Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3_G-GQT1klAxRrJJxUzXIuzHkgg.roa
File: 3_G-GQT1klAxRrJJxUzXIuzHkgg.roa (raw, json)
Hash identifier: Wuf2f0Hq2CvoDdUQs+scfti9A2/NfmdIjOZHs8qZfgY=
Subject key identifier: DF:F1:BE:19:04:F5:92:50:31:46:B2:49:C5:4C:D7:22:EC:C7:92:08
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB9E51493C857D4B38E5BE2AFF9E4
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3_G-GQT1klAxRrJJxUzXIuzHkgg.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209250
IP address blocks: 195.168.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b9:e5:14:93:c8:57:d4:b3:8e:5b:e2:af:f9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dff1be1904f592503146b249c54cd722ecc79208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:df:89:63:76:59:4c:fb:2b:d3:ae:ac:70:
c4:fb:a5:f3:48:5a:70:30:13:cb:e7:c6:9b:45:75:
6a:46:7c:41:27:fb:5e:86:9e:cb:49:17:4a:0d:01:
45:e7:de:92:16:8c:35:f3:cc:52:65:7b:68:06:61:
5c:b4:33:53:f3:c5:e8:6b:31:4a:ca:e1:35:84:ec:
53:80:1e:ee:f8:06:37:82:2e:fe:fa:cd:76:48:8f:
27:c2:29:dc:0b:e4:9f:5c:02:72:07:9f:34:e9:31:
55:14:6c:6b:92:b0:9b:ca:56:ab:82:7f:ab:80:f1:
cf:3f:de:e0:9a:79:2e:28:c4:75:2d:a6:f0:78:8d:
51:65:d5:ae:d7:57:81:13:a0:5b:b2:76:dd:fe:8d:
5e:b9:a2:15:60:27:0a:f8:67:82:25:34:6e:52:56:
68:eb:52:d5:fa:f0:93:a4:88:a1:07:7d:88:a5:2c:
82:be:d1:27:85:9e:76:d0:bc:18:01:b7:b3:03:47:
d8:96:52:bc:26:43:47:22:31:54:c6:f0:4d:4b:f1:
81:9f:9e:17:af:b9:46:94:35:ef:e8:d8:1d:ed:86:
5c:57:f2:96:e2:72:64:47:70:f4:f0:c5:ab:0e:01:
ff:d9:4e:45:30:1d:d3:23:45:dc:41:ef:fa:12:d5:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:BE:19:04:F5:92:50:31:46:B2:49:C5:4C:D7:22:EC:C7:92:08
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3_G-GQT1klAxRrJJxUzXIuzHkgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bd:8c:52:f1:aa:24:0b:fb:bd:82:bd:eb:9f:9d:7c:55:cd:
00:ec:5a:67:82:ad:73:68:61:c9:2f:d8:13:ee:ae:6e:91:9b:
ed:40:af:e5:b0:20:c4:ba:f4:5d:09:bf:9f:c1:21:8d:af:0f:
4b:c9:52:f1:7d:84:70:c3:12:03:46:58:ca:61:5d:de:50:2b:
66:5f:f0:cd:60:36:d5:f0:5d:7f:3e:6f:07:df:fc:7a:ba:e4:
76:94:a6:fe:41:df:1c:c8:09:c1:99:4c:f4:0a:b0:15:59:a8:
4f:fa:8c:71:f0:1b:7f:98:5e:d6:c4:ff:36:fc:6d:eb:7f:19:
60:bd:8d:e3:d1:0b:af:79:ae:cf:f9:62:9e:d1:da:eb:13:36:
03:8c:58:c2:c5:e3:dd:47:1a:b6:37:81:ea:f4:be:0d:85:6a:
33:e4:37:f5:db:db:6f:09:87:bb:c2:fc:d8:37:17:9c:c8:8a:
64:cb:a3:38:09:43:3b:d4:7c:ae:c5:af:33:b5:8e:53:dc:9e:
f5:73:67:63:52:38:7c:02:1a:4e:8b:f0:90:79:11:3e:e5:ce:
38:f6:f7:0b:35:3c:d3:23:ce:76:69:83:c3:da:be:6e:d1:ec:
ab:7a:a4:9d:26:a3:e3:96:d4:14:04:53:a4:76:e0:3f:bd:61:
ae:74:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:13:58 2024 by rpki-client on console-ams.rpki-client.org