Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/GidnpJUdBBsN_scgTYlfb_06j_c.roa
File: GidnpJUdBBsN_scgTYlfb_06j_c.roa (raw, json)
Hash identifier: v+Mh46h6yo6EL+JlKI1a6yDTAN/yqlBATM96X1jxc9w=
Subject key identifier: 1A:27:67:A4:95:1D:04:1B:0D:FE:C7:20:4D:89:5F:6F:FD:3A:8F:F7
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 018CC7270E6088AA9667BE1E18C3CD82D85E
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/GidnpJUdBBsN_scgTYlfb_06j_c.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202730
IP address blocks: 185.142.112.0/24 maxlen: 24
2a07:2d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0e:60:88:aa:96:67:be:1e:18:c3:cd:82:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a2767a4951d041b0dfec7204d895f6ffd3a8ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:df:b4:42:54:c5:ea:ee:db:92:d1:78:54:
75:8b:6e:40:18:9d:83:d2:a5:8b:91:3e:e1:73:27:
77:df:e3:af:95:d0:d7:c7:44:28:8a:46:86:35:0a:
1f:a4:32:c3:71:5f:f6:b6:fb:5a:45:01:71:d9:8b:
9f:4c:31:20:d0:df:af:a7:ec:2b:a7:e4:b4:0e:a5:
a1:4b:93:9b:16:75:36:93:71:d4:63:58:1e:a2:09:
5f:71:24:29:c3:70:1b:c0:bc:95:e4:df:7b:99:18:
41:3d:87:2d:02:5b:bc:69:90:e3:ee:af:57:42:e8:
4f:be:ee:fe:f6:b8:59:2f:df:2d:fe:ec:0e:dc:a5:
46:b0:2e:a2:91:98:aa:d9:b8:71:67:4a:3d:29:07:
7c:7f:b4:ca:30:1c:66:c8:98:07:18:f8:c6:d3:de:
55:ee:b7:64:28:11:fe:df:29:37:4b:78:30:c8:a6:
b2:b2:6f:0a:52:53:1d:66:d8:f6:95:82:f7:ee:54:
42:59:a3:ce:ba:00:00:4c:d6:dd:1a:52:e3:14:01:
28:5c:6a:35:93:48:f8:f5:16:0d:09:31:1f:a1:4f:
03:ba:77:f3:11:0c:27:29:e1:7e:5e:94:d2:b3:93:
64:a9:d6:8b:78:55:95:73:0e:20:4f:5a:08:f2:b1:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:67:A4:95:1D:04:1B:0D:FE:C7:20:4D:89:5F:6F:FD:3A:8F:F7
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/GidnpJUdBBsN_scgTYlfb_06j_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.112.0/24
IPv6:
2a07:2d00::/48
Signature Algorithm: sha256WithRSAEncryption
b8:81:49:e6:96:25:e4:ea:f7:14:8b:c9:f6:ac:96:62:f0:00:
6c:98:1b:ce:8f:14:9c:db:c0:1d:2e:f1:08:0b:53:11:54:5d:
c2:22:09:5d:df:1b:64:b6:94:42:0f:d2:10:84:d6:b5:a9:64:
ae:d8:fd:34:3b:5d:f5:42:22:87:f1:e0:fc:a0:42:0a:40:e1:
cd:94:18:1d:d0:3d:32:c0:0a:24:d8:a5:32:10:46:0a:8f:20:
36:74:07:54:55:09:f4:e7:fa:66:58:0a:fa:e5:e5:42:db:d8:
2d:f0:7a:0d:33:0b:67:d3:ae:e9:4c:4f:d2:33:94:9c:b8:fc:
09:1a:ad:68:a6:80:7d:94:6e:6d:d2:61:69:23:65:7a:6b:f4:
7e:39:77:54:ab:b6:f7:e6:ec:59:16:e0:86:69:5d:08:37:35:
7a:d0:31:92:aa:7f:20:5a:96:84:9f:22:a7:02:f9:ae:60:8a:
05:e0:93:84:90:1a:f3:b3:81:c4:9b:68:75:8d:a0:e5:22:a6:
d9:94:aa:58:18:16:d2:3f:27:07:af:83:02:ea:97:97:bf:67:
41:80:d3:df:12:21:9d:35:14:96:b8:09:39:8e:13:a6:3e:66:
b7:a7:bd:e0:6a:db:fe:c7:c3:f6:cb:d5:45:dd:ae:c7:1a:3e:
0a:b1:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:20:22 2024 by rpki-client on console-fra.rpki-client.org