:b0:ae:30:11:
07:c1:7e:19:62:24:a8:e1:c7:90:c5:16:54:b6:11:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:DC:9A:A0:E3:6B:40:A1:F6:04:D5:F6:E0:68:5F:65:07:51:75
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/GAjcmqDja0Ch9gTV9uBoX2UHUXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.22.0/23
Signature Algorithm: sha256WithRSAEncryption
85:15:96:68:b6:53:5f:6b:55:fa:7a:13:aa:5a:65:0d:a4:89:
42:af:e2:99:79:db:0f:12:44:4b:22:6a:e9:a7:50:6f:d7:de:
b8:bf:db:c5:1c:39:80:2e:6c:f8:11:03:a7:b5:70:67:1e:04:
e7:17:aa:2d:0f:eb:94:d6:e4:8b:82:2e:af:c8:9b:43:b5:ce:
fb:41:d1:9e:80:e1:0a:62:ab:cd:12:21:da:5f:b4:45:91:b3:
f8:f9:ec:56:9f:38:b1:a8:3e:91:5f:a4:2c:9b:3c:09:94:0d:
2a:60:04:7b:91:2c:0c:cc:cb:68:a4:e1:84:a4:5f:03:c3:e2:
15:c8:25:fc:0c:ff:97:0f:69:64:5f:eb:c5:d0:ea:81:7b:90:
43:5e:a7:b6:e4:fd:f3:6b:f2:0d:1c:a2:01:d1:43:ad:0d:b6:
a8:5a:c9:e9:13:b7:95:7d:e3:b4:2c:3d:01:94:17:13:f1:aa:
6a:e1:98:62:f3:be:c9:d1:6c:bb:fa:d0:4e:d8:b9:00:8b:1b:
da:dc:df:10:9b:d0:0d:bc:78:4a:4f:c4:01:3f:12:e1:d5:1d:
6b:ca:d0:82:8c:71:bc:ad:ef:67:26:b2:62:ca:2d:90:60:55:
b1:f4:fb:08:bd:ea:2c:af:52:68:7d:cb:11:0a:d2:1e:23:10:
c1:e0:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:25 2024 by rpki-client on console-fra.rpki-client.org