Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/GswrblaTMeJ8_s3U2Pt2A0xK6Jw.roa
File: GswrblaTMeJ8_s3U2Pt2A0xK6Jw.roa (raw, json)
Hash identifier: iccv2napXJlX6I8rOCnc/4a/CzHNB6kJ3R3bgEpqrA8=
Subject key identifier: 1A:CC:2B:6E:56:93:31:E2:7C:FE:CD:D4:D8:FB:76:03:4C:4A:E8:9C
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 018CC50055B7203DADF9148DE129491BE170
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/GswrblaTMeJ8_s3U2Pt2A0xK6Jw.roa
Signing time: Mon 01 Jan 2024 12:29:42 +0000
ROA not before: Mon 01 Jan 2024 12:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12762
IP address blocks: 193.186.88.0/21 maxlen: 21
193.186.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:55:b7:20:3d:ad:f9:14:8d:e1:29:49:1b:e1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1acc2b6e569331e27cfecdd4d8fb76034c4ae89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:72:ec:2a:2c:d4:c1:ab:66:dc:3d:e5:5d:
4b:2d:b4:98:78:79:60:91:48:bf:71:5c:cc:74:4a:
a9:ba:b1:d7:8f:f7:ba:ad:fe:25:ff:cc:2a:c0:3c:
d4:b1:50:b2:b9:18:4d:ba:8e:b6:32:04:7e:3f:60:
40:16:78:b8:9e:41:8e:b3:4f:15:3e:44:a2:43:be:
05:a9:a2:72:b6:4c:ba:2a:ad:89:4a:58:bb:f9:26:
91:e6:b5:ee:7b:dd:cb:92:05:12:66:99:ef:b6:51:
36:75:61:e5:e9:b3:76:f5:03:ad:9b:33:ec:eb:71:
65:bd:c9:96:c9:ba:9f:25:63:e5:07:31:fe:aa:18:
54:a5:2a:bf:a3:88:da:4c:54:e2:ed:7d:8a:65:b4:
52:24:da:fc:ab:cd:66:1e:7e:4c:18:2a:95:3a:1f:
5e:2f:1a:c5:b9:be:56:5d:f8:68:fb:77:27:0b:38:
4d:1e:3d:ff:0c:84:d4:51:c6:e5:7a:aa:39:c4:a2:
71:0a:b7:66:d3:79:17:6e:df:a6:2a:71:fa:44:03:
05:5d:81:8f:62:b2:25:f7:2f:25:a6:0e:13:90:2e:
f0:72:5f:d6:df:60:e5:cf:cd:39:53:45:9c:fc:7f:
0b:ca:5e:5b:75:dc:1a:80:39:0c:bd:56:76:d6:2e:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:2B:6E:56:93:31:E2:7C:FE:CD:D4:D8:FB:76:03:4C:4A:E8:9C
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/GswrblaTMeJ8_s3U2Pt2A0xK6Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
0c:ee:ef:6b:d2:79:6b:51:81:ec:cf:53:2e:2b:5d:61:02:a0:
09:16:05:29:19:50:01:68:e3:64:52:00:7a:09:62:ad:35:ed:
5a:5c:a2:f4:da:7a:05:05:ce:ec:7a:f3:56:41:2a:35:3a:a0:
27:7e:b7:82:8a:c2:63:ce:98:ee:dd:df:c0:d8:68:12:8d:55:
9e:e4:c9:80:fd:be:7d:32:4e:2e:b5:c6:9e:c5:2b:34:d4:e2:
01:a2:b7:b3:59:ea:11:ad:fa:29:cf:be:29:89:4f:77:10:b5:
d9:10:55:52:21:b8:3c:a0:fa:66:1d:1f:fe:59:c6:26:e5:15:
0d:1e:6e:0f:f9:d5:1f:07:47:76:37:93:06:2e:d3:f2:05:48:
f8:28:5e:df:6c:44:d6:43:5b:b0:1e:53:7a:26:fa:cb:07:a8:
57:5a:2f:a9:23:f0:32:8a:5e:97:c9:b2:69:56:e1:2c:b2:6f:
f7:66:b1:12:f2:52:11:2f:03:63:a9:18:19:cf:5f:2c:12:d5:
08:f1:7b:b8:30:ec:c2:2d:e5:74:ce:e8:2c:fd:3d:76:56:62:
26:39:92:16:4d:a5:ef:56:e2:6d:ab:c3:64:ea:a4:c2:61:52:
87:69:01:ef:3e:47:1b:01:cd:42:2f:7b:31:c4:13:8d:c1:85:
c0:43:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:22:52 2024 by rpki-client on console-fra.rpki-client.org