Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/grXMZzhLW4bLBiDwqYMV6pLg_v8.roa
File: grXMZzhLW4bLBiDwqYMV6pLg_v8.roa (raw, json)
Hash identifier: JAcbERa55Cjpznx3z3sMCdVz2/Wrk6fq5fscM6ouTFA=
Subject key identifier: 82:B5:CC:67:38:4B:5B:86:CB:06:20:F0:A9:83:15:EA:92:E0:FE:FF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D37DA6109E4F418E3F38B5B2C1EDB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/grXMZzhLW4bLBiDwqYMV6pLg_v8.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 195.178.143.0/24 maxlen: 24
195.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:37:da:61:09:e4:f4:18:e3:f3:8b:5b:2c:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b5cc67384b5b86cb0620f0a98315ea92e0feff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:ea:f5:cd:12:be:bd:f1:e3:2a:a9:00:92:
60:d3:65:be:77:70:a8:71:82:1d:07:47:01:76:6d:
6f:64:72:a7:be:d4:4e:f8:ba:85:88:ce:7d:34:ec:
26:98:d0:ab:59:eb:03:f7:9b:15:af:ca:b3:9c:a9:
50:ab:22:6c:65:ac:24:03:4f:7f:b7:57:a8:b7:1b:
00:8e:02:54:7a:32:c7:57:dd:4b:56:d6:59:d3:50:
82:f5:12:05:2e:4c:ae:04:b7:4c:3b:3d:18:aa:5e:
89:aa:bb:2d:7b:28:f1:b4:e5:ea:8c:02:bb:e4:4e:
7a:73:c8:1c:d8:05:5c:3d:3b:ad:37:de:46:e8:92:
1a:c6:cc:1e:f9:ce:c9:0e:d7:d6:92:d0:d7:65:e6:
82:49:06:fc:0c:7b:d7:54:52:c6:fb:e5:a0:74:3e:
30:f5:72:f2:8f:d1:c7:80:ec:33:e8:33:ac:7f:01:
f0:5c:53:13:4e:5e:da:9e:61:41:67:0f:4f:3b:10:
0e:c9:a3:f3:a4:b5:42:3a:a2:24:ef:4b:0b:b8:cb:
4d:d8:c5:26:fb:fc:d9:f9:59:20:ec:76:97:98:de:
a1:52:52:b2:c1:48:0c:54:a3:55:dc:6b:47:fb:60:
e2:ab:12:0e:0a:f9:6d:5e:f1:cd:5d:d3:fa:93:d6:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:CC:67:38:4B:5B:86:CB:06:20:F0:A9:83:15:EA:92:E0:FE:FF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/grXMZzhLW4bLBiDwqYMV6pLg_v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.142.0/23
Signature Algorithm: sha256WithRSAEncryption
71:5a:a1:ab:25:83:c7:79:b4:1c:14:80:b6:97:14:aa:91:e3:
55:1b:31:ff:fe:b6:0f:7d:24:92:9d:5b:83:e1:97:a4:d9:8f:
47:5d:d9:49:9f:76:89:e7:59:fa:98:b4:37:69:ca:1e:7e:09:
97:9b:32:5d:c1:1b:3f:7b:b2:ac:3f:b9:ab:06:a2:8a:f8:21:
2a:29:eb:56:b7:a1:77:85:54:86:82:8e:cb:d8:5d:74:d0:29:
ad:52:77:08:98:ec:cb:8e:8c:38:64:96:04:30:87:96:90:11:
cc:de:4c:75:51:9a:80:08:25:62:29:ec:ff:fa:5f:91:17:70:
54:89:2f:64:6b:b0:ed:1c:09:2d:ff:c2:02:3a:b4:0e:20:29:
23:8c:50:a2:87:d7:0e:cf:27:f3:91:4f:79:cb:38:72:0d:8a:
30:1c:f2:24:d7:a0:3f:d7:0b:3f:ba:ce:83:f1:f3:a5:1b:ef:
1d:74:b9:5e:6a:69:b3:1b:96:c7:01:eb:2b:d1:fa:57:c6:d5:
da:52:69:dd:67:39:34:23:b7:f3:28:60:f0:55:7b:8b:29:0e:
22:b7:e2:3d:e7:d9:e6:ff:f7:fd:4a:d7:45:0d:88:8e:27:10:
d3:e1:dc:ed:0a:4a:09:27:e5:8a:15:20:ba:98:f5:80:fb:46:
30:92:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:52:47 2024 by rpki-client on console-ams.rpki-client.org