Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GUEySi2quZUATasIJpC9uWDiShA.roa
File: GUEySi2quZUATasIJpC9uWDiShA.roa (raw, json)
Hash identifier: +Mg47HW/ZDayqfRfXyjxtQdMCC7YDkHMLpV5W9Kq4j4=
Subject key identifier: 19:41:32:4A:2D:AA:B9:95:00:4D:AB:08:26:90:BD:B9:60:E2:4A:10
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D6C8D2D1EF8F665D101016AE174A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GUEySi2quZUATasIJpC9uWDiShA.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29166
IP address blocks: 195.65.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d6:c8:d2:d1:ef:8f:66:5d:10:10:16:ae:17:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1941324a2daab995004dab082690bdb960e24a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:68:26:c2:51:55:14:15:76:b9:97:0b:43:
4f:b7:4c:d1:52:26:b9:83:ab:23:fe:a2:05:35:63:
bb:31:ca:92:0a:81:9c:b8:61:fe:aa:5b:86:9e:87:
3b:2a:e7:dd:da:1f:00:8b:da:08:94:66:db:0d:cf:
eb:ff:3c:36:f8:0c:8e:e9:81:48:ce:f2:eb:be:2f:
7f:3e:dc:39:84:5c:f2:39:0d:3f:65:20:4d:91:bb:
88:7f:33:cb:b0:7c:55:9c:27:24:cd:78:05:d0:a5:
29:91:48:e0:d3:c2:ff:fc:63:b6:a2:9b:c8:1c:59:
53:67:c3:a8:dd:6b:d1:3e:aa:78:c1:cf:b6:6c:0e:
b1:3c:06:59:16:9a:18:87:fa:ac:36:ca:5d:0c:a2:
52:de:53:13:8b:06:45:40:68:00:be:8a:09:29:96:
bd:aa:b3:be:d8:77:69:0e:5f:8f:2b:52:98:07:4d:
0a:c4:fc:c1:7f:ed:84:3c:62:24:24:44:c0:27:65:
1a:7d:87:04:19:90:7a:5e:e7:88:2e:80:a5:74:84:
42:ba:81:13:96:14:60:fe:58:7e:58:50:bb:17:d9:
43:43:14:29:d5:ba:8d:cd:dc:b7:1b:6e:55:52:56:
1c:bc:ce:dc:e1:17:15:fc:10:6f:55:5f:b3:17:6e:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:41:32:4A:2D:AA:B9:95:00:4D:AB:08:26:90:BD:B9:60:E2:4A:10
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GUEySi2quZUATasIJpC9uWDiShA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:af:b6:8e:a4:6e:40:03:d6:7f:b1:c7:6a:bd:6b:60:8d:43:
a6:be:37:ef:53:3d:c1:c0:8d:91:8d:4c:c5:dd:2c:e6:90:26:
9d:1f:8f:08:80:9c:b6:e1:ed:33:dd:10:89:a7:ae:e6:a8:6d:
eb:f2:63:58:98:ab:d7:9f:d9:d8:58:39:dd:4a:22:4d:15:f2:
24:8a:a6:f6:cd:47:f8:c9:b2:8b:4f:03:09:ad:52:db:d6:f7:
44:c1:12:b6:36:8a:e1:56:68:47:f6:bb:8c:fa:d1:f6:17:c0:
b7:59:da:24:43:c5:18:53:a5:3b:de:2f:11:8d:c6:4d:62:bf:
73:d6:12:24:b5:f1:3a:2c:0c:b5:c0:e2:b8:5d:39:75:b9:b3:
c6:ee:d7:0a:4c:79:7d:96:54:91:44:c1:1a:8d:ba:29:27:9e:
3d:30:91:9a:ab:09:38:12:27:8b:6a:80:22:0c:55:9c:63:48:
ab:03:85:70:ca:fe:0b:b8:33:55:90:75:9b:ff:08:70:af:89:
b1:f0:d3:99:f4:a6:b2:31:70:ee:97:ef:a2:12:81:34:84:d1:
ab:c8:90:e0:c3:e2:42:db:33:5f:26:07:bc:6c:84:35:3f:2a:
3c:e2:4f:50:9a:60:41:af:42:dc:ab:08:77:a3:29:e3:dc:a4:
c4:e7:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:54 2024 by rpki-client on console-fra.rpki-client.org