Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/GPzFw0FuBJO-AKCcklM0MNP4hpo.roa
File: GPzFw0FuBJO-AKCcklM0MNP4hpo.roa (raw, json)
Hash identifier: daS1NECFW8pyWHMom0ia6c4Ig8qsQWBPMU6Ox/bVH4E=
Subject key identifier: 18:FC:C5:C3:41:6E:04:93:BE:00:A0:9C:92:53:34:30:D3:F8:86:9A
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FDB5AA5311B5FAF87485EB8C69BC5
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/GPzFw0FuBJO-AKCcklM0MNP4hpo.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204874
IP address blocks: 2a03:5840:280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:db:5a:a5:31:1b:5f:af:87:48:5e:b8:c6:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18fcc5c3416e0493be00a09c92533430d3f8869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:fd:18:67:de:da:43:1b:e7:dd:4e:4a:50:
e2:f4:2f:ec:0d:58:18:6a:a1:0f:62:17:88:9b:c0:
14:6f:03:6a:c3:42:db:fe:33:34:ad:c3:d4:13:9e:
c2:4b:77:54:97:74:a3:ff:11:0b:c8:c7:90:3b:a9:
93:db:6c:18:c2:2e:38:38:58:dd:e6:fd:18:d0:68:
93:bc:40:eb:7e:03:d0:73:19:6b:7e:6b:a8:e6:40:
fd:1c:c1:26:6c:44:46:ab:00:f3:cd:3c:f5:2e:3d:
51:c8:8f:86:16:f2:88:2a:26:68:51:29:d4:8d:a9:
7a:89:ce:db:7f:f9:d7:04:7b:45:ca:2b:df:59:fd:
59:db:c0:c6:92:3a:f5:40:3d:20:88:66:36:21:3d:
d5:11:86:23:23:ca:76:94:ed:77:10:22:23:30:06:
7f:50:0d:d4:a5:ba:e7:29:90:f5:16:f7:2c:40:6d:
64:c3:a2:f2:0b:93:65:11:f1:b0:00:71:ab:69:12:
aa:8b:e3:be:86:e6:5b:94:b9:af:c7:5e:5e:3c:51:
61:9e:2d:4c:4e:23:50:9e:6e:49:bb:89:da:c3:3f:
85:f4:a3:1b:41:a9:eb:f1:13:e4:65:c9:b1:47:21:
00:ad:0e:70:f0:3a:0a:f1:2a:a2:00:68:66:b5:c8:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:C5:C3:41:6E:04:93:BE:00:A0:9C:92:53:34:30:D3:F8:86:9A
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/GPzFw0FuBJO-AKCcklM0MNP4hpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:280::/44
Signature Algorithm: sha256WithRSAEncryption
31:b8:79:c1:ea:67:ad:e3:cc:7f:20:16:ad:85:36:63:32:11:
bd:12:60:c0:e2:00:8e:b5:91:1a:c7:ad:46:d3:fa:91:6d:41:
15:36:e6:b5:fb:08:57:fd:d5:df:62:04:46:0b:40:6b:85:a4:
38:17:14:8c:ba:8e:c6:38:be:39:35:73:8c:5e:ec:24:62:13:
4c:ee:4c:d2:8b:3d:2e:94:89:d2:09:da:cd:cd:9b:d6:4e:8a:
0d:fe:ea:73:cc:71:52:e9:19:34:73:57:a8:80:03:16:33:5c:
f6:6f:39:15:88:13:03:e1:83:49:35:a8:62:32:ac:e3:63:97:
7a:61:4d:d6:cd:8a:b3:76:de:b7:e8:32:6e:7d:b1:65:97:9a:
fb:b9:8b:f1:9d:e9:02:8d:8b:7b:ed:f6:ae:8b:b5:c9:b4:c0:
88:1d:6a:bb:96:71:34:62:45:b6:09:76:1d:72:59:c9:f9:ce:
fc:63:e3:95:aa:4c:65:70:72:7b:57:28:2b:6f:5c:cb:5a:17:
ac:a5:9b:64:02:96:9f:42:b4:30:26:56:a0:b4:38:f5:19:29:
54:a6:c0:74:6a:1c:bb:07:a1:1a:2b:ac:a1:94:cd:24:2f:17:
f1:2e:4b:7e:f7:88:ca:82:af:4b:71:c8:0d:e2:a7:e6:10:54:
8a:50:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:56:39 2024 by rpki-client on console-fra.rpki-client.org