Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/gim_mdmyBuYFGa2DEFjKszMlGzk.roa
File: gim_mdmyBuYFGa2DEFjKszMlGzk.roa (raw, json)
Hash identifier: zxWg3ymErGM/h2zUYhAmaiboSXQKnoIMbGVLkLvbFI4=
Subject key identifier: 82:29:BF:99:D9:B2:06:E6:05:19:AD:83:10:58:CA:B3:33:25:1B:39
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 018CC2DADF776EEFB501685215B317239F25
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/gim_mdmyBuYFGa2DEFjKszMlGzk.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205760
IP address blocks: 185.196.76.0/22 maxlen: 22
185.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:df:77:6e:ef:b5:01:68:52:15:b3:17:23:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8229bf99d9b206e60519ad831058cab333251b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:23:6b:db:3f:2e:24:90:90:11:95:2d:be:
a0:4a:c3:a2:31:e6:52:b5:ba:a4:f4:75:32:b3:2f:
06:54:87:88:57:b9:e2:7b:08:dc:ed:61:33:aa:1e:
ea:9e:e2:27:4d:a1:87:b5:34:85:c7:4f:01:6d:f1:
0b:36:7c:ac:90:69:69:37:8b:a4:97:6f:bd:19:64:
f4:b5:63:7f:6f:6a:77:6e:13:b2:b4:26:79:55:c6:
8a:9a:60:b8:64:ad:8f:a0:54:dc:7e:b3:85:8e:38:
a8:e0:82:df:e5:54:85:99:07:aa:d1:b2:67:5e:54:
99:b8:4d:6f:7f:37:34:0b:aa:6b:d6:13:07:43:f0:
81:1c:1b:16:4a:40:f2:02:bf:1f:89:29:99:93:a7:
05:83:ca:f7:af:36:34:5b:2a:be:fe:c7:85:de:9f:
e5:df:cc:22:54:b6:65:12:7f:cc:36:a8:88:24:10:
26:40:2f:a8:75:b0:7b:37:bb:a8:14:ba:e8:34:ae:
4e:ad:98:e6:77:aa:2f:fb:30:51:bb:14:b9:07:cd:
66:ad:4d:f7:ea:5d:e5:1f:f2:5c:e5:34:c5:a1:39:
05:13:9e:2a:28:53:57:3a:3e:48:e8:5d:7d:95:8c:
e0:ac:42:06:20:61:cc:45:94:37:3d:7a:c8:de:75:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:BF:99:D9:B2:06:E6:05:19:AD:83:10:58:CA:B3:33:25:1B:39
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/gim_mdmyBuYFGa2DEFjKszMlGzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.76.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a1:de:ce:90:84:3b:c6:cb:f8:35:c8:46:b6:f5:f1:90:24:
1b:e4:41:5d:2c:20:50:17:33:39:b5:77:2d:f1:4e:e0:4c:8a:
51:4a:d3:23:09:4e:55:c3:2c:32:42:1b:05:4a:6a:68:20:8d:
c0:c6:3c:97:fd:79:e8:56:c1:e0:de:0f:f9:09:c0:af:3a:6b:
80:94:da:aa:f4:84:99:84:50:8c:10:cb:2a:dd:2a:5f:df:2d:
32:8e:b7:e2:8c:70:44:fe:a4:60:57:20:7c:18:f2:04:e5:68:
f2:56:4f:91:83:aa:d7:18:28:79:ab:48:dc:38:18:3d:65:10:
ed:9f:19:33:9a:b6:bc:9f:03:5b:74:bb:d2:1e:28:bc:1f:99:
e1:8c:9d:79:80:7d:17:1a:18:2d:12:89:dd:8b:8b:49:db:b3:
db:6f:99:1f:8e:f0:1d:45:e6:53:fb:bf:e6:e3:a6:4a:2d:77:
38:4c:74:58:68:ad:1d:27:d4:1a:dc:b5:fa:3f:1e:79:45:07:
24:98:13:85:69:06:b2:34:26:fc:bf:04:4e:13:a8:85:4a:50:
4b:e0:c3:65:53:9d:63:b9:66:ea:74:7e:bb:ba:8c:60:10:e9:
0b:e8:67:1d:e7:3b:1b:d8:de:f5:21:7d:27:4d:8b:f4:61:0e:
50:ef:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:49:35 2024 by rpki-client on console-fra.rpki-client.org