Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/gmebv7qPnfm0rVWmKx6BYhQD8xc.roa
File: gmebv7qPnfm0rVWmKx6BYhQD8xc.roa (raw, json)
Hash identifier: IEY/Z0hJsYCV1/8mTL0cWdQa6Yp8gv58PPFk7tSjGYg=
Subject key identifier: 82:67:9B:BF:BA:8F:9D:F9:B4:AD:55:A6:2B:1E:81:62:14:03:F3:17
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 018E8CA7B621E2565F4F5EF8BEEFE0A30743
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/gmebv7qPnfm0rVWmKx6BYhQD8xc.roa
Signing time: Fri 29 Mar 2024 23:59:45 +0000
ROA not before: Fri 29 Mar 2024 23:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 193.189.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8c:a7:b6:21:e2:56:5f:4f:5e:f8:be:ef:e0:a3:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Mar 29 23:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82679bbfba8f9df9b4ad55a62b1e81621403f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:f1:70:52:42:b3:91:5c:11:c9:f8:73:38:
15:b2:46:47:3d:bb:c9:9b:bd:69:5a:b9:4a:72:b4:
45:28:36:2d:45:14:e6:70:fa:34:c6:c0:15:28:77:
89:c1:12:32:c2:f9:e4:bf:e5:22:84:22:3e:4e:e4:
28:7a:8a:e7:e8:0f:22:67:90:f8:a0:1b:55:35:45:
9e:eb:3b:75:4d:11:b1:f0:1b:5e:2b:dd:84:b4:f7:
0f:8b:a4:e9:30:89:02:8f:69:4e:a5:c8:15:cc:dd:
76:30:6b:22:6f:4a:6c:ec:d4:22:18:4d:2c:54:b8:
5c:be:80:af:02:69:6b:bd:82:fd:6e:5c:47:e4:2b:
30:2d:2f:86:b9:a9:11:81:5c:91:1d:d9:cf:26:cd:
15:3d:18:44:ff:5e:07:df:06:0f:34:69:59:11:c6:
fe:af:b3:ff:a7:6a:2c:c7:e4:27:60:68:af:89:c0:
96:1d:a3:68:c6:5f:14:a7:60:8b:47:a5:ae:09:e2:
e8:08:c9:02:3a:0c:a5:cd:6a:db:5e:1a:3c:34:4b:
d9:60:9b:e2:69:7f:38:53:ad:8d:e5:2a:91:f2:85:
f8:67:2a:e7:b1:11:c0:4f:8a:ca:5d:77:ee:a8:76:
4d:b5:c4:5a:23:c8:d9:ff:a8:97:c9:76:ac:3a:c4:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:9B:BF:BA:8F:9D:F9:B4:AD:55:A6:2B:1E:81:62:14:03:F3:17
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/gmebv7qPnfm0rVWmKx6BYhQD8xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.114.0/23
Signature Algorithm: sha256WithRSAEncryption
97:82:1a:fe:30:73:54:e7:59:a7:fd:61:64:42:d2:19:e6:65:
03:fb:08:6e:61:22:af:23:ce:6b:b2:49:72:2f:68:3b:58:3b:
4c:09:79:b1:8b:24:d0:5a:79:7b:8a:40:81:fd:03:d6:0b:4c:
a3:73:bd:4b:d6:b3:ce:5e:ab:a7:10:78:28:ed:d5:3a:a8:e9:
f0:b5:b6:6e:c0:e0:25:70:9a:f1:8b:0c:ed:ab:4f:29:8f:f1:
fc:a9:7b:2c:14:51:c6:cb:43:a5:63:69:0f:7f:9a:18:1c:43:
a5:c2:99:5a:9b:97:b5:1d:a6:92:91:2b:01:06:9e:68:7d:61:
ee:c1:a6:72:8a:61:32:de:f0:eb:00:63:12:34:75:b4:8c:b7:
6f:a9:eb:da:bd:0e:54:2c:fa:98:24:26:fd:69:6e:08:15:d2:
84:5c:bb:da:29:64:8d:2a:04:af:e1:a4:46:cf:5e:bf:a0:75:
0f:74:7d:af:67:37:c2:e6:5b:af:f7:e4:6a:a5:21:6e:cc:2f:
69:11:ca:f4:ce:6d:36:93:ba:00:6c:d4:4f:78:06:ab:da:4c:
4c:7c:57:be:a5:dc:ba:2a:6b:db:fd:1a:79:e1:6e:9d:14:ba:
15:9b:33:74:5c:af:da:25:11:3d:9a:a9:a5:84:a7:a0:1a:79:
bd:11:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:16 2024 by rpki-client on console-ams.rpki-client.org