Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/gcvCpbE4khZXi9z_8xfPnNSvkmk.roa
File: gcvCpbE4khZXi9z_8xfPnNSvkmk.roa (raw, json)
Hash identifier: RDYX4HENu4pVoDvX9fJGmpKPRburQx/t/S1MMBLGq4Y=
Subject key identifier: 81:CB:C2:A5:B1:38:92:16:57:8B:DC:FF:F3:17:CF:9C:D4:AF:92:69
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 018CC9B87EC3C8D4C147C904076838F8F7B5
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/gcvCpbE4khZXi9z_8xfPnNSvkmk.roa
Signing time: Tue 02 Jan 2024 10:29:20 +0000
ROA not before: Tue 02 Jan 2024 10:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15543
IP address blocks: 193.26.11.0/24 maxlen: 24
193.138.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:7e:c3:c8:d4:c1:47:c9:04:07:68:38:f8:f7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Jan 2 10:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81cbc2a5b1389216578bdcfff317cf9cd4af9269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:73:48:79:e4:9e:f0:72:02:88:de:e8:e2:
26:2e:d7:18:9a:ac:d2:d6:66:cd:a4:ed:3c:36:3a:
82:e0:f3:4f:73:00:ce:d5:9f:a2:32:d0:e0:d3:d8:
96:fd:e7:cf:b6:65:9f:a0:e9:68:9c:a1:42:c1:af:
9a:6a:72:32:a7:09:02:6b:11:f8:3b:11:7c:72:86:
29:29:ec:e3:80:ba:37:26:10:60:fd:ef:6d:69:67:
fe:8a:ca:78:e8:09:95:f7:36:d1:44:aa:dd:ab:67:
76:7e:38:bd:04:73:8c:39:76:31:12:62:e1:99:da:
52:ae:51:8f:13:72:00:d5:d7:db:fe:04:df:67:80:
9c:68:7a:17:32:f7:2a:fa:b0:53:b8:7b:d2:1f:79:
d3:f4:f7:99:f1:59:be:65:09:3c:13:fb:7f:74:c3:
ca:ec:21:7c:55:7e:46:8c:59:72:88:27:b7:82:ea:
a8:6d:1d:65:0e:dc:ec:72:d2:45:13:72:6d:54:20:
43:b3:f7:6f:6a:ed:1e:74:ce:c6:37:d7:1b:18:94:
20:b1:ff:66:56:5c:4a:05:11:e2:2c:c9:14:9b:fa:
f8:5d:84:e0:ca:12:a9:b5:63:b3:8b:94:98:b7:37:
c2:c8:aa:37:b9:51:48:0a:aa:a6:9b:86:18:03:0f:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:C2:A5:B1:38:92:16:57:8B:DC:FF:F3:17:CF:9C:D4:AF:92:69
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/gcvCpbE4khZXi9z_8xfPnNSvkmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.11.0/24
193.138.64.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ad:f4:6a:80:50:a5:9c:e1:60:2f:42:b3:7b:82:4c:81:8f:
31:eb:e9:a1:63:89:4d:60:ff:6d:50:50:d4:ff:f1:05:bd:fd:
d7:3b:9f:ff:24:4b:56:80:33:02:dd:a8:6d:1c:81:eb:1a:d9:
9d:e8:f0:3b:e8:01:21:8d:c5:39:1f:f2:5d:8a:70:ae:d3:94:
a9:7a:78:ae:3d:bb:6f:c0:ca:8d:04:54:c6:62:43:92:6f:44:
f6:32:b7:f3:65:90:be:8a:11:3e:d6:7b:90:75:da:61:f3:af:
8e:62:42:a0:bb:cf:44:a3:a8:2a:e5:72:b2:1d:04:1f:b5:88:
33:d9:4d:dc:0d:9b:aa:59:4b:a3:43:ad:81:ef:c7:aa:cb:28:
fc:6e:18:c7:78:2b:f9:9d:82:10:20:40:a6:2a:ad:27:03:ae:
90:78:27:a9:d5:25:00:c2:3f:9d:2a:fa:d5:d7:bf:b7:55:86:
c8:86:75:90:37:96:26:70:d5:d1:50:34:3a:47:7e:fc:83:b8:
f4:f4:bb:6a:ad:62:d8:be:02:05:16:19:d7:71:c8:1c:3d:a7:
ce:8f:f4:1b:03:a3:2e:e3:3e:af:a4:a9:96:88:53:19:d0:6e:
67:62:2c:88:33:53:00:5a:20:0d:5a:10:54:bb:ed:62:29:2d:
04:1f:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:16 2024 by rpki-client on console-fra.rpki-client.org