Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/GrcyhGU8G4_lHDnG6ncr1QqPtg4.roa
File: GrcyhGU8G4_lHDnG6ncr1QqPtg4.roa (raw, json)
Hash identifier: 9xwOV5hTbUQr8qLWWQSTGuCU7I+ZYNe3//mtc5fGhtQ=
Subject key identifier: 1A:B7:32:84:65:3C:1B:8F:E5:1C:39:C6:EA:77:2B:D5:0A:8F:B6:0E
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 018CC3B6FE7E0EAB0EA28FE024D8A985BB7E
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/GrcyhGU8G4_lHDnG6ncr1QqPtg4.roa
Signing time: Mon 01 Jan 2024 06:29:58 +0000
ROA not before: Mon 01 Jan 2024 06:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3262
IP address blocks: 217.18.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fe:7e:0e:ab:0e:a2:8f:e0:24:d8:a9:85:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab73284653c1b8fe51c39c6ea772bd50a8fb60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:10:48:90:32:d0:cb:d2:95:9f:fd:c3:46:
61:cd:dd:a4:2e:3b:0e:58:80:00:f2:a6:2b:be:97:
ca:40:e5:6d:e0:1f:ac:a3:56:66:3d:2e:9f:4a:7f:
3b:26:52:3a:2f:ba:b9:c5:7c:d2:06:e3:62:83:6f:
14:00:fd:b9:50:25:eb:80:39:2c:04:66:b3:9c:c4:
b4:cd:73:50:ed:37:33:ab:1a:36:40:4b:cf:3b:b1:
a3:df:ed:4f:fc:90:4c:cb:2d:a1:17:1f:bc:3d:69:
8a:66:05:0f:fd:59:44:52:ee:c8:5c:a4:68:40:95:
39:44:7f:e1:97:fe:d4:06:c2:3e:08:d0:a1:33:04:
3e:12:ca:62:15:36:22:46:ff:c1:a8:34:12:7a:11:
89:85:ac:3f:a7:3f:79:f3:09:39:de:93:d4:b8:96:
59:1b:ee:cc:bc:91:21:24:7d:f5:32:f5:1e:fd:0a:
92:99:12:6a:11:39:05:33:d5:8f:03:33:ad:f1:f5:
fb:80:d1:d6:3c:74:5c:65:03:17:76:55:bc:6e:ed:
e4:ab:81:8b:3f:d2:cf:54:b3:b6:17:84:3e:32:c4:
bc:2c:6a:25:15:2d:eb:17:f1:ab:2f:a0:b7:97:ac:
4e:bd:53:d3:ac:4b:2a:1d:35:86:15:cd:31:c6:35:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:32:84:65:3C:1B:8F:E5:1C:39:C6:EA:77:2B:D5:0A:8F:B6:0E
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/GrcyhGU8G4_lHDnG6ncr1QqPtg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.238.0/24
Signature Algorithm: sha256WithRSAEncryption
53:17:64:b2:f1:ad:92:3f:68:98:21:f9:ab:b2:c8:66:45:47:
ce:0f:3c:0f:ca:76:3d:7b:a5:1f:a1:84:f7:0f:7e:f2:34:1c:
a1:e1:3c:1d:91:15:81:ba:e7:1e:eb:74:58:6e:5f:07:7b:c9:
20:c8:a9:7c:b1:77:d9:ee:48:5a:f6:e1:bd:12:ca:16:1e:a2:
bf:58:4e:1e:f4:5f:9e:58:1a:3e:01:9f:a7:ae:21:09:e3:77:
7f:bd:d2:e9:c7:3e:2c:dd:17:43:5d:2c:72:e9:d9:63:cf:0f:
74:67:aa:74:45:cc:79:da:12:38:d9:9b:75:ba:20:82:5a:29:
2f:e5:cd:4d:45:3c:78:b8:75:72:79:c6:a7:36:6e:17:29:23:
d7:86:a4:7b:00:e0:33:d2:64:bc:e7:8a:53:88:a4:e4:47:98:
9d:97:fc:83:f0:86:bf:4b:24:1e:37:66:48:74:72:fb:49:00:
5a:46:59:b6:1a:5d:3e:59:0e:3e:20:e5:ff:1a:3c:d1:13:f5:
51:b6:c3:b8:d6:51:c1:29:5b:2d:24:9a:75:e6:46:b7:aa:5b:
10:a7:ab:6d:3f:6d:a5:3a:45:d8:9e:01:4e:41:c1:17:5e:15:
a7:fe:71:9b:ff:8b:a0:a6:0c:b6:5a:03:e6:85:77:90:b2:1a:
ef:73:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:52:50 2024 by rpki-client on console-fra.rpki-client.org