Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/GqchX1BXmcbND4X870da7zE92R4.roa
File: GqchX1BXmcbND4X870da7zE92R4.roa (raw, json)
Hash identifier: aMBXVLFJDvbxFGWSFm6wAQ/Y2qAw1kxRNoQKzYRiUCY=
Subject key identifier: 1A:A7:21:5F:50:57:99:C6:CD:0F:85:FC:EF:47:5A:EF:31:3D:D9:1E
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 018CC500E6FFDEB6CF53942221ECF7BEBFFD
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/GqchX1BXmcbND4X870da7zE92R4.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59872
IP address blocks: 185.68.44.0/22 maxlen: 22
185.68.44.0/24 maxlen: 24
185.68.47.0/24 maxlen: 24
185.68.46.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
91.206.20.0/23 maxlen: 23
2a07:c880::/29 maxlen: 29
2a07:c883::/32 maxlen: 32
2a05:1600::/29 maxlen: 29
2a05:1603::/32 maxlen: 32
2a07:c881::/32 maxlen: 32
2a07:c884::/32 maxlen: 32
2a07:c882::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 Nov 2024 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e6:ff:de:b6:cf:53:94:22:21:ec:f7:be:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aa7215f505799c6cd0f85fcef475aef313dd91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:79:9a:1e:85:6e:73:e0:76:15:b2:87:71:
a9:88:f4:f4:41:5f:05:f6:52:cd:77:7d:27:6f:45:
37:d7:1c:39:c3:15:d7:48:59:a8:34:ca:54:cf:42:
bc:21:0a:b5:e1:c8:3d:35:5a:c3:9c:d9:d6:d9:af:
6b:bd:d6:32:d3:3d:66:35:b4:69:77:d6:c8:c9:35:
3d:cc:f2:88:a8:09:52:17:d1:d7:f3:95:79:1d:32:
27:37:b4:98:b2:2c:4a:f3:a2:81:89:e9:a8:56:e2:
26:9d:76:97:b4:79:22:a9:bd:e0:cc:51:5e:70:05:
f6:0a:f7:5f:1c:32:e8:76:5b:ca:84:f5:df:e5:d0:
a3:38:4f:34:05:3f:05:80:bf:08:e6:52:3f:46:be:
f4:0b:b2:76:68:fa:a6:50:5f:d3:24:ca:a0:ad:40:
41:32:18:14:7c:f5:7d:ec:27:74:a5:6c:fe:c0:6e:
25:36:27:56:00:a6:6e:c1:45:26:42:84:d8:06:83:
92:36:ca:34:74:98:83:b5:62:38:65:21:2c:f1:56:
7c:e8:f2:09:ec:c2:c9:33:2e:ab:57:4d:e8:18:2c:
5d:ca:a3:2b:1d:a6:4b:42:5a:d9:53:4b:49:9f:14:
72:9b:a0:b5:59:26:8b:69:45:cd:67:74:72:97:0b:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:21:5F:50:57:99:C6:CD:0F:85:FC:EF:47:5A:EF:31:3D:D9:1E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/GqchX1BXmcbND4X870da7zE92R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.20.0/23
185.68.44.0/22
IPv6:
2a05:1600::/29
2a07:c880::/29
Signature Algorithm: sha256WithRSAEncryption
ca:d1:47:59:f5:1e:bc:58:4a:b3:7a:86:42:bf:39:07:70:84:
b9:2c:37:dd:64:a0:84:91:91:33:ca:21:44:b0:2c:5e:34:02:
7b:23:22:7e:bc:ad:e3:00:57:a9:ed:4a:8c:64:33:e3:f8:de:
7c:2d:84:ee:c4:93:6f:f2:22:c2:91:ad:50:30:35:37:34:ae:
f3:9f:e4:c6:e7:17:7b:00:c3:9a:26:0e:72:f9:5c:f1:80:00:
09:4a:bc:35:c2:fa:a6:5f:cb:7d:3c:a5:eb:fc:8b:2f:62:62:
f1:73:6a:6b:ae:d7:c4:e6:77:77:1b:dc:d3:5c:a1:5a:2e:8e:
75:1d:b0:36:9a:68:32:98:d5:44:53:c9:1c:a6:3e:2f:85:88:
29:45:e8:1a:9b:58:ae:a5:c6:a0:03:c4:81:25:69:13:a3:89:
93:9f:85:29:c5:44:f3:1a:71:31:ef:65:da:ae:2c:06:12:a3:
c0:62:6b:90:f2:ce:a4:54:b9:4d:81:6c:ce:1c:3b:7d:ed:73:
bd:8a:e7:66:19:30:bc:96:04:b5:1b:87:f8:fb:37:b8:9c:4e:
ba:37:e4:ae:c1:9c:b5:ef:95:fb:5c:b8:6a:e3:b5:db:bc:e1:
15:6d:2f:04:4d:00:5c:9e:49:23:77:c4:d8:46:e5:8b:b1:21:
20:3c:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:19:21 2024 by rpki-client on console-ams.rpki-client.org