Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GSp4bo2_862HtBu39Ty1b3sCrtg.roa
File: GSp4bo2_862HtBu39Ty1b3sCrtg.roa (raw, json)
Hash identifier: e9y2Ps+OPIzPF2V/XRQUhLysbN6EC7bL6K8SOkVeBDE=
Subject key identifier: 19:2A:78:6E:8D:BF:F3:AD:87:B4:1B:B7:F5:3C:B5:6F:7B:02:AE:D8
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B81EE8056FA53618D9C8DD89C636F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GSp4bo2_862HtBu39Ty1b3sCrtg.roa
Signing time: Tue 02 Jan 2024 12:34:58 +0000
ROA not before: Tue 02 Jan 2024 12:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57745
IP address blocks: 194.225.172.0/23 maxlen: 24
194.225.166.0/23 maxlen: 24
194.225.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:81:ee:80:56:fa:53:61:8d:9c:8d:d8:9c:63:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=192a786e8dbff3ad87b41bb7f53cb56f7b02aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:eb:fb:a4:b1:7c:6b:c8:74:da:30:d2:b9:
ef:65:0e:fd:7f:22:0b:94:8b:f2:a6:b5:4d:d0:b5:
2d:d7:cf:bf:c9:14:4c:14:18:59:ba:c2:53:a3:41:
6c:18:36:0f:8b:7a:a2:7f:7a:e3:84:52:95:ba:e9:
d8:d8:15:0a:89:2c:ed:3f:51:33:b0:06:83:7d:4c:
3b:c7:49:67:66:a7:27:c9:f9:79:f4:e5:be:3c:48:
8e:05:41:b7:cf:00:c4:f9:d9:71:2d:de:d5:6d:6e:
af:c0:57:4d:1b:82:6b:2b:87:5a:50:67:1a:18:41:
60:46:67:2c:ee:f1:ce:88:bb:64:a0:55:6a:87:ea:
14:5a:57:b8:9c:e7:04:6c:f8:bf:79:5c:c6:57:cf:
00:38:8f:8b:d7:b4:19:da:d2:22:55:fd:a5:fd:73:
0f:f1:3d:d5:25:63:61:8e:bc:ee:1b:ed:7b:d3:92:
ce:a8:3f:71:8f:fd:d5:3f:6d:7e:d8:b3:4c:a3:f7:
fe:1c:f3:05:09:39:b3:87:01:b1:58:7b:47:38:e9:
19:3a:60:87:06:e0:97:31:4d:cf:23:c5:05:80:bc:
77:7e:dd:49:11:5f:09:a3:0b:48:cc:42:94:fc:51:
26:c5:9e:38:de:7a:61:c3:d4:a3:5a:21:01:81:33:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:78:6E:8D:BF:F3:AD:87:B4:1B:B7:F5:3C:B5:6F:7B:02:AE:D8
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GSp4bo2_862HtBu39Ty1b3sCrtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.166.0-194.225.173.255
Signature Algorithm: sha256WithRSAEncryption
9a:41:34:4f:5a:c4:49:73:a2:26:86:bc:af:bf:ae:e6:e9:2d:
0a:08:38:b0:09:25:aa:b1:4e:5e:f8:d3:66:0a:78:e9:32:76:
a3:68:a8:8d:dc:63:5d:22:54:3c:5c:55:11:8d:51:b8:c3:95:
9d:bf:c3:ce:de:8f:06:90:02:a9:7c:1a:8d:70:b0:2c:a9:06:
01:e5:2d:5e:91:5e:21:0f:0e:a8:d2:e8:17:8a:35:3e:02:90:
cd:1d:b2:e4:d3:d0:64:8e:18:b6:20:89:26:79:dd:2c:a3:b0:
c8:31:c5:f5:97:38:91:8d:8d:45:44:cf:59:ff:6a:e3:69:22:
a5:b0:4a:d5:27:b9:ea:63:6b:ca:6a:3b:64:5b:7c:01:8e:06:
77:59:37:1f:fa:4c:ef:e7:42:9c:9e:f6:68:18:1e:d3:06:a2:
6c:7b:63:a2:4c:a7:c9:9a:67:00:c2:d7:2e:66:e9:d7:87:cf:
af:64:04:ab:1f:68:ba:e6:3f:4f:28:e3:3a:21:fe:2d:fa:1c:
f5:3e:11:2c:7e:ab:3f:5a:09:27:38:89:bc:31:da:9c:cc:a1:
3d:50:f3:d8:5c:37:37:af:6f:2c:37:aa:42:aa:d5:af:37:6f:
0c:a0:bb:a9:b9:10:db:7f:06:f3:07:4c:7e:c6:32:e6:27:e5:
53:f9:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:06:32 2024 by rpki-client on console-fra.rpki-client.org