Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GkgxhdWJjJgyaWqUuNqqbxRNbYQ.roa
File: GkgxhdWJjJgyaWqUuNqqbxRNbYQ.roa (raw, json)
Hash identifier: kyg0tGYVTAwty5nFWXJ+SgfL/MYg5kejRNV1aGMKs14=
Subject key identifier: 1A:48:31:85:D5:89:8C:98:32:69:6A:94:B8:DA:AA:6F:14:4D:6D:84
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 018EC84A762CB79AFFF4287CC98792C2C8FF
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GkgxhdWJjJgyaWqUuNqqbxRNbYQ.roa
Signing time: Wed 10 Apr 2024 13:55:06 +0000
ROA not before: Wed 10 Apr 2024 13:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 85.234.106.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
185.154.192.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:4a:76:2c:b7:9a:ff:f4:28:7c:c9:87:92:c2:c8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 10 13:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a483185d5898c9832696a94b8daaa6f144d6d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:b3:e6:4e:48:b0:81:c2:2b:da:4f:17:39:
26:36:fc:fc:fb:d4:7a:6a:cb:f8:16:a9:d0:d4:81:
3c:13:59:16:4c:70:79:19:06:f6:05:16:5e:a5:e1:
97:1b:93:be:79:eb:f3:ca:94:c6:5a:6c:8b:38:77:
cf:7f:8e:fe:4f:06:55:ec:f3:67:32:1b:cb:3d:dc:
b7:13:48:35:3d:9c:f1:93:76:e1:e6:5b:fa:5b:fd:
e6:d5:93:71:15:e8:68:33:6b:30:dd:d6:fb:04:8d:
04:92:85:a0:04:04:04:1d:ea:41:26:cd:58:56:66:
e4:c1:9a:93:f0:d4:4d:94:ef:07:83:f7:33:7c:d2:
56:ee:70:b6:dd:7a:9a:82:99:89:af:0e:a3:2b:24:
e9:09:a5:ca:4a:43:90:eb:2b:8c:5a:1c:b6:41:ad:
06:cf:c5:02:68:78:c2:3b:c3:8d:1c:1f:f9:87:33:
f7:f8:15:d8:9a:83:84:af:44:9b:20:c2:14:b9:5a:
a1:ff:8c:93:7e:26:00:b6:8b:3b:79:d9:2e:71:41:
30:51:4b:ca:34:38:f4:a3:e8:3e:b5:e5:62:9b:22:
66:4f:f1:10:42:d3:d1:1e:02:86:6f:e1:b9:47:03:
9d:c3:af:38:43:3e:71:a0:9e:30:8a:f3:e6:e9:95:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:31:85:D5:89:8C:98:32:69:6A:94:B8:DA:AA:6F:14:4D:6D:84
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/GkgxhdWJjJgyaWqUuNqqbxRNbYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0/23
85.234.110.0/24
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
43:75:79:3c:3d:02:7d:c5:e3:83:4d:af:94:ec:fa:b1:e2:a4:
bd:f1:b9:b6:f1:89:ea:13:c4:d3:e4:62:af:64:7f:7b:fd:bd:
e0:74:54:c6:18:9c:a3:52:75:34:2b:5f:24:61:3f:a2:04:6f:
9e:62:6b:f7:13:80:a9:89:e7:10:d2:e1:21:49:7b:cc:9f:3f:
52:e9:cc:bd:ae:19:ad:9f:4e:07:8b:ca:72:c1:99:d2:90:e5:
d6:98:08:8c:73:34:10:e6:a4:d4:80:a4:06:55:06:be:60:93:
8d:78:6e:92:5b:7c:71:8a:4e:03:fc:6d:44:03:ea:44:1c:af:
11:a2:05:68:2d:69:ca:52:2d:84:79:5c:18:ce:ef:7c:7a:f4:
a7:7b:46:a9:36:7b:ec:95:d0:53:4f:30:00:4d:bf:87:b6:2a:
db:34:d6:f5:06:45:3d:a3:a3:bf:32:49:3f:86:ff:f1:08:0f:
d5:d9:1a:17:26:47:7e:97:81:49:09:35:5d:55:04:4e:7f:8c:
38:26:4c:a2:d0:99:74:9b:e9:0e:fd:ca:c8:0c:bd:c2:5d:e8:
5e:af:c7:f4:2a:1d:8b:43:97:90:61:08:72:b5:a1:a4:9d:52:
22:7c:ad:07:af:f8:b2:8e:7b:e8:65:11:f7:ae:c1:a0:f3:58:
b7:62:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:01:45 2024 by rpki-client on console-fra.rpki-client.org