Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k_XU4Df8ZVERk8Ig8FmCPOq1PLY.roa
File: k_XU4Df8ZVERk8Ig8FmCPOq1PLY.roa (raw, json)
Hash identifier: m8mSFvZrAjstrKpHQH3jqpL/gnemlQaabeYrewju10Q=
Subject key identifier: 93:F5:D4:E0:37:FC:65:51:11:93:C2:20:F0:59:82:3C:EA:B5:3C:B6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0190BDE401975FC7F83C3A490BAA1B93722D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k_XU4Df8ZVERk8Ig8FmCPOq1PLY.roa
Signing time: Tue 16 Jul 2024 23:32:34 +0000
ROA not before: Tue 16 Jul 2024 23:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 185.179.218.0/23 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:e4:01:97:5f:c7:f8:3c:3a:49:0b:aa:1b:93:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 16 23:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93f5d4e037fc65511193c220f059823ceab53cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:b9:80:c4:23:1b:02:60:15:a8:02:fe:99:
3f:35:36:58:9a:94:4c:33:ff:b5:f9:cb:14:84:81:
e1:95:84:4e:c7:3e:1e:76:44:9f:f3:79:ef:aa:95:
65:b0:58:4b:ed:d9:2f:2d:c4:26:c0:0b:64:9d:8f:
db:8d:40:35:16:9c:1f:31:97:33:93:ab:f0:ff:e0:
c9:fd:5c:51:80:20:00:97:45:8e:3a:4c:af:ef:a4:
26:0f:57:97:3f:ca:89:75:ba:46:30:a8:f7:95:85:
e8:48:6f:63:c4:61:39:0f:dd:50:54:5b:a2:e1:37:
be:fb:1e:0b:54:7c:52:0e:65:3e:62:53:55:b5:13:
0d:1f:4f:4e:86:eb:cc:e2:51:c3:a4:e4:5f:03:c0:
d8:6b:cf:85:8e:88:07:82:81:ee:2d:f7:1d:c2:ba:
e0:ca:b2:1b:72:a5:e2:fe:ab:af:dc:5e:e3:8a:6e:
35:9d:1a:e0:02:c3:ad:6f:cb:83:f5:3f:02:cd:cd:
6c:51:bc:fb:95:ea:7a:03:ae:90:aa:be:eb:2d:d9:
ff:07:3a:88:53:31:2b:3d:07:b3:4d:9d:f7:a5:97:
79:7e:78:b2:c4:7f:65:f1:52:4a:64:ad:8c:9f:9f:
3a:f4:16:25:3e:81:da:5a:e8:11:90:f4:11:5b:63:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:D4:E0:37:FC:65:51:11:93:C2:20:F0:59:82:3C:EA:B5:3C:B6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k_XU4Df8ZVERk8Ig8FmCPOq1PLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:cb:d1:11:1b:24:fd:11:3a:8b:6f:cc:dd:1a:39:5b:9d:61:
15:16:29:b9:5b:3f:8c:69:c0:4b:e1:3b:67:91:f9:92:19:94:
ea:5d:3a:c2:97:22:79:5c:a7:4b:20:ac:20:7a:d8:43:06:fb:
b9:31:aa:0c:1e:cb:74:75:59:53:bb:d4:a7:2b:d7:80:aa:b5:
5d:b4:25:72:e2:f4:4d:c0:33:84:ba:da:11:69:55:47:4b:e5:
dc:d0:64:c3:8c:79:22:c0:be:b3:f0:e1:d5:d2:78:b1:1a:87:
a8:c1:03:a9:df:e2:58:32:bb:9c:ca:d2:96:55:b0:af:23:5f:
2c:9a:b6:46:40:e3:d5:b6:90:08:59:71:af:43:ca:36:ee:ad:
88:1d:5e:e2:2a:41:e9:3c:3c:12:ed:7b:ee:e1:31:9e:ff:2a:
8c:e3:47:1d:ad:b8:4f:35:b3:dc:cc:f6:a2:cf:5f:f3:e3:b2:
41:a0:fb:2f:ac:d3:fb:29:e7:6a:00:65:f8:de:73:c2:98:e0:
e3:47:1c:e9:b6:8b:d9:75:3f:b0:56:1f:cb:7b:b9:47:22:f3:
6b:5a:10:42:c7:93:75:0e:79:2c:95:05:22:e8:2b:22:9c:2e:
81:80:54:b5:2e:00:58:38:59:5e:a2:8d:53:cd:21:e3:d4:aa:
18:45:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:16 2024 by rpki-client on console-fra.rpki-client.org