Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GNqt9s805yU3Z8BjeixIc0Scxro.roa
File: GNqt9s805yU3Z8BjeixIc0Scxro.roa (raw, json)
Hash identifier: DBdp3f6BtaFS1Z6iwVW9Al3thOmZaCoPcGhnBQiZt1Q=
Subject key identifier: 18:DA:AD:F6:CF:34:E7:25:37:67:C0:63:7A:2C:48:73:44:9C:C6:BA
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 018CCA99EB82C3ED3352625BCF4EAAEAFEE8
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GNqt9s805yU3Z8BjeixIc0Scxro.roa
Signing time: Tue 02 Jan 2024 14:35:34 +0000
ROA not before: Tue 02 Jan 2024 14:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42962
IP address blocks: 5.181.224.0/24 maxlen: 24
194.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:eb:82:c3:ed:33:52:62:5b:cf:4e:aa:ea:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 14:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18daadf6cf34e7253767c0637a2c4873449cc6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:36:79:15:af:36:d7:69:54:c9:93:17:20:
3f:bb:e9:24:5d:e0:14:17:d8:8b:17:47:0e:aa:35:
10:1a:2e:19:90:39:cf:e2:20:9f:66:e9:0b:7d:75:
0e:9b:fc:ac:23:4a:65:5a:a2:97:f0:49:9a:22:b0:
73:f1:3e:1f:c4:80:f7:bb:10:99:7f:86:f6:51:50:
a0:4e:78:a6:fc:f9:0f:85:3f:d3:b6:7e:ec:60:e0:
07:a5:63:8d:0a:83:23:7e:c5:6f:ff:e7:2d:2d:83:
fb:11:57:9a:5f:37:ac:51:fc:6b:78:b7:cb:a0:e5:
3d:1d:aa:cb:a3:f8:1a:07:b4:56:83:fe:2e:ed:a9:
c6:72:80:59:21:d0:78:2c:e2:30:d8:72:a9:6c:68:
f9:f1:dd:ae:50:3d:6d:bf:bc:54:4c:1d:dd:f2:9d:
c3:86:78:17:ca:57:d1:0a:c0:3f:e6:82:f2:18:92:
2e:1d:08:18:7e:b1:ad:96:e0:06:d0:4b:54:6c:27:
2c:fc:1f:b6:d3:a3:96:2e:3a:6d:07:14:9d:09:dd:
d0:ce:05:bf:c6:43:db:9a:2a:e5:43:cc:06:ca:87:
f8:93:f5:da:2b:c6:6a:15:c5:75:fa:64:58:b3:6d:
36:38:03:61:7e:b3:31:8f:83:05:97:52:ef:28:10:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:AD:F6:CF:34:E7:25:37:67:C0:63:7A:2C:48:73:44:9C:C6:BA
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GNqt9s805yU3Z8BjeixIc0Scxro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.224.0/24
194.61.237.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f2:16:e3:49:39:b9:e9:77:a1:b6:60:e4:1d:af:e2:87:be:
2c:3e:fb:94:de:52:76:0d:0e:23:93:d9:ff:1f:c6:4d:ec:48:
ab:23:b1:a9:9e:cc:bd:da:40:1b:b5:f0:b4:e1:31:00:d6:a6:
28:7d:27:a6:55:cf:2f:1a:49:19:80:60:7d:27:19:b8:12:82:
94:b8:9c:9a:5e:53:af:a9:3d:bd:5a:00:eb:ca:09:84:80:10:
77:56:37:ae:82:47:16:c5:20:51:e5:01:da:52:cc:3d:aa:73:
78:e3:d2:57:0a:bf:aa:7d:76:6b:48:b2:24:f0:14:35:eb:66:
61:bb:22:1c:6e:42:58:4f:1c:d4:32:0f:32:96:7f:1f:94:fd:
89:a4:32:db:4c:26:68:86:d9:62:c8:d1:39:00:5a:2e:90:39:
23:ef:7e:c5:f5:ec:e6:cc:de:6d:e4:8e:62:25:c1:9a:7d:23:
cd:cf:bc:79:1b:f8:70:e5:fe:69:30:0f:12:ff:4d:07:d1:8b:
6e:a1:18:8c:1a:58:5b:37:f1:bb:ce:3c:ce:39:f0:59:f1:69:
c0:f2:6d:ae:e4:f6:ea:42:8b:de:5d:25:d8:18:d9:4d:84:4f:
72:8b:ad:24:a2:10:ba:20:57:6b:1d:cc:c2:92:91:5b:ae:e4:
15:75:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:24 2024 by rpki-client on console-fra.rpki-client.org