Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/GwWYe9-w65W8rmbjhpSTvEO04Gw.roa
File: GwWYe9-w65W8rmbjhpSTvEO04Gw.roa (raw, json)
Hash identifier: SXT0ReqIP5OoHcjSf/QA8ZSaMxz1Tg93ZhlytrVLBlc=
Subject key identifier: 1B:05:98:7B:DF:B0:EB:95:BC:AE:66:E3:86:94:93:BC:43:B4:E0:6C
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 018CC64B6DC627A3A7AD69AC34FA74E1DB58
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/GwWYe9-w65W8rmbjhpSTvEO04Gw.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207027
IP address blocks: 91.227.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:c6:27:a3:a7:ad:69:ac:34:fa:74:e1:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b05987bdfb0eb95bcae66e3869493bc43b4e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:46:3d:42:43:80:e5:a0:5d:3c:21:8c:22:
85:b8:0b:05:5d:d8:9e:00:1d:9d:4c:4a:f5:32:2e:
56:6a:16:f8:a6:2d:8d:fb:4b:dd:f2:15:3d:09:b7:
cc:69:00:fd:f4:da:a5:6f:c2:1e:1c:53:c6:d4:1c:
a6:0e:bb:30:4f:43:8d:21:88:c9:3f:fa:26:1b:36:
31:f2:ab:69:46:54:99:a2:b6:55:e5:22:22:67:9c:
ff:95:65:58:4f:ed:9c:a6:22:c1:2e:35:7d:46:d7:
1e:6a:12:f7:0a:87:e6:9b:d5:02:c4:96:a8:99:b9:
79:07:e1:69:d5:14:bf:8f:c2:f9:fe:e5:9b:40:0f:
1f:ae:96:ce:ed:6a:7a:86:7e:52:22:c5:c5:a3:ef:
67:54:e4:b9:51:d9:0d:b1:5d:c6:92:01:bd:b6:78:
36:8a:de:4e:f2:15:3d:52:5c:67:8e:17:9b:81:e9:
d1:31:a5:e1:2d:10:7f:ef:91:47:ce:0a:e5:0f:ba:
18:e4:6d:3a:8f:63:72:d2:e6:01:a2:bc:d4:48:63:
4a:18:7e:39:79:45:c2:05:b8:30:73:55:7a:73:43:
18:08:5a:2d:8a:64:19:a7:ec:23:08:72:81:f2:f2:
31:57:a3:95:ed:83:0d:ac:9c:8b:85:f7:bb:8a:51:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:05:98:7B:DF:B0:EB:95:BC:AE:66:E3:86:94:93:BC:43:B4:E0:6C
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/GwWYe9-w65W8rmbjhpSTvEO04Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.16.0/22
Signature Algorithm: sha256WithRSAEncryption
28:33:72:7f:6e:16:7e:26:20:8e:19:b7:86:c5:f2:da:5b:1e:
76:9c:88:95:07:1d:c3:d2:0e:e9:5a:5d:da:99:01:2f:63:52:
6e:37:f3:60:70:06:ef:d0:77:05:0b:54:ea:3c:3d:34:98:5c:
b0:86:a2:54:8f:00:26:05:c4:c6:02:c2:86:2f:13:27:d1:3b:
1d:c1:25:d9:ae:fb:9c:09:34:08:ce:fc:ce:7b:f7:86:a1:a3:
1d:ad:d4:34:42:60:50:ad:b0:4c:5c:4c:e7:76:1b:42:d8:f8:
f1:28:87:e9:a3:8f:6d:a1:80:98:35:18:98:66:da:9a:fd:e8:
7e:47:b2:d8:3b:2e:ca:a0:0a:f6:6b:f0:12:aa:0a:ac:3d:e9:
c7:2a:99:39:39:e9:be:a1:b6:f7:73:29:a1:86:ee:1e:5a:fa:
27:17:3e:11:b7:0c:41:86:32:48:12:1c:08:47:70:0f:69:09:
b2:01:45:87:15:cb:17:10:77:6b:b1:8e:55:be:6b:a8:21:1c:
d4:8c:d9:e8:d0:b1:ff:62:6f:28:14:b1:d1:26:30:f7:43:8b:
72:3a:37:21:2c:cd:99:91:71:ec:01:fe:09:a1:7f:43:21:57:
85:51:89:02:da:38:78:72:6d:70:9b:02:75:58:2e:45:a5:92:
60:6f:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:15:02 2024 by rpki-client on console-ams.rpki-client.org