Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gun04pxMvbbc0fJRQ5QpbGzkmmc.roa
File: gun04pxMvbbc0fJRQ5QpbGzkmmc.roa (raw, json)
Hash identifier: gVx7DHMQRfF9mcNg127k/i0xrfQFJ+e3sNqiixVY2ck=
Subject key identifier: 82:E9:F4:E2:9C:4C:BD:B6:DC:D1:F2:51:43:94:29:6C:6C:E4:9A:67
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 01911503A059C4D72DC2171850E2C805DF92
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gun04pxMvbbc0fJRQ5QpbGzkmmc.roa
Signing time: Fri 02 Aug 2024 21:34:04 +0000
ROA not before: Fri 02 Aug 2024 21:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13332
IP address blocks: 171.22.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:15:03:a0:59:c4:d7:2d:c2:17:18:50:e2:c8:05:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Aug 2 21:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82e9f4e29c4cbdb6dcd1f2514394296c6ce49a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:19:70:50:50:b0:b9:1a:64:4c:ec:0e:ef:
31:a0:a9:e8:47:23:d8:3d:e0:f7:87:ab:61:60:94:
2d:59:0a:d6:52:5a:f2:00:f2:4e:5c:83:35:ad:10:
89:a1:61:21:16:a7:29:32:69:5b:aa:8e:b3:89:38:
58:2c:91:0f:58:ca:5b:45:8a:b0:0a:cf:8a:a2:d7:
71:24:1d:1f:99:30:57:65:19:4c:2e:57:65:b0:0a:
85:ee:ff:09:8b:62:5e:a0:0c:d7:46:0f:c0:32:c5:
c0:45:49:28:91:ba:61:4b:d3:8c:31:17:f0:30:e8:
8c:e7:91:e5:42:5d:32:ea:21:59:d4:18:89:d5:f9:
7f:46:78:66:63:02:c2:26:6f:f4:66:80:53:3d:4e:
d9:e6:a0:af:ba:ac:b3:06:3a:f0:db:26:db:65:71:
05:d8:1a:7a:09:04:00:df:9a:b1:fa:37:05:0d:d5:
5c:13:d2:50:61:be:13:65:29:56:a8:92:4b:98:c4:
86:03:ef:47:d7:5b:53:6a:e7:d3:19:6b:58:e4:ed:
bc:c3:be:5e:77:46:e1:eb:de:32:e3:b6:b2:b9:d7:
9d:8c:74:ae:75:5d:a1:f9:07:aa:2d:7f:14:0a:da:
21:84:a8:0e:64:0d:3b:03:8d:2a:f0:10:e1:a1:af:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:F4:E2:9C:4C:BD:B6:DC:D1:F2:51:43:94:29:6C:6C:E4:9A:67
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gun04pxMvbbc0fJRQ5QpbGzkmmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.216.0/22
Signature Algorithm: sha256WithRSAEncryption
50:87:42:61:8d:7a:bf:29:87:05:12:ad:54:1f:57:e2:d5:39:
06:b7:c8:45:ea:94:45:84:97:67:81:0d:21:76:f7:d1:11:8c:
51:d6:c2:c7:93:2e:37:9f:bc:57:b2:db:46:15:1d:54:58:17:
69:d1:81:50:86:ab:54:d8:f8:b2:d8:8c:89:8d:83:54:d4:5d:
0f:54:64:37:1b:17:ec:b1:59:93:0f:47:b9:c9:0c:4d:bb:36:
30:46:4d:17:aa:c0:c8:51:5e:65:c3:18:46:0a:38:85:19:c7:
8b:a1:90:7e:9d:49:89:c5:bb:f1:68:18:bb:8a:ab:7a:f2:d0:
be:14:a5:ae:87:6d:ae:3c:ec:fa:f2:5b:14:02:46:d0:32:f5:
64:5e:ff:45:48:06:8f:00:14:73:de:f0:a0:3e:29:f7:89:33:
ec:d0:5b:28:cf:16:69:01:f3:ab:af:25:d3:ab:b3:ec:1a:be:
f8:da:ba:c9:ef:3f:e3:35:de:64:8f:25:51:cd:f6:a9:d2:9a:
f7:c9:9c:34:8d:55:c9:95:6d:fb:75:d8:10:26:42:5b:f6:5a:
82:90:91:1f:88:86:37:2e:14:a2:ef:07:7f:c1:36:e6:f7:69:
4e:d6:ff:b4:6d:8b:08:3f:40:f8:13:72:6a:47:d1:a8:1d:72:
0d:88:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:16 2024 by rpki-client on console-fra.rpki-client.org