Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/GysDkH1OGm2lkC_ijMC_VsewjsM.roa
File: GysDkH1OGm2lkC_ijMC_VsewjsM.roa (raw, json)
Hash identifier: a3WvzrvvLrd2Hr867ezBlv+ZMxj5vfbfxwb3KGpbKEg=
Subject key identifier: 1B:2B:03:90:7D:4E:1A:6D:A5:90:2F:E2:8C:C0:BF:56:C7:B0:8E:C3
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 018CC56F01FCC6F8AEDA50BFB2DDAE0CC954
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/GysDkH1OGm2lkC_ijMC_VsewjsM.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47564
IP address blocks: 176.107.226.0/23 maxlen: 23
176.107.232.0/23 maxlen: 23
176.107.228.0/23 maxlen: 23
176.107.236.0/23 maxlen: 23
176.107.234.0/23 maxlen: 23
91.204.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:01:fc:c6:f8:ae:da:50:bf:b2:dd:ae:0c:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b2b03907d4e1a6da5902fe28cc0bf56c7b08ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:49:ba:5a:8c:8a:ff:83:b9:bf:5b:65:0c:
e9:01:3b:54:57:3e:51:1c:b8:2f:92:27:e1:b2:32:
e7:3c:cb:cc:7e:9f:01:e1:1e:84:83:57:bf:21:6a:
c9:80:db:c7:9d:00:28:8e:bc:b8:5c:72:2c:c3:94:
29:3d:93:9a:e1:cd:e8:f0:6f:f1:81:f0:0a:18:f1:
40:4e:c4:7e:c4:b1:76:db:75:d8:a5:fd:e0:a3:94:
69:2a:fc:e9:d2:13:8d:b4:b2:21:4c:46:11:03:97:
df:4b:c6:98:17:57:a8:68:c9:e1:95:7e:4f:14:b1:
e5:5a:fc:33:b9:ec:c9:94:ca:8e:6f:c9:ef:c1:0b:
fc:48:b3:c9:09:2b:70:e7:3e:3c:00:9d:be:8e:fb:
4a:bc:29:d5:32:1b:f8:ee:e8:86:89:d7:f6:0b:2b:
50:72:34:54:f0:94:63:13:b4:68:ca:ba:5f:ef:52:
5e:13:47:5a:f1:04:3d:7b:63:aa:d8:33:e0:82:c6:
2f:29:8b:ab:d1:26:6f:76:40:16:b4:d5:88:7b:67:
ad:6c:be:c4:55:c5:2e:5c:09:42:c1:94:82:2e:09:
92:7b:05:90:27:67:4d:a5:eb:85:36:39:68:6d:52:
fe:52:7e:a8:48:07:e9:c9:0b:b1:02:90:01:25:02:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:03:90:7D:4E:1A:6D:A5:90:2F:E2:8C:C0:BF:56:C7:B0:8E:C3
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/GysDkH1OGm2lkC_ijMC_VsewjsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.200.0/22
176.107.226.0-176.107.229.255
176.107.232.0-176.107.237.255
Signature Algorithm: sha256WithRSAEncryption
7d:0d:d5:36:a2:cc:ce:f9:a2:ce:15:8f:46:31:cf:85:c6:6d:
46:93:e6:33:d5:69:3f:7e:9c:48:e0:15:61:80:34:00:2c:fb:
ad:7e:83:75:79:fa:3d:c2:84:18:0e:f8:7d:e4:3d:0b:36:d1:
c2:e9:4c:ef:18:06:93:84:75:e3:15:02:a3:fa:bd:f1:b5:c8:
46:07:15:38:10:de:3f:33:23:5c:8f:61:10:43:ff:6d:81:b8:
70:b2:ef:fb:5a:67:97:12:d2:56:ec:b2:4a:94:3f:24:83:e4:
b6:64:22:7d:52:51:18:31:9e:17:21:49:7e:28:a1:cd:b7:93:
2e:bb:da:95:6c:4e:e4:5a:38:e0:4d:3e:c4:ea:18:96:fe:db:
c7:6b:90:65:04:91:35:ca:1a:08:b3:de:c9:45:18:81:a7:88:
29:e0:1c:91:80:be:24:c1:54:93:d1:1a:b8:c0:ae:a6:d9:f5:
e3:84:4b:8b:83:61:c7:89:da:f6:e4:0e:c3:83:ab:59:e8:d4:
e5:80:e4:a5:1b:73:4e:39:09:f3:63:8c:9e:8c:6d:2b:5c:d7:
65:d3:0d:c9:15:f4:9c:bd:2f:89:2a:84:26:99:64:0f:9b:49:
0e:85:45:9e:e8:c7:96:fc:06:83:a1:f9:62:db:da:0f:58:96:
ff:02:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:22:23 2024 by rpki-client on console-ams.rpki-client.org