Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/GXBuGY8wNZDZGFR8DqdqhMqCL8o.roa
File: GXBuGY8wNZDZGFR8DqdqhMqCL8o.roa (raw, json)
Hash identifier: sNI8sz/TvYxTCB/ZRcZ6iWSDJyVlzUhjY2XQlcbvKMk=
Subject key identifier: 19:70:6E:19:8F:30:35:90:D9:18:54:7C:0E:A7:6A:84:CA:82:2F:CA
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 018E7ABC0173321975705263596C810A549B
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/GXBuGY8wNZDZGFR8DqdqhMqCL8o.roa
Signing time: Tue 26 Mar 2024 12:28:45 +0000
ROA not before: Tue 26 Mar 2024 12:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211113
IP address blocks: 2.58.116.0/22 maxlen: 22
5.61.212.0/22 maxlen: 22
37.25.40.0/22 maxlen: 22
94.101.102.0/24 maxlen: 24
185.89.28.0/22 maxlen: 22
2a06:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:bc:01:73:32:19:75:70:52:63:59:6c:81:0a:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Mar 26 12:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19706e198f303590d918547c0ea76a84ca822fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:73:e6:7b:a9:17:7e:9b:2a:e6:db:82:17:
e1:94:8b:dc:13:84:5a:3b:70:83:65:6c:fd:83:a6:
ce:5b:16:02:39:8e:76:46:c1:83:37:21:17:cf:a1:
9b:26:6f:de:08:fc:c2:64:19:27:2f:d2:f6:bd:e1:
c3:69:e1:2f:39:88:47:d5:74:46:90:c5:3c:56:f0:
67:b6:c4:2d:62:2a:28:ee:c2:37:a7:8a:c8:22:6f:
5c:cf:01:25:bd:09:45:05:c1:c1:1e:f7:66:6b:4c:
39:87:6a:99:8e:02:ca:1d:aa:01:27:23:bc:92:5d:
10:0b:23:2a:95:5b:b1:d5:db:ed:9d:4e:63:09:0d:
bf:39:2c:50:8a:86:c8:4d:fb:e3:d0:3d:2c:44:40:
39:a8:c8:6e:06:4f:51:06:c8:b9:25:1f:09:d1:e3:
85:a0:9d:55:f3:91:ca:01:89:a7:a2:80:50:a1:74:
40:27:d9:92:10:15:af:e4:61:5b:5d:a2:84:df:43:
5b:c8:b5:af:22:0b:ee:d0:c8:ed:7c:a2:6c:17:0e:
cd:4d:3b:03:0e:d8:44:2e:a3:7a:2e:0b:8a:94:87:
25:e8:24:b1:0e:e8:f9:29:92:b0:a7:d9:a4:ef:dc:
08:45:bb:a1:c0:d0:4f:83:a0:a7:10:5a:3d:50:b0:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:6E:19:8F:30:35:90:D9:18:54:7C:0E:A7:6A:84:CA:82:2F:CA
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/GXBuGY8wNZDZGFR8DqdqhMqCL8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.116.0/22
5.61.212.0/22
37.25.40.0/22
94.101.102.0/24
185.89.28.0/22
IPv6:
2a06:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:94:77:da:45:69:e7:65:2a:57:f9:d1:b8:82:73:ab:f2:a2:
91:02:18:de:72:f0:8b:fb:af:e1:ab:8b:78:cb:f5:25:4d:86:
9a:59:a1:de:ae:99:2a:6c:83:4a:62:9f:f6:78:b6:29:26:bd:
2b:dd:42:e8:b6:29:30:07:9d:f9:e0:50:f9:7c:c9:70:36:1a:
e7:06:04:29:87:e8:56:f3:43:ac:d5:70:94:a7:24:b3:e3:d3:
c3:81:6e:c4:ca:a2:23:98:71:8a:5f:d3:cc:65:7e:c3:11:32:
5b:59:ed:f5:93:19:0e:0d:5c:13:01:3e:47:d7:43:d3:16:9d:
d2:a6:4c:e2:0f:83:28:4e:b8:bd:60:4b:f7:9b:e1:7c:c3:4c:
be:29:89:ef:37:c7:64:a5:0d:36:31:10:a5:44:cc:14:bf:72:
19:e8:5c:ad:db:9d:4d:02:75:08:71:a9:2b:82:eb:86:a7:dd:
e2:15:8e:0c:0d:b1:fb:fc:a1:39:0b:18:89:d6:fd:1a:5b:da:
8f:fc:bd:b6:d3:38:1a:fe:39:73:c4:aa:35:d0:a5:5d:f4:d1:
2a:67:ca:0b:ff:27:95:ac:86:ac:52:d0:81:ec:78:c8:2a:c9:
a9:04:fe:1a:a2:41:5f:b0:ee:2e:65:1c:b7:b0:e5:dd:10:be:
a2:9b:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:26 2024 by rpki-client on console-ams.rpki-client.org