Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/GDTYQ4p_I-GPLjLpf2hE-P_WuJE.roa
File: GDTYQ4p_I-GPLjLpf2hE-P_WuJE.roa (raw, json)
Hash identifier: Djt0Z/cki0NSqwccXdAJf5RHYxSzeFHzngEdTm3x8OA=
Subject key identifier: 18:34:D8:43:8A:7F:23:E1:8F:2E:32:E9:7F:68:44:F8:FF:D6:B8:91
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0190B50EA5C495B52FE6ACB0569A8AA74D1F
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/GDTYQ4p_I-GPLjLpf2hE-P_WuJE.roa
Signing time: Mon 15 Jul 2024 06:22:34 +0000
ROA not before: Mon 15 Jul 2024 06:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207294
IP address blocks: 77.228.237.0/24 maxlen: 24
188.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:0e:a5:c4:95:b5:2f:e6:ac:b0:56:9a:8a:a7:4d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jul 15 06:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1834d8438a7f23e18f2e32e97f6844f8ffd6b891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:c1:47:44:a2:17:38:10:17:3e:f2:5b:40:
1e:30:4a:48:62:0a:7d:30:24:63:f7:d3:58:e9:96:
e0:44:85:0c:83:c3:74:a2:b4:e4:1f:c0:bf:e0:96:
34:3f:3c:57:bf:63:1d:24:ab:d0:df:26:bf:5a:16:
db:2a:00:40:4e:59:53:5d:77:f1:a0:21:bb:8b:b0:
60:df:f8:5f:4b:10:31:47:50:df:e4:61:50:08:7d:
a8:8d:ea:97:cf:cc:e7:9c:c2:c3:3e:b8:d7:90:e8:
1a:82:01:e7:fb:a1:d8:30:a4:e2:70:04:47:75:fe:
9f:b5:b0:40:50:8d:19:03:22:77:d6:47:0c:dc:3b:
8b:e4:96:d0:c4:0c:51:0f:26:24:27:ef:19:dd:72:
c7:35:44:c4:19:20:0c:84:0a:69:97:46:bc:32:39:
04:d5:b7:58:a6:61:0d:f1:e4:17:17:04:b8:ea:f7:
f3:2d:f5:68:e3:98:d2:39:e5:a7:11:e9:76:43:6a:
19:67:d8:d6:7c:1c:9f:db:a7:95:e7:ae:3f:15:2b:
24:df:35:e7:0e:9f:6d:5c:44:e6:d2:45:c8:4e:cb:
ed:33:86:28:fa:05:b0:b9:9a:d2:a9:62:b2:ed:08:
42:db:de:e8:1f:ad:fa:e9:1c:e5:5d:71:26:c1:97:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:D8:43:8A:7F:23:E1:8F:2E:32:E9:7F:68:44:F8:FF:D6:B8:91
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/GDTYQ4p_I-GPLjLpf2hE-P_WuJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.228.237.0/24
188.86.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:64:c0:be:cf:fd:f3:60:db:ee:88:d0:ec:ed:ce:05:f8:8d:
d3:16:c9:33:b8:2e:b2:88:c5:34:cb:76:fb:3e:f3:ed:21:6d:
07:43:82:c6:dc:f6:e8:e0:43:74:3e:97:92:db:d6:fd:a6:09:
e2:b0:28:b7:fb:72:e3:e3:21:ec:b9:ab:0f:3e:0d:8e:67:16:
d9:1b:d7:ba:38:14:be:96:f7:b1:2c:b7:61:9e:80:f5:24:1c:
fb:83:31:67:4b:93:1c:f6:a8:11:44:06:c1:02:69:bf:f0:54:
cf:da:9a:ed:35:01:ff:fd:58:84:f0:0b:d1:88:0b:9d:37:0d:
57:ac:a2:30:23:50:d2:79:f1:ae:e8:66:40:0c:a2:f0:6d:86:
91:a3:f6:78:d8:7b:00:42:af:72:b3:7b:c0:03:fb:fc:1e:a7:
b3:4d:ea:b6:a2:7a:71:6a:9a:0e:a0:be:cc:88:21:44:b5:df:
56:54:cf:be:2c:f4:7c:94:8c:ff:24:08:cd:3e:f1:f0:30:59:
f5:0b:38:fb:3d:34:99:f7:02:27:31:a7:bc:9f:9b:95:df:23:
2b:35:d7:27:e6:8f:e4:dc:7d:44:c9:1e:68:e8:5c:ef:f5:d4:
9e:4f:29:3f:f0:dc:e1:c1:e8:66:b4:31:36:e8:87:40:1e:07:
9b:52:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:28 2024 by rpki-client on console-ams.rpki-client.org