Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GUkg3B_ve9AwVehzWk6lbIygznE.roa
File: GUkg3B_ve9AwVehzWk6lbIygznE.roa (raw, json)
Hash identifier: 4R2xty/vJf+1/nlbWXw4iEmVpPIRDOSz3OtShnEHlNI=
Subject key identifier: 19:49:20:DC:1F:EF:7B:D0:30:55:E8:73:5A:4E:A5:6C:8C:A0:CE:71
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018DE46607629295F7562DFF220E28699CCC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GUkg3B_ve9AwVehzWk6lbIygznE.roa
Signing time: Mon 26 Feb 2024 07:51:48 +0000
ROA not before: Mon 26 Feb 2024 07:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 82.115.28.0/23 maxlen: 24
185.231.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:66:07:62:92:95:f7:56:2d:ff:22:0e:28:69:9c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 26 07:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=194920dc1fef7bd03055e8735a4ea56c8ca0ce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:38:a2:2c:8e:26:c4:7a:81:70:60:a2:d0:
ca:94:61:2a:89:a6:9c:fb:7a:98:9b:bf:77:2d:52:
31:db:e5:b9:0c:8a:08:b9:6e:19:db:f9:94:7c:34:
ab:8f:09:55:b5:9f:ab:55:2e:5f:51:44:3a:01:8c:
15:e4:06:c7:ad:69:59:da:15:de:73:b5:ff:b5:71:
a8:93:f5:d6:f5:35:d6:1c:60:f6:2e:62:d1:fc:86:
de:4e:1c:1c:ff:a3:a7:f5:d1:5f:24:c9:6d:96:e3:
d4:62:1d:5b:17:11:f1:31:0a:0c:4e:f5:80:f3:73:
f2:bd:b1:2e:6c:e2:51:bb:81:4f:6e:26:1c:76:6a:
9b:60:bd:02:3d:cc:19:2c:01:c2:de:2c:17:45:f8:
fc:5c:1b:a8:8f:b2:ac:95:e9:02:63:6e:3f:92:bf:
90:f1:7e:ad:55:d9:1f:c8:80:e6:a9:25:9a:91:2a:
2b:8f:72:07:ee:bf:d9:15:a1:89:17:9b:cb:86:32:
19:c7:5f:b7:5f:d9:1a:03:34:ba:97:fa:22:7f:f0:
be:99:f3:a4:e6:de:df:60:43:36:61:6d:84:a8:76:
e7:c9:71:11:6a:36:b7:f4:a1:23:7d:ac:25:af:ae:
28:71:e2:8c:cb:2d:a0:72:2a:2d:4b:48:68:e6:23:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:20:DC:1F:EF:7B:D0:30:55:E8:73:5A:4E:A5:6C:8C:A0:CE:71
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GUkg3B_ve9AwVehzWk6lbIygznE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.28.0/23
185.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e2:f7:c7:10:5c:32:00:74:95:3a:fa:be:0a:ec:55:a3:df:
de:8d:b5:5b:5f:4e:69:7d:63:65:87:ce:06:db:11:b4:7f:a7:
e6:18:e7:d1:c2:41:f2:0d:43:6b:2e:4f:56:29:f4:ee:10:8e:
63:9a:b7:a2:58:7d:26:ee:d9:6a:f9:98:c2:68:03:84:72:56:
44:8e:8c:0f:c9:58:50:95:6d:6c:7b:30:14:04:e7:3f:75:73:
96:0e:35:67:d0:b2:82:ca:c2:e2:a6:76:63:11:f5:69:e3:12:
44:9f:7c:b8:c4:9c:22:a7:ae:d1:fd:a0:af:f0:18:b1:26:a4:
d8:c7:73:f8:5a:1c:5f:75:2a:86:d2:ba:07:af:c5:32:8c:e6:
7e:6b:89:2d:95:2b:80:41:ca:a7:ff:42:bb:f3:f8:3e:87:8d:
5d:f9:8a:62:27:07:ee:e0:1f:af:6d:68:bb:78:79:cc:76:ca:
bd:b8:93:af:d5:9b:3b:4a:cc:43:69:02:dd:81:b0:66:eb:56:
d3:0f:50:0e:3a:0a:9c:15:f5:90:df:91:7f:41:79:3b:08:51:
c1:3b:67:8a:5a:b3:eb:e8:c6:95:ad:36:12:73:44:c8:54:ba:
3a:68:5d:ca:c7:09:4f:d5:9a:01:fa:bd:f2:ee:c2:57:18:06:
9d:95:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:02:09 2024 by rpki-client on console-fra.rpki-client.org