Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/GAMgQuAtuYAbpdyZekqKPo20Gxk.roa
File: GAMgQuAtuYAbpdyZekqKPo20Gxk.roa (raw, json)
Hash identifier: uVQS5EW//MlePbtymr3zQUwMY2DVdxN0+JJhFZJsiAk=
Subject key identifier: 18:03:20:42:E0:2D:B9:80:1B:A5:DC:99:7A:4A:8A:3E:8D:B4:1B:19
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 018CC56EBB257BA088E8C45DD3FCDA119996
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/GAMgQuAtuYAbpdyZekqKPo20Gxk.roa
Signing time: Mon 01 Jan 2024 14:30:17 +0000
ROA not before: Mon 01 Jan 2024 14:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39826
IP address blocks: 185.84.144.0/24 maxlen: 24
185.84.145.0/24 maxlen: 24
185.84.144.0/22 maxlen: 22
185.84.147.0/24 maxlen: 24
185.84.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:bb:25:7b:a0:88:e8:c4:5d:d3:fc:da:11:99:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18032042e02db9801ba5dc997a4a8a3e8db41b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:4c:77:8f:38:27:12:50:de:55:f9:ae:98:
5a:cf:db:0d:b5:b5:10:22:ea:00:87:09:c7:4f:e7:
1c:96:3b:73:59:b1:35:7e:7c:4c:73:31:ec:0a:5b:
84:79:1a:c5:30:e4:0f:86:ba:cb:b7:27:87:0f:ec:
e4:b7:b2:e9:9b:97:79:1c:fe:f8:19:d1:67:df:5b:
44:a0:e5:1a:0b:01:a7:d0:da:9c:6b:dc:07:a0:f4:
76:d7:e4:cf:8a:e5:0f:58:e7:9b:5f:01:0f:60:66:
d5:6f:0f:82:7c:fd:b4:53:0c:64:54:93:f6:fb:00:
97:4b:df:e6:53:eb:fe:0b:f4:16:40:dd:7d:7b:64:
1a:5b:55:67:8a:5d:93:c1:01:64:e2:f8:c0:38:5a:
d9:3c:d3:35:9c:41:32:24:3c:55:47:97:7e:10:e9:
f0:04:71:9f:22:83:75:45:eb:e3:da:d9:61:f6:de:
fa:3b:42:d8:63:b4:f8:bf:c1:f0:4b:0e:2d:97:77:
f6:56:b4:9f:d4:c3:f5:40:23:cc:0e:61:e7:0f:1a:
b5:bf:18:95:2f:aa:cd:d6:fb:bb:54:6e:3c:0b:c0:
43:3f:5a:b3:fa:07:78:14:10:2e:cb:10:7a:a4:85:
0e:12:0a:25:e1:c9:d5:89:59:0b:d0:17:7a:4a:a5:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:20:42:E0:2D:B9:80:1B:A5:DC:99:7A:4A:8A:3E:8D:B4:1B:19
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/GAMgQuAtuYAbpdyZekqKPo20Gxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:7d:ad:2c:22:0c:e4:f0:4a:00:45:53:3b:7b:89:80:7f:8b:
c8:c7:77:17:05:da:ef:79:b1:6d:4c:ec:69:ec:e0:59:95:06:
08:b9:d5:db:f0:d7:8b:d4:2e:8c:43:e6:78:0d:75:a4:b2:6f:
93:f1:30:e2:0c:24:10:60:80:b8:61:05:06:1c:38:6c:92:0f:
af:91:07:93:55:36:5a:6c:7a:b9:f0:09:25:be:b5:ed:7f:66:
c6:4e:90:f1:24:f9:d3:13:b4:08:e1:27:e7:37:fd:2a:e4:fe:
1e:4a:c4:b3:16:2b:5e:f9:53:93:07:bc:4e:3c:9f:49:53:4a:
94:bb:9b:7a:25:63:a3:7f:c8:6d:8a:26:85:6d:58:60:12:66:
4a:16:9d:ed:95:4a:6d:6a:3f:ad:f2:d6:e8:06:13:30:6d:fd:
45:7b:dd:4d:65:c1:c9:0e:04:51:cc:aa:7c:55:96:56:b2:b4:
bb:6e:c4:5d:82:a2:cc:08:25:f1:87:20:d0:ab:8e:d7:02:84:
fd:6e:f3:12:9d:e1:51:88:a4:22:5a:33:f4:ca:eb:f9:d1:d7:
e0:e9:58:4d:87:71:0f:32:6d:8d:2d:85:7a:66:c0:84:22:e7:
4d:9f:84:6c:24:fc:83:0c:90:19:db:5f:df:1d:29:52:b9:18:
d0:4a:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:28:14 2024 by rpki-client on console-ams.rpki-client.org