Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gl5qKmXjuB4_k3cz2DavKtzxdSc.roa
File: gl5qKmXjuB4_k3cz2DavKtzxdSc.roa (raw, json)
Hash identifier: wkJb2iSUvANkJ/6LsfE1rzcaYmP50QFvdcQW7OA7B0Q=
Subject key identifier: 82:5E:6A:2A:65:E3:B8:1E:3F:93:77:33:D8:36:AF:2A:DC:F1:75:27
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7395327038941B2B5514D6114D0CF
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gl5qKmXjuB4_k3cz2DavKtzxdSc.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39931
IP address blocks: 83.206.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:39:53:27:03:89:41:b2:b5:51:4d:61:14:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=825e6a2a65e3b81e3f937733d836af2adcf17527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:7b:5d:68:5e:fb:24:7b:2f:76:a8:0d:eb:
13:3b:d4:30:20:b9:cc:37:7e:da:c4:88:ca:63:66:
2f:c5:6a:ed:df:1e:b2:83:7b:eb:39:f2:01:9b:2b:
05:e7:bd:e4:a7:0c:29:db:fd:86:09:37:07:91:25:
97:8e:74:ba:46:b6:50:63:e0:46:65:c3:e2:bc:7c:
4e:83:02:de:60:b8:a8:b4:51:d1:54:57:45:ca:ab:
a9:c9:23:cc:68:6b:28:1f:86:92:b5:c1:05:d1:69:
c7:23:b4:fb:5c:3b:dd:45:da:79:d3:ee:fc:a8:d6:
b6:4f:59:38:b8:8d:aa:10:6a:28:21:9d:61:8b:03:
15:fd:1d:b6:b2:a9:7a:80:95:02:03:4f:5e:22:22:
b5:f5:86:4f:1c:6a:86:d9:ed:4b:7a:96:9d:a8:d9:
bf:91:26:dd:ec:3c:a3:0b:79:0d:7c:e8:53:ce:2a:
ed:e0:a7:a2:0a:42:c7:dd:25:3f:d7:f8:63:9f:e2:
ab:4e:ea:24:d0:2e:f2:9a:b7:6f:0a:40:23:41:50:
cc:92:86:c7:37:78:d8:c1:d3:fb:30:80:43:1b:90:
39:bd:8e:a3:15:70:b4:0a:26:4e:10:6c:b2:41:72:
a4:34:fc:5d:4e:cd:a7:bc:9a:ee:7b:67:5d:d8:d1:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:6A:2A:65:E3:B8:1E:3F:93:77:33:D8:36:AF:2A:DC:F1:75:27
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gl5qKmXjuB4_k3cz2DavKtzxdSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.188.0/24
Signature Algorithm: sha256WithRSAEncryption
61:da:5e:48:a3:14:40:38:df:c3:ab:34:e9:e9:cc:9d:09:52:
50:bd:16:4d:85:79:ed:a4:f0:b1:00:25:38:4b:28:c9:f8:ac:
85:73:e0:f2:8b:61:a9:be:b0:12:e2:e0:5e:34:8a:5d:b6:33:
57:7c:b8:14:48:f7:55:07:4b:ba:9c:1e:0b:ae:f4:68:9b:46:
79:bc:5c:61:fb:42:07:da:b6:ca:cf:99:ff:3e:4f:4d:9a:f6:
c0:c6:a8:67:e3:a4:d0:62:01:2f:11:de:29:1c:d5:15:92:74:
e4:d4:a7:03:d3:2b:8f:ad:9c:60:02:f0:ab:0e:1c:11:07:ea:
c6:50:22:21:60:f5:d5:6c:1e:be:3f:74:e3:c5:6a:4f:de:cd:
37:35:9b:40:ce:8c:49:bc:63:44:d7:4a:28:2d:80:4d:67:77:
34:87:4d:17:cb:61:f6:02:e1:4f:02:ca:0d:9c:a1:0c:16:3c:
c6:07:88:13:1e:32:4a:88:05:b0:d6:41:97:08:c5:60:2e:d0:
fd:a1:4b:43:c7:55:7b:b1:6c:88:c2:35:9e:92:33:08:c8:c8:
ff:ef:8b:ec:2c:78:fb:83:6e:6e:4c:66:de:79:16:60:46:34:
c1:fe:c4:b3:08:a9:6f:8e:85:52:64:4b:c6:c8:16:88:7f:cf:
5e:e4:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 20:46:07 2024 by rpki-client on console-fra.rpki-client.org