Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa
File: GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa (raw, json)
Hash identifier: dSeiJcD0FlmBidYA0GPHShbRg2MT63O4CTyys5CHgYo=
Subject key identifier: 19:67:4E:91:22:AB:3B:A0:60:93:41:3D:1E:52:77:3E:4C:77:52:83
Certificate issuer: /CN=da1e212597b3ae009c016dce182db544917871c6
Certificate serial: 018CC5DC9C382C2837AAD1CCFB772F46BBC3
Authority key identifier: DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa
Signing time: Mon 01 Jan 2024 16:30:18 +0000
ROA not before: Mon 01 Jan 2024 16:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 185.94.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9c:38:2c:28:37:aa:d1:cc:fb:77:2f:46:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1e212597b3ae009c016dce182db544917871c6
Validity
Not Before: Jan 1 16:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19674e9122ab3ba06093413d1e52773e4c775283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:31:58:a7:5c:27:4d:5b:8a:21:d8:f1:f2:
55:3e:51:2b:e1:45:3a:d1:7a:7d:be:00:c0:6e:ec:
35:5f:a2:28:bf:ed:50:a1:b0:c8:ed:aa:b8:a3:32:
e1:eb:5a:45:c5:e9:58:5a:e7:77:00:d8:ef:08:80:
91:0a:4a:ee:21:de:51:73:90:6e:73:75:1e:3a:9b:
af:ce:76:ac:9c:fe:ef:34:45:f9:0c:28:0d:73:97:
29:9f:a4:eb:bc:14:cd:4c:c7:99:ae:de:51:ea:4f:
fa:1d:b9:64:39:1c:41:c6:85:0a:9d:86:1c:ff:0c:
5b:3c:11:00:02:d3:74:6d:66:62:d2:4e:df:20:34:
e9:68:c3:a4:41:08:11:da:f9:16:4b:05:eb:2e:42:
eb:87:81:f4:1e:12:c7:61:61:06:8b:1a:ae:92:3c:
1d:65:0d:e7:ee:7d:84:78:9a:39:0b:4f:35:57:5e:
cf:ed:62:2e:57:00:63:b3:0c:5b:ef:51:1b:e2:c0:
be:f8:0b:63:83:01:a9:4a:39:dd:70:77:64:01:94:
9b:2d:b6:e3:af:e5:06:b3:4b:83:f1:2b:24:d8:96:
2a:23:bc:09:6a:e1:96:8e:29:cf:14:1e:ca:25:49:
37:eb:74:4e:4b:da:f8:67:c0:f2:cb:f8:47:5e:2d:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:4E:91:22:AB:3B:A0:60:93:41:3D:1E:52:77:3E:4C:77:52:83
X509v3 Authority Key Identifier:
keyid:DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e9:f9:be:c9:c2:5d:7a:d1:7f:79:94:6c:8a:ab:86:d1:b0:
e6:b7:05:eb:4e:13:5a:a8:3a:4f:a2:18:a3:d9:76:8d:d2:6a:
eb:07:43:ac:4e:30:00:b8:62:d3:d2:03:38:93:f2:f9:3f:2a:
75:c2:17:78:60:68:fb:39:34:01:95:48:1f:56:99:9d:3e:66:
aa:59:fb:f9:bf:f5:08:d1:3c:87:4a:d7:8f:7d:08:57:7a:0e:
17:62:2a:ca:17:40:9e:a1:46:d0:06:5e:b5:0f:22:a4:43:42:
81:2a:5d:47:8d:b1:4f:6c:f7:26:b0:2f:cd:4b:c9:3d:41:d3:
de:01:18:d7:c9:18:06:48:90:06:b9:ad:73:c1:70:1a:e0:50:
18:3e:d0:9b:9d:db:e2:d5:b5:72:31:c2:74:79:42:bd:17:6c:
76:31:36:0b:cb:f1:31:42:67:51:34:bc:65:2c:4c:7d:ac:25:
99:ad:33:62:45:ac:a8:45:a0:40:5a:8e:42:8e:a2:b6:63:94:
e2:1f:6e:57:a9:b1:11:61:9d:7d:ed:79:2b:26:57:a3:fd:98:
a4:8d:48:87:88:49:fd:2d:86:c2:1c:1d:34:de:1b:dc:3f:ac:
fc:1b:16:17:06:8f:80:31:0f:39:82:c4:8e:de:62:9c:0d:b9:
f1:08:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:00:58 2024 by rpki-client on console-ams.rpki-client.org