Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/GFN4Vk47KH0Dk0eYXjxZXi5H1YI.roa
File: GFN4Vk47KH0Dk0eYXjxZXi5H1YI.roa (raw, json)
Hash identifier: pJjriLE25TbVKVdHN0ETqLWX+iU870OVO8ftJoahku0=
Subject key identifier: 18:53:78:56:4E:3B:28:7D:03:93:47:98:5E:3C:59:5E:2E:47:D5:82
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 018CC801137F946A6F0723E96D62FA9D01AF
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/GFN4Vk47KH0Dk0eYXjxZXi5H1YI.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61334
IP address blocks: 93.113.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:7f:94:6a:6f:07:23:e9:6d:62:fa:9d:01:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=185378564e3b287d039347985e3c595e2e47d582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:d3:92:2f:60:df:a6:06:04:b2:97:19:28:
00:b2:69:a5:3a:04:75:83:9f:ca:0b:5e:30:7a:ff:
65:a2:3f:cd:cd:e2:a0:81:7f:a5:5b:af:41:7b:fe:
4d:5d:da:1b:45:9c:6b:80:6a:51:e9:67:b1:b6:56:
c5:ce:d9:9a:cd:23:8c:fe:85:22:02:42:80:d6:ac:
db:16:28:30:f1:7a:6c:62:88:75:10:f4:b5:37:ab:
4b:1f:40:83:ca:16:8f:d8:34:c5:b4:e9:c4:9d:e5:
42:a1:b4:b6:70:5d:2f:d2:fe:7b:0d:4b:7d:48:aa:
86:37:a9:00:89:7d:bb:04:17:28:79:9c:f4:02:8e:
d6:4e:c3:69:1d:8b:2a:4c:08:3c:82:7d:d1:c2:f4:
5b:ce:05:05:9d:1f:ab:a2:e3:1b:bf:bc:6a:b8:d0:
a6:24:1e:46:f1:51:3c:e7:e8:3e:50:f5:57:32:41:
7d:fa:5e:2b:c7:57:42:c3:d0:5a:d5:f9:89:4c:b2:
97:bb:05:a0:6c:cf:64:28:68:46:ea:86:e5:03:af:
fc:3a:1a:9e:89:6a:ba:fb:9f:11:60:79:7e:8e:12:
68:b7:fe:cf:93:2b:fc:ae:70:42:64:7a:98:50:27:
04:85:59:81:47:b8:45:ec:cd:46:32:42:1d:0f:a3:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:78:56:4E:3B:28:7D:03:93:47:98:5E:3C:59:5E:2E:47:D5:82
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/GFN4Vk47KH0Dk0eYXjxZXi5H1YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.159.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c5:c1:fe:43:52:70:28:ff:58:cf:fb:d8:98:de:5a:14:b2:
88:46:b8:13:da:6d:c7:e1:c7:88:df:56:1b:c7:be:72:bd:f5:
77:83:c5:e3:1c:28:8f:3f:d9:7d:77:e7:1f:41:49:30:9d:6c:
eb:a9:21:07:42:a7:05:fc:63:23:eb:61:5e:b0:ea:47:e6:38:
e1:14:d7:65:b9:9e:e3:92:ba:fc:81:0a:6c:e9:3e:c1:ba:b6:
82:a1:ab:d6:02:19:cf:6c:ff:72:89:56:41:45:f6:d2:b6:42:
d8:ba:99:40:e8:42:6e:3d:46:24:b7:44:0f:11:97:41:ec:f2:
b7:1d:3c:4a:dd:49:03:9c:8f:2c:9e:ce:ad:e8:2d:d5:a3:5e:
ca:bf:9b:7d:ec:b8:bd:13:62:66:37:7c:91:2f:1e:89:55:2d:
ef:e4:38:94:a4:64:8f:a8:a0:6e:23:95:ff:6f:86:ce:e9:48:
f0:8b:03:35:fa:3f:ed:72:b2:5a:50:6a:4b:4e:bd:c0:37:c2:
a5:e8:77:f7:92:61:e2:b7:46:56:e9:e9:29:5e:4a:a3:fe:1e:
21:e4:6a:1c:ef:98:77:c3:83:e5:c4:5d:3e:a8:0c:fd:43:7a:
b3:ba:4b:8a:3e:2b:8f:1e:b5:5f:ec:b5:a8:64:2d:ff:22:b5:
ed:ed:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:19:20 2024 by rpki-client on console-fra.rpki-client.org