Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GqbF8acnJDzo31tRij9-sPkBCJI.roa
File: GqbF8acnJDzo31tRij9-sPkBCJI.roa (raw, json)
Hash identifier: 6RsWQVhggkBg8frq12S3vsDATuiSExX9LLMaIaJmBCQ=
Subject key identifier: 1A:A6:C5:F1:A7:27:24:3C:E8:DF:5B:51:8A:3F:7E:B0:F9:01:08:92
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 018CC2DB0E2A8277886FFF0C3B516E6A32D4
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GqbF8acnJDzo31tRij9-sPkBCJI.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 193.42.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0e:2a:82:77:88:6f:ff:0c:3b:51:6e:6a:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aa6c5f1a727243ce8df5b518a3f7eb0f9010892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:58:08:b7:d1:2e:17:7f:5b:df:ec:d6:62:
4e:4e:26:90:9b:4b:6c:6e:f9:c0:4b:3b:30:0e:03:
f0:72:83:47:c9:62:cf:85:e1:19:7c:3d:ee:d3:cc:
e3:2e:45:c6:92:30:18:13:c3:b2:9e:11:e9:7b:16:
3b:e2:57:93:bb:da:b8:4b:b3:4d:81:a6:c0:25:54:
d0:92:81:48:73:f5:0b:a3:66:5e:57:90:82:99:f1:
11:d6:f8:a0:a6:71:7c:7d:e3:aa:5c:5c:52:7e:19:
62:08:38:44:f2:06:dc:85:44:50:3d:e2:1b:18:ee:
ee:8f:d8:eb:9e:37:46:44:49:0d:5b:9b:5d:e6:a2:
ab:f8:bb:0c:75:b8:d3:57:10:51:97:ae:4d:1b:2e:
84:b4:cb:22:a0:00:33:03:40:65:29:ee:20:6f:92:
52:de:24:17:7f:f1:98:dc:ef:ae:27:51:88:0d:3c:
a5:af:5f:1d:44:54:9a:38:98:f4:7c:5b:b4:bc:b8:
86:41:13:a8:b6:44:b2:3a:ca:8c:cf:14:a0:64:13:
8e:ca:95:c7:95:bb:63:30:da:37:4e:b3:ae:f0:eb:
2e:54:68:9f:2d:0d:4f:5d:9f:7e:2d:38:5a:b3:e7:
42:75:3e:3f:53:ae:ec:e2:c8:4c:f9:e8:2f:77:42:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:C5:F1:A7:27:24:3C:E8:DF:5B:51:8A:3F:7E:B0:F9:01:08:92
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GqbF8acnJDzo31tRij9-sPkBCJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a8:13:d3:b4:5c:a5:84:c6:6d:21:9a:b7:4a:b3:1b:82:6e:
73:22:fb:15:fd:2b:72:bb:a4:e2:7b:c2:22:09:f7:35:75:22:
a3:13:03:9f:a2:17:9e:25:8a:63:f5:e1:6c:0a:fe:db:23:5e:
90:df:da:08:d0:14:2d:71:69:d8:25:82:32:f4:32:4e:f0:e7:
fc:f9:ac:2f:9e:a2:55:ed:39:e4:f4:57:a9:af:9f:8c:58:4a:
80:1a:0f:12:be:6c:11:3c:69:4f:60:c0:96:41:97:ac:b0:a6:
ba:b4:f0:fc:51:89:20:50:f0:f3:7d:17:92:cf:27:cc:f4:b5:
c2:9b:54:0b:43:a2:65:9b:d2:99:b6:87:75:00:ea:91:6f:40:
b8:f5:84:8b:a1:c3:c0:da:a6:cd:23:40:fb:f1:ab:94:28:b4:
b4:c6:43:82:f4:e6:05:8e:a1:a4:33:4d:83:1a:29:62:97:88:
58:be:51:e5:f9:bc:86:a1:bb:1a:e8:41:0e:32:fc:e7:d3:6f:
41:30:70:46:aa:6d:30:21:63:74:6f:65:ab:42:10:06:59:5d:
94:8b:62:d4:c7:2d:f7:bb:b7:3c:81:0f:e4:ce:64:f6:96:b0:
5c:87:ef:05:c2:ea:5e:c0:17:01:2f:13:99:bf:19:02:ab:76:
25:28:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:10:55 2024 by rpki-client on console-fra.rpki-client.org