Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/Gvf8Z-skBo497-jnOSFRSFJtsTQ.roa
File: Gvf8Z-skBo497-jnOSFRSFJtsTQ.roa (raw, json)
Hash identifier: B6L1S8kH3w5rOBcyeVPu8ipBEQrD8yvPF9A1/kdIkq8=
Subject key identifier: 1A:F7:FC:67:EB:24:06:8E:3D:EF:E8:E7:39:21:51:48:52:6D:B1:34
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 018CC26CF8692F8640F798F94BF9157B2AC9
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/Gvf8Z-skBo497-jnOSFRSFJtsTQ.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50423
IP address blocks: 193.105.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f8:69:2f:86:40:f7:98:f9:4b:f9:15:7b:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1af7fc67eb24068e3defe8e739215148526db134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:41:6f:7d:80:5c:05:d2:bf:7f:e5:24:a6:
aa:81:50:70:63:60:3a:99:ca:73:c0:84:7d:94:2e:
65:5d:4d:3b:c6:ed:f5:47:ae:24:97:00:d2:a0:a3:
6c:24:49:ef:dc:54:f6:76:d1:ca:41:69:dd:9d:a0:
56:9d:03:ad:e5:1e:d6:00:57:f8:b3:42:70:7d:0e:
8f:94:4b:db:cf:b3:6a:38:db:00:4b:0d:f2:fe:87:
37:10:aa:b0:dc:89:d9:57:9b:14:52:cf:5b:df:2e:
49:8d:0c:7e:c6:46:0e:e1:12:1a:ff:e7:6a:ab:b0:
93:e6:40:43:26:3f:88:8f:9f:fd:12:00:20:44:d0:
17:d2:e8:e8:2d:5a:dc:27:ea:20:a3:68:4b:53:8b:
25:ae:b5:54:8e:9c:20:51:f0:8d:8c:45:91:cc:fd:
2e:ad:6d:a9:66:29:de:0e:72:91:1e:35:88:43:7e:
9c:62:b8:b7:4a:af:7f:32:20:48:ba:28:18:34:8c:
d5:e8:fa:fb:d1:a9:52:e8:19:8c:03:6f:60:67:67:
bc:c3:eb:1f:df:9b:36:fc:51:82:0b:71:7a:c7:e1:
d6:b5:2d:89:8d:80:e5:98:ce:03:49:20:1a:67:60:
19:30:d9:71:63:5c:c4:40:72:7e:33:07:9c:9e:e8:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:FC:67:EB:24:06:8E:3D:EF:E8:E7:39:21:51:48:52:6D:B1:34
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/Gvf8Z-skBo497-jnOSFRSFJtsTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.20.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:22:68:ea:b1:97:1d:ea:ec:d1:33:b6:90:c7:28:3a:c9:
cf:d3:e6:86:7a:47:f9:a0:85:6e:d9:22:f1:63:9f:5a:8d:38:
60:24:30:63:54:9d:93:24:48:5e:05:13:7c:92:9d:ee:34:1b:
d5:4d:e2:ec:9b:c5:e1:0a:7d:96:c0:21:a8:2c:e4:28:dc:91:
39:04:5c:5f:78:1b:0a:00:9a:71:9e:62:6f:08:b6:19:03:30:
fa:4b:37:c2:45:45:f4:a9:ae:35:14:79:cb:a0:4a:05:10:3e:
e1:84:13:80:06:48:c9:c5:97:25:28:8f:54:fb:4f:46:ee:a9:
c5:f6:28:e9:da:d6:d1:5c:fc:19:bc:26:43:a7:8e:b5:12:a3:
c6:37:9f:cd:ef:74:b1:a2:5b:cd:cf:8c:d0:ff:1a:b4:f4:d1:
28:ae:83:2d:30:36:5c:3b:ac:d8:4d:c8:4a:f0:fa:e4:61:ca:
6e:c1:8c:79:76:18:26:1e:fd:db:61:22:42:d2:38:08:2f:fd:
d4:eb:61:93:4d:60:1e:45:66:a3:00:5c:6e:06:b9:17:92:16:
6b:b8:3b:f9:0f:89:97:22:c3:af:5a:5a:0c:53:4f:34:64:27:
32:59:e5:6a:23:f9:3f:72:da:7b:67:41:a1:a9:1f:41:1f:27:
e3:88:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:03:07 2024 by rpki-client on console-ams.rpki-client.org