Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/GhI_uqIN6FCBVPK5jojGXoOtsgQ.roa
File: GhI_uqIN6FCBVPK5jojGXoOtsgQ.roa (raw, json)
Hash identifier: GzH1lG2rFfPqZv6J7BiSbJwJuzIKZqxW1fgL+6qFxkc=
Subject key identifier: 1A:12:3F:BA:A2:0D:E8:50:81:54:F2:B9:8E:88:C6:5E:83:AD:B2:04
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 018CC8010A55D5A9F450775D9C99F90433AB
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/GhI_uqIN6FCBVPK5jojGXoOtsgQ.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31645
IP address blocks: 194.32.84.0/24 maxlen: 24
194.32.84.0/23 maxlen: 23
194.32.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0a:55:d5:a9:f4:50:77:5d:9c:99:f9:04:33:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a123fbaa20de8508154f2b98e88c65e83adb204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:1e:0d:e8:89:d4:1b:f4:56:d3:5f:8d:9e:
28:95:83:60:25:49:42:8f:a2:17:25:01:7c:ec:ea:
ac:5e:3a:5e:5c:84:d4:dc:d2:ae:c4:34:21:25:2c:
fc:ff:e1:30:c1:62:28:16:2e:92:ed:9b:42:bf:70:
d4:f7:87:52:dd:41:98:bd:c6:7d:ec:9b:fe:bb:2a:
c8:9b:5f:ce:14:95:f2:bd:31:d4:38:65:93:4d:57:
15:f4:4a:47:ae:c0:4c:eb:31:49:ee:f6:57:f6:ee:
4b:bc:bf:ba:10:67:65:1f:26:1c:98:ff:f3:e4:99:
7f:6c:9b:63:1d:76:84:a8:6d:e8:85:b8:83:c0:54:
b1:b5:cf:75:40:e2:e2:d3:af:ff:8a:e6:8e:cb:98:
41:74:e0:8c:de:6d:4d:5d:9e:c0:01:73:18:a7:14:
3c:d6:ea:dc:50:70:20:d8:36:f9:06:ae:80:66:1c:
b9:b8:df:81:20:a2:f1:f4:c5:5f:a9:5e:88:fe:ab:
1f:78:93:9e:62:e1:cc:46:c4:da:af:a7:a4:fc:fd:
2f:b6:b4:a0:43:1a:e3:4b:33:2d:f1:aa:6a:21:0b:
b9:4a:af:c7:73:77:5f:35:cc:18:a7:8d:9f:76:82:
a6:1d:52:2c:d4:23:4b:1f:77:ef:8f:3a:31:97:15:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:3F:BA:A2:0D:E8:50:81:54:F2:B9:8E:88:C6:5E:83:AD:B2:04
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/GhI_uqIN6FCBVPK5jojGXoOtsgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.84.0/23
Signature Algorithm: sha256WithRSAEncryption
05:22:0e:9b:d8:98:e2:c6:a9:e5:16:b1:5d:58:f0:1e:67:19:
94:18:9d:8d:60:0c:03:99:18:64:3a:b5:b3:81:0a:47:8a:48:
03:e3:3c:9a:5a:2e:84:e4:94:5d:54:39:36:c5:62:49:06:48:
1b:53:f8:18:fe:16:08:f6:6f:86:01:55:0c:85:a6:b6:61:43:
fc:1c:6b:44:2b:6f:42:42:0a:6f:9a:ec:13:4c:e5:c7:4f:82:
30:79:e8:46:bd:cc:9d:45:e4:e2:35:d2:33:3d:8e:15:ff:e3:
ad:86:d7:7e:51:5d:e1:63:17:e0:8f:34:98:01:13:99:34:31:
0a:6b:49:3c:e8:66:df:7c:c8:28:8f:f8:c7:b0:01:99:ab:af:
ce:c8:e1:d8:5a:5f:59:43:c6:32:25:6b:21:b2:63:ee:65:a6:
f6:b9:31:24:91:d5:3c:4e:ae:61:61:47:c5:4b:16:0e:10:b8:
8c:8b:ef:46:62:51:30:4b:d1:16:d9:5c:36:80:48:a3:47:28:
a2:dc:30:28:d9:1f:b3:33:1f:0c:74:c5:58:81:90:a6:55:a3:
16:11:32:9f:fd:5e:21:72:20:32:76:c5:b1:c4:28:3a:e8:7a:
dd:7c:46:ca:ad:7d:42:cf:29:ac:a9:9d:2f:c6:9a:8f:b4:32:
e8:b3:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:14 2024 by rpki-client on console-fra.rpki-client.org