Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/GFEzgKoshW5Js2k_gk643Q7YNu0.roa
File: GFEzgKoshW5Js2k_gk643Q7YNu0.roa (raw, json)
Hash identifier: EgM1Q0RvyM4b+ffIBQVNA6dHVlBDiepGPvtOuna8O6k=
Subject key identifier: 18:51:33:80:AA:2C:85:6E:49:B3:69:3F:82:4E:B8:DD:0E:D8:36:ED
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019272218459E8103750C2B1976D6FABF7D7
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/GFEzgKoshW5Js2k_gk643Q7YNu0.roa
Signing time: Wed 09 Oct 2024 16:34:12 +0000
ROA not before: Wed 09 Oct 2024 16:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214096
IP address blocks: 185.192.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:21:84:59:e8:10:37:50:c2:b1:97:6d:6f:ab:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Oct 9 16:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18513380aa2c856e49b3693f824eb8dd0ed836ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:fa:80:eb:96:44:f6:65:fc:45:9f:89:97:
96:52:13:16:c8:3b:2f:e0:45:5d:82:41:ed:cf:9b:
f3:67:83:ec:48:73:51:94:da:cb:8a:82:14:e6:b2:
5f:42:2c:f9:f8:9c:21:c0:7f:7f:48:ac:e8:49:91:
68:97:b1:48:4b:b9:e7:51:3f:31:f0:5c:6c:08:ee:
ef:95:68:cc:79:fa:a2:b0:12:55:b2:6b:11:59:b6:
07:d3:54:75:e8:9c:c7:f9:c1:74:4d:55:59:77:a9:
2e:a1:1e:29:4c:b1:7f:12:f0:ac:72:6a:9f:1a:f0:
40:26:87:20:b2:0f:0f:ce:7f:16:1a:c0:98:62:cc:
8d:d1:5d:79:7b:f8:eb:ea:58:97:b0:ca:8a:5e:5c:
1a:58:c9:09:36:25:5d:99:4a:c1:82:2b:63:3b:3f:
e3:b4:a8:a2:9e:87:ef:da:7f:30:d6:a7:b6:66:3e:
28:3d:5b:d1:97:0c:5b:eb:44:91:df:5f:98:71:45:
b6:4c:fc:61:c6:4b:73:24:2d:94:a6:cc:7c:99:7b:
4c:da:c6:b3:aa:bc:07:00:97:07:3a:07:81:07:d1:
08:f5:80:73:09:f8:63:46:2f:bd:59:7e:67:68:98:
35:b1:82:85:ef:06:ad:04:e0:b3:e5:a1:93:a4:99:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:33:80:AA:2C:85:6E:49:B3:69:3F:82:4E:B8:DD:0E:D8:36:ED
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/GFEzgKoshW5Js2k_gk643Q7YNu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.218.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:3f:cf:27:7e:85:e7:5d:92:78:5b:80:bb:4f:5c:0e:30:b9:
20:6a:9c:5a:91:46:90:15:9c:49:f9:64:ae:3e:ae:3f:fc:e6:
b9:dd:8b:ad:42:96:03:2a:17:81:34:dd:df:0e:bb:02:74:05:
08:76:8e:9c:7b:07:54:53:af:bd:0f:51:30:9a:99:32:a2:49:
f2:e5:9c:30:2f:8c:f6:49:79:98:d9:1f:b3:f3:be:16:39:09:
3c:85:3c:2d:00:b1:83:55:8b:b3:19:69:24:a5:2f:3a:85:40:
9b:8f:84:16:7e:d8:33:3c:d7:b8:a4:b7:62:ca:a4:7f:93:f5:
d2:c6:0d:85:49:5f:38:89:86:8b:da:40:18:5e:c0:40:b0:58:
9d:17:d8:21:76:5a:f7:ba:74:56:96:c9:91:a8:75:52:91:8d:
d3:0d:1d:10:e7:c0:72:81:5b:bf:10:64:ff:d3:e5:ba:c9:3d:
18:51:13:8c:03:29:ec:9a:4c:15:b1:46:33:3e:ad:b4:e3:8f:
23:0e:c3:78:d5:a7:1f:cf:eb:09:46:26:52:2d:bf:49:be:2e:
e2:82:57:58:b4:53:05:4f:d8:c8:bb:a7:b9:91:82:e8:8d:ec:
cb:2e:68:76:67:4f:dc:48:3f:a1:0b:77:ba:2a:3b:63:24:ba:
73:c9:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:51:22 2024 by rpki-client on console-fra.rpki-client.org