Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/GoWMvrIOIlwHmiS3ZVFBpou8Hxk.roa
File: GoWMvrIOIlwHmiS3ZVFBpou8Hxk.roa (raw, json)
Hash identifier: l/U7efswEQvY4KFgC/jYpJndStS5jOg5ueC9D2ehZsM=
Subject key identifier: 1A:85:8C:BE:B2:0E:22:5C:07:9A:24:B7:65:51:41:A6:8B:BC:1F:19
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 018CC8DEB042287495C8000B9DB8E79D3778
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/GoWMvrIOIlwHmiS3ZVFBpou8Hxk.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202373
IP address blocks: 194.55.96.0/22 maxlen: 22
194.55.97.0/24 maxlen: 24
194.55.98.0/24 maxlen: 24
2a0c:cac6:1000::/36 maxlen: 36
2a0c:cac6:2000::/36 maxlen: 36
2a0c:cac0::/29 maxlen: 29
2a0c:cac2::/32 maxlen: 32
2a0c:cac1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b0:42:28:74:95:c8:00:0b:9d:b8:e7:9d:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a858cbeb20e225c079a24b7655141a68bbc1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:d3:74:3f:03:9f:d6:a4:3b:fb:b5:20:32:
e7:b0:b4:20:9e:05:b1:21:d8:b4:03:a3:81:6e:fb:
d8:87:c4:68:cf:e9:83:ca:56:c7:d0:f2:55:ec:0e:
e2:2e:f7:81:5e:8b:47:31:77:f3:dd:4e:5a:e8:21:
f1:7c:c8:f3:f6:94:85:16:b7:93:4b:2b:b1:e5:44:
57:47:bc:15:ce:f4:c4:23:3d:fa:61:34:a9:c9:85:
45:d2:09:ff:24:e8:11:25:c3:f6:78:f3:da:7c:82:
b8:ac:aa:5e:87:d0:7d:da:3e:c2:ff:aa:66:48:58:
1b:f3:fa:49:49:ca:74:85:06:26:27:d7:77:4d:a1:
ac:93:50:b9:b0:3f:c6:20:4c:7f:81:d0:5b:17:4c:
9a:3c:cc:3a:b4:a5:95:93:d0:06:25:5d:80:f7:b3:
0a:fb:34:69:b3:f9:38:f1:e1:e4:99:50:1b:11:b4:
08:59:60:4f:bb:7f:76:ff:12:70:72:1e:57:1e:1c:
46:30:58:7e:cf:7c:55:f3:34:13:ba:36:05:b5:32:
85:f5:d4:e5:cc:a8:a7:2b:db:bc:a9:39:56:3d:e7:
d5:95:98:f8:db:fd:19:40:fd:4f:87:a8:2d:4e:c5:
1f:99:04:f1:8f:a6:96:6c:4f:63:f1:3a:d7:8f:49:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:85:8C:BE:B2:0E:22:5C:07:9A:24:B7:65:51:41:A6:8B:BC:1F:19
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/GoWMvrIOIlwHmiS3ZVFBpou8Hxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.96.0/22
IPv6:
2a0c:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
62:e5:f4:e0:49:97:24:c4:d0:26:12:58:dc:55:cb:d8:64:cf:
48:b8:6b:a4:3a:d8:9b:f0:de:71:0a:93:98:95:3c:59:34:2e:
8d:c3:b2:e4:03:fc:59:65:16:7c:79:7e:69:62:d4:58:28:51:
8a:d8:2d:87:cd:ec:ff:15:58:01:34:88:53:8a:5c:f1:d4:eb:
09:d8:35:11:ab:cf:29:29:9d:8a:af:a2:44:3c:19:85:83:1b:
52:fd:47:f6:e4:eb:43:4e:db:08:58:d6:d8:30:46:f2:93:75:
75:d2:9c:77:84:b7:29:92:e0:45:0c:f5:c8:c3:f5:f1:52:9f:
ab:99:02:ed:d8:76:cc:cc:8d:ef:29:56:bb:33:56:4c:2b:9c:
ef:a7:c9:f6:5f:d9:b1:50:b2:e8:61:09:3c:72:ca:80:58:25:
b4:a8:d0:90:6d:a2:85:89:61:02:bc:7f:67:3b:af:4a:2e:ae:
b3:18:cc:bd:85:99:31:89:96:57:60:6c:68:73:e8:56:8c:aa:
ad:85:34:4e:b6:40:48:a3:8f:5c:d4:c6:d0:f9:18:c2:26:dd:
c1:88:2a:73:05:83:09:d7:02:0e:fc:67:0b:6b:fa:e2:a6:39:
1b:45:22:51:28:3a:d9:db:38:08:99:38:4a:49:65:c7:61:b1:
93:f1:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:59:40 2024 by rpki-client on console-fra.rpki-client.org