Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/gFFHIwXgskaLmk7jGwfFrG-WkSY.roa
File: gFFHIwXgskaLmk7jGwfFrG-WkSY.roa (raw, json)
Hash identifier: 8ZhJtdRdpZ/T4UYoEZt4cjnA1BvrhWwWFHuW+EOVUYM=
Subject key identifier: 80:51:47:23:05:E0:B2:46:8B:9A:4E:E3:1B:07:C5:AC:6F:96:91:26
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 018CCA2BD0841276390B820A06239A32DCBB
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/gFFHIwXgskaLmk7jGwfFrG-WkSY.roa
Signing time: Tue 02 Jan 2024 12:35:18 +0000
ROA not before: Tue 02 Jan 2024 12:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41085
IP address blocks: 195.189.102.0/24 maxlen: 24
195.189.102.0/23 maxlen: 23
195.189.100.0/23 maxlen: 24
195.189.100.0/22 maxlen: 22
195.189.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d0:84:12:76:39:0b:82:0a:06:23:9a:32:dc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Jan 2 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8051472305e0b2468b9a4ee31b07c5ac6f969126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:2b:25:23:63:2e:0c:bf:94:ca:21:0e:1d:
c3:2e:e0:e7:c4:94:95:f2:7b:fa:34:d0:d8:6b:ef:
18:2f:cd:a8:42:25:3c:44:d3:82:da:19:d1:b7:82:
5b:2d:10:f5:f3:7a:df:3f:f1:cf:56:9e:33:74:a4:
d8:65:bd:d2:eb:23:ae:57:bf:16:0d:b6:6d:1e:10:
28:bb:0e:85:1b:32:af:f7:78:28:2c:3a:4b:52:8d:
d3:09:62:8d:a4:dd:1c:83:2f:58:21:7e:c0:7c:c6:
0b:0b:47:a7:ce:7b:73:0c:20:f8:3b:8c:05:28:67:
9b:13:cb:90:ef:23:12:a1:c1:34:e0:b2:25:f9:cc:
2d:09:fe:ae:a7:21:7c:18:07:03:18:33:8e:27:dd:
ac:3b:fb:8a:bb:e7:85:d2:ef:98:62:b6:b8:0a:be:
a3:b4:4a:49:c8:4f:32:fa:5d:e8:73:52:2c:b1:84:
ce:1c:b9:d7:90:90:a4:7b:de:8f:4a:9c:7f:f5:bd:
33:14:c0:79:49:51:6a:5e:e0:e8:0f:63:43:d2:9a:
ea:a2:34:39:3b:00:27:66:ec:62:fc:b7:81:9f:8d:
ea:4b:7d:9d:3f:11:66:0f:e8:d7:2b:d2:bb:61:e9:
86:d9:76:bf:5a:cb:47:82:01:cb:8f:09:b6:4a:b1:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:47:23:05:E0:B2:46:8B:9A:4E:E3:1B:07:C5:AC:6F:96:91:26
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/gFFHIwXgskaLmk7jGwfFrG-WkSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:b0:4c:99:10:ff:b1:4f:a7:87:78:6d:da:ba:37:d0:29:f6:
de:ee:9c:bc:e3:34:da:8d:d4:1e:0f:e3:ad:e4:ca:b3:02:7d:
bc:cc:c3:ce:ae:9c:87:42:7f:a3:b1:77:62:8f:95:d4:6f:a5:
f2:69:6e:e2:32:dc:dd:eb:17:bd:b8:7c:b9:76:ba:98:55:72:
4b:f0:f7:69:8f:28:0a:90:f1:74:01:64:bd:c3:24:5f:25:a3:
57:6e:20:ef:d3:5c:1d:c2:29:a1:4f:a6:dd:f6:1c:18:65:94:
11:49:11:8f:a6:a0:7b:a3:11:67:18:e7:57:b2:aa:18:ad:9a:
b6:93:02:28:3a:0a:24:48:ff:b5:90:f8:47:54:d6:3e:85:ee:
16:d5:e7:0f:ff:dd:b6:be:03:1c:71:6a:af:00:f5:2e:75:f5:
d5:f6:67:05:70:a7:14:79:dc:0a:15:41:0a:05:cb:c5:5c:58:
02:a8:57:52:f6:4d:56:46:a0:5c:bb:f8:bc:44:7d:48:76:5a:
7a:0e:65:a2:9a:82:38:94:2d:1a:21:34:dd:a3:6d:ec:3d:c6:
ef:23:81:bd:8e:2e:4c:04:f1:22:47:2d:c2:03:4a:85:0b:55:
9f:8a:ee:bf:b2:1a:eb:ba:27:d3:9f:ec:74:df:93:51:c5:7e:
3a:ba:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:02 2024 by rpki-client on console-ams.rpki-client.org