Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gmQ5O6mFy7bez80R_ms_gGdrX3A.roa
File: gmQ5O6mFy7bez80R_ms_gGdrX3A.roa (raw, json)
Hash identifier: WhE07W9J+pXmmV5p18EmiMCxu7oTYqHlki7IB3h2f+s=
Subject key identifier: 82:64:39:3B:A9:85:CB:B6:DE:CF:CD:11:FE:6B:3F:80:67:6B:5F:70
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018EE68BD344A2ED04F822FB7B03936AED98
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gmQ5O6mFy7bez80R_ms_gGdrX3A.roa
Signing time: Tue 16 Apr 2024 10:55:06 +0000
ROA not before: Tue 16 Apr 2024 10:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39249
IP address blocks: 95.164.71.0/24 maxlen: 24
195.149.96.0/24 maxlen: 24
195.214.212.0/24 maxlen: 24
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:8b:d3:44:a2:ed:04:f8:22:fb:7b:03:93:6a:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Apr 16 10:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8264393ba985cbb6decfcd11fe6b3f80676b5f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:11:53:1b:c5:f4:b0:b2:0c:28:cf:38:89:
2c:b7:ab:7f:a5:a5:c0:3b:90:64:51:7d:9d:c0:0f:
f4:01:fa:2e:af:1c:33:a1:a7:55:3b:6b:81:32:f0:
83:80:50:9e:58:58:68:24:0e:0a:be:50:3d:11:66:
2c:35:16:23:bf:27:51:7b:d6:dc:61:14:d2:0d:d4:
37:8f:63:6b:53:2f:42:fa:20:8a:6e:3a:35:76:79:
f1:b0:80:47:c6:aa:01:80:8f:10:63:c6:85:ec:56:
12:fc:ff:a7:ef:b3:39:c1:94:5e:98:f4:29:5d:59:
f9:93:76:17:20:4d:66:a2:10:52:07:37:e4:b3:ac:
29:e4:3e:b5:e9:c6:af:ab:c7:d5:58:7c:92:4a:4d:
79:28:51:57:fb:57:40:db:9d:54:f4:b1:12:70:32:
62:7b:d1:3c:78:94:6a:e1:73:79:78:b3:32:a2:12:
74:4c:3d:3d:48:03:cf:c6:fe:c5:83:1a:09:32:f9:
40:c8:cb:01:a3:87:6b:2e:e8:50:e1:3f:5b:83:02:
70:50:7d:4b:b0:d7:70:34:9c:26:05:46:a3:e2:b1:
87:15:38:ce:0d:d3:f4:2f:45:54:de:b6:0a:32:22:
37:9f:dc:62:9b:0c:a1:01:5b:e2:7b:23:70:72:b9:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:39:3B:A9:85:CB:B6:DE:CF:CD:11:FE:6B:3F:80:67:6B:5F:70
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/gmQ5O6mFy7bez80R_ms_gGdrX3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.71.0/24
195.149.96.0/24
195.214.212.0/24
IPv6:
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:db:2b:fd:d5:28:82:3b:5d:ff:7c:31:22:b0:e8:a7:89:c4:
8a:cf:61:a5:b7:15:04:53:78:f7:61:4b:9b:87:4e:09:74:c4:
46:66:09:4b:ab:26:49:54:b4:21:d1:94:14:d9:38:e9:be:9e:
db:a7:b1:fd:8c:24:cd:2e:2c:a5:dc:6e:b6:d2:14:b4:98:fc:
87:cd:61:a9:74:67:15:99:88:6f:15:73:b7:10:5f:6a:19:4b:
05:26:97:70:4e:44:93:be:af:45:49:40:85:03:7e:00:1a:38:
bf:ee:27:bb:6c:99:01:96:c9:60:1c:e2:f4:1c:95:31:25:4c:
20:f9:83:74:4d:28:bc:46:a1:22:8e:a9:81:f5:f2:2a:6c:4a:
66:8d:ba:58:00:e8:d6:fc:47:29:da:bd:00:b5:64:36:8c:e9:
a9:17:90:0b:6f:94:21:cf:0e:97:ab:f7:4c:d6:40:b3:3d:ff:
69:dd:a1:22:d8:34:7d:30:b9:33:cd:20:53:b8:5b:bc:f5:25:
51:be:51:4c:3a:3f:af:b5:c7:cc:5d:50:82:64:d6:0b:1b:24:
fc:2c:bd:dc:a0:9b:0d:b8:96:93:ec:38:84:9a:52:72:f1:d6:
0d:db:b1:cf:d9:43:85:45:b9:7f:46:83:3e:11:99:14:a8:cb:
cf:bd:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 18:54:56 2024 by rpki-client on console-fra.rpki-client.org