Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/Gm5puRTTyBme07GTnLnZCLjQ2XE.roa
File: Gm5puRTTyBme07GTnLnZCLjQ2XE.roa (raw, json)
Hash identifier: AdUYZ1t1inpEyn8B52/o6BH3bIuqyjydtFCOZ46pswI=
Subject key identifier: 1A:6E:69:B9:14:D3:C8:19:9E:D3:B1:93:9C:B9:D9:08:B8:D0:D9:71
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 018CC3496255C069A64A4F1EB3A196B7B71A
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/Gm5puRTTyBme07GTnLnZCLjQ2XE.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201291
IP address blocks: 194.93.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:55:c0:69:a6:4a:4f:1e:b3:a1:96:b7:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a6e69b914d3c8199ed3b1939cb9d908b8d0d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:92:46:48:28:23:fd:fd:f0:dd:43:b3:5c:
02:3d:ec:27:7a:98:84:00:3f:d6:8f:01:ca:93:d8:
68:39:39:a4:59:ae:56:f7:41:14:06:1d:87:69:0d:
d6:4a:bd:93:83:bb:49:18:5e:99:bd:00:66:4b:f4:
91:87:1f:48:f6:65:b9:a6:b0:87:88:bc:47:4e:57:
1a:18:cd:a9:c6:88:27:60:a1:c4:bc:2c:19:ad:a6:
b1:a6:11:0e:d4:22:22:6f:c8:42:f0:44:24:cf:ee:
ff:72:21:4f:50:92:c6:0c:36:37:1d:be:a8:e2:a6:
42:e7:6f:bd:f2:83:06:7e:f8:77:ab:19:1d:d4:16:
ef:1f:9b:2d:2e:54:ff:03:53:8d:ea:e9:b5:c4:9c:
15:36:89:30:d0:4f:f3:c4:41:71:49:67:48:0a:5c:
7d:95:fd:bc:b2:ba:8f:6d:55:17:e2:d5:a4:f6:8f:
3c:7c:90:ac:dd:f8:46:d6:29:00:44:ee:93:d4:dc:
31:ec:67:a9:50:60:a5:da:a9:5a:a8:a2:44:eb:ff:
2a:e3:ff:2a:27:f3:0f:b0:93:09:e2:97:f6:f0:0f:
7b:84:47:bb:57:5a:b9:93:aa:23:48:87:78:5d:87:
fe:8f:4c:16:d4:f2:62:c9:18:b9:e8:5f:cb:01:be:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:69:B9:14:D3:C8:19:9E:D3:B1:93:9C:B9:D9:08:B8:D0:D9:71
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/Gm5puRTTyBme07GTnLnZCLjQ2XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d0:36:21:06:a2:f6:df:4f:25:40:35:99:00:76:fd:6d:04:
8d:6a:6a:41:93:28:df:3b:fe:85:53:7d:8f:02:88:a8:c6:7d:
0d:ec:9c:cb:eb:b0:8a:e1:78:9b:a4:18:59:22:80:7f:36:a0:
b4:d4:0c:fe:a2:d6:66:97:b5:2a:98:2a:2c:88:7c:fb:ce:fc:
bd:f0:60:30:f4:8a:68:fb:27:04:dc:49:c7:fc:b9:ef:69:40:
7a:35:ec:59:0d:7c:7b:97:39:b9:07:f5:74:b2:46:26:b1:0d:
27:26:15:9b:3e:80:0f:52:9a:f6:cf:5b:eb:45:7f:e1:c0:94:
42:7f:94:17:ad:9e:80:a7:45:54:a8:c7:ef:23:f0:97:e3:35:
7d:4b:50:1c:95:9e:c8:31:6c:08:dc:88:35:b7:ff:4e:46:93:
a4:5d:37:1a:4d:70:7d:68:a0:50:29:78:29:85:55:ef:ca:b8:
db:7d:c6:34:bb:16:a9:f4:a4:6b:4a:cf:9e:7d:d8:a5:e2:15:
93:54:08:ff:63:0e:1a:87:5e:6f:50:86:d0:e0:42:f7:5d:d6:
e4:90:b8:75:f6:9e:69:c6:37:dd:a4:4d:07:31:83:b5:2b:c0:
4a:c4:cd:ee:ee:b0:fa:89:50:c4:c4:10:b9:15:7b:54:db:38:
ca:a0:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:27 2024 by rpki-client on console-fra.rpki-client.org