Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/GLz4AV49UQIjgMDQ9ecaNiR4QU0.roa
File: GLz4AV49UQIjgMDQ9ecaNiR4QU0.roa (raw, json)
Hash identifier: vNGrCnC5pYYZnYGphPPMEBcpIiCud/3sSn1a3L7hlxk=
Subject key identifier: 18:BC:F8:01:5E:3D:51:02:23:80:C0:D0:F5:E7:1A:36:24:78:41:4D
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 018DD68C310C7503BFAF7F543530C435A8A9
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/GLz4AV49UQIjgMDQ9ecaNiR4QU0.roa
Signing time: Fri 23 Feb 2024 15:18:48 +0000
ROA not before: Fri 23 Feb 2024 15:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.23.238.0/24 maxlen: 24
185.23.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:8c:31:0c:75:03:bf:af:7f:54:35:30:c4:35:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Feb 23 15:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18bcf8015e3d51022380c0d0f5e71a362478414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:ac:c9:a6:24:a4:be:26:19:51:4c:5d:d7:
9d:06:01:21:6b:24:c2:44:11:ab:ed:67:9e:e6:21:
df:98:ba:be:c5:26:76:50:17:e7:28:0e:17:69:41:
05:35:a4:0e:2a:10:1b:61:b6:16:d4:73:b4:58:c2:
84:15:25:e9:eb:15:9f:d8:6d:ae:f8:69:d2:36:0f:
a5:dd:19:4e:08:dc:6d:fe:84:e3:bc:c4:0c:17:7f:
44:3a:af:35:7f:3e:34:4b:20:26:03:c3:27:13:0a:
17:e0:f8:75:ed:5b:e4:15:14:9f:11:e2:63:30:32:
49:ce:4c:e4:6b:79:fe:fc:25:13:a7:c9:5f:31:ec:
d7:6d:95:ae:34:11:b5:3d:0d:9b:31:81:55:1a:9c:
5c:fd:12:6c:98:41:0f:d8:d2:6b:42:ba:33:75:6b:
9e:1b:a7:51:33:fb:77:40:82:d2:79:63:61:6e:b6:
8e:cb:be:b5:d5:99:d5:5c:7c:e4:04:69:13:b8:6c:
8b:4f:1d:55:0b:f7:00:30:79:db:31:00:59:74:58:
60:7d:49:50:5c:41:0c:ab:f5:7e:65:4d:4b:22:62:
07:b7:ac:9f:8a:f0:2d:51:51:03:01:64:64:8e:7d:
31:ed:ce:cc:35:5d:94:81:9e:0f:a5:d4:62:a7:74:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:F8:01:5E:3D:51:02:23:80:C0:D0:F5:E7:1A:36:24:78:41:4D
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/GLz4AV49UQIjgMDQ9ecaNiR4QU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:d2:f4:78:6c:eb:5f:35:a0:cc:a3:2a:ac:6d:cb:f3:4c:00:
b5:f3:04:e5:4e:9c:10:69:73:14:40:2a:e2:66:6d:5b:51:97:
71:48:3d:72:0a:b0:12:8b:10:92:3c:ba:9e:4a:97:78:c5:d4:
4a:8d:49:a1:48:05:56:aa:cf:cb:82:b1:b3:8c:28:a5:67:c5:
8c:83:e6:7c:85:cd:6e:31:5c:5e:33:a9:cb:05:1a:9b:6d:a0:
cb:11:6b:5d:c0:32:39:d7:97:00:4f:01:ba:9f:af:fd:ed:bd:
d1:a6:aa:ef:f8:a3:e5:9b:a6:ab:be:f7:ed:b9:02:ba:96:84:
e2:70:8d:c9:22:24:51:fe:dd:73:d1:17:34:61:03:f4:b8:7d:
9b:a5:60:e4:bc:b3:28:6b:ec:0c:72:45:46:01:91:36:33:b6:
8d:fa:cd:e7:54:a3:c4:e3:b6:e9:d8:9e:9c:ec:de:30:51:5c:
ee:51:7c:a4:ed:4d:12:94:34:0c:88:e4:f1:33:99:66:d1:b2:
a3:ed:42:0f:fb:0f:b3:74:d0:64:41:f7:29:20:ff:bc:bb:85:
33:96:4e:19:c9:4c:31:b9:f4:85:bb:0e:1b:56:d2:39:3c:6c:
29:14:ca:84:35:85:c2:15:74:5f:ba:ec:84:01:e1:94:9f:ec:
0d:ed:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 20:16:09 2024 by rpki-client on console-fra.rpki-client.org