Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gCTiZMfao7qb3ujlwjRlW3mOTxE.roa
File: gCTiZMfao7qb3ujlwjRlW3mOTxE.roa (raw, json)
Hash identifier: csXsQgOfwgb28ugfpyYeeH0/o2ESbCPDPB9+DjzRADg=
Subject key identifier: 80:24:E2:64:C7:DA:A3:BA:9B:DE:E8:E5:C2:34:65:5B:79:8E:4F:11
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 018CC7933529A38BDECB76AD5CD7E6D55E81
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gCTiZMfao7qb3ujlwjRlW3mOTxE.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 193.134.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:35:29:a3:8b:de:cb:76:ad:5c:d7:e6:d5:5e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8024e264c7daa3ba9bdee8e5c234655b798e4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:9d:c5:db:12:60:13:ee:3b:60:85:05:18:
0e:53:26:17:64:db:1b:7d:df:dd:02:04:95:4d:35:
90:8f:16:70:9c:ab:7e:60:14:08:8f:b3:92:25:0b:
c2:be:06:8b:1e:42:a5:e7:8c:06:d9:f4:c2:e3:68:
51:2b:c3:33:c2:34:5b:61:3c:88:49:26:31:bd:11:
7d:54:0c:52:b9:50:45:8b:b9:ca:77:81:da:be:4d:
65:f9:95:3a:19:66:e5:24:78:eb:ee:10:96:a5:a8:
5c:c0:eb:32:23:e8:b8:50:1c:33:ba:2c:da:fe:f8:
9a:70:ee:6e:0f:8a:e6:f9:04:92:e0:1c:db:28:fa:
c9:fd:e0:74:eb:c7:a3:52:17:53:75:02:1b:60:3e:
55:12:94:2a:cb:83:47:f4:3c:f4:53:a7:95:21:7e:
15:c3:b7:75:c4:61:4d:47:a1:7c:7a:a3:2d:62:57:
99:ca:39:9a:55:02:a2:e8:6d:42:42:c3:30:65:20:
d3:37:13:5e:b5:f8:47:98:1a:ee:b1:55:b5:45:08:
c4:35:72:ae:78:73:0d:8a:c6:f8:65:6c:fd:02:49:
f3:6e:d6:a5:0d:8e:73:53:ec:d4:32:9c:db:b7:6f:
dd:a3:a5:ef:ef:43:87:4b:51:9f:40:da:62:86:73:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:E2:64:C7:DA:A3:BA:9B:DE:E8:E5:C2:34:65:5B:79:8E:4F:11
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gCTiZMfao7qb3ujlwjRlW3mOTxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.159.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8f:94:5e:1b:ec:f2:e6:50:b7:10:7c:92:d1:65:60:2c:3b:
05:89:85:af:65:4d:39:53:84:49:58:f5:16:76:35:fc:73:ed:
41:3e:80:dc:df:13:94:27:5c:43:0b:4e:32:d4:ce:fa:91:48:
04:25:2d:ef:9f:07:6f:8f:9a:40:57:b2:f6:0e:dc:ab:62:97:
2e:0d:5c:7b:42:7b:34:3d:06:74:17:f9:3a:75:d7:77:16:26:
36:b7:6e:2f:a8:e1:30:70:1c:4b:a4:c3:f9:51:59:e4:6c:12:
40:df:30:3a:22:f7:08:ce:48:c9:dd:83:0a:fa:00:5b:95:0e:
0b:e3:e7:31:d9:ea:bc:73:03:fc:35:53:89:84:5a:2e:fa:c3:
37:6e:47:91:a7:6b:fc:13:cb:57:b3:61:51:43:33:31:95:95:
3d:8b:d4:be:a7:5c:b1:1e:6c:d9:9b:88:dd:97:ba:3b:33:69:
8c:2d:2a:24:54:f6:08:f2:d7:e5:e6:d2:db:fc:70:10:9e:5d:
44:12:49:58:5e:3c:40:00:e8:fe:05:3f:53:a4:43:13:77:cf:
54:70:05:52:72:1d:19:6d:53:34:36:36:96:f2:f6:7e:91:ef:
66:c3:0e:ce:3f:56:8b:4e:93:15:04:37:1e:3e:32:2f:79:00:
a2:5d:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:54:56 2024 by rpki-client on console-ams.rpki-client.org