Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/GtsLEV1Hinby9hlDphJyDpzxXhw.roa
File: GtsLEV1Hinby9hlDphJyDpzxXhw.roa (raw, json)
Hash identifier: hsJ5T/h9WCAzlj+iUuyfS0V1NXC3Y5krlFIyjxCxr5M=
Subject key identifier: 1A:DB:0B:11:5D:47:8A:76:F2:F6:19:43:A6:12:72:0E:9C:F1:5E:1C
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 018CC3488F631BC878BB0143080F8C3556E3
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/GtsLEV1Hinby9hlDphJyDpzxXhw.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197696
IP address blocks: 185.236.224.0/22 maxlen: 22
185.236.224.0/24 maxlen: 24
185.236.226.0/23 maxlen: 23
31.170.8.0/21 maxlen: 21
31.170.8.0/22 maxlen: 22
31.170.13.0/24 maxlen: 24
185.236.224.1/32 maxlen: 32
185.236.224.2/32 maxlen: 32
2a01:9500:80::/48 maxlen: 48
2a01:9500::/42 maxlen: 42
2a01:9500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8f:63:1b:c8:78:bb:01:43:08:0f:8c:35:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1adb0b115d478a76f2f61943a612720e9cf15e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:a0:52:a0:53:e9:f0:85:4e:fd:dc:c0:ff:
92:37:71:5f:d0:db:f0:31:43:55:ff:09:cf:ae:04:
97:fb:b5:e1:f3:3e:cc:40:28:3d:64:97:a4:81:9a:
f9:71:63:c6:17:75:e7:7b:56:1c:58:a4:d9:23:54:
e3:18:d7:3e:9b:d4:ea:50:56:a3:ee:25:de:c0:50:
53:67:85:17:4c:85:11:f2:c7:48:96:2b:28:57:e1:
70:f1:4a:5a:e0:8d:43:11:4e:6e:c3:c8:38:7c:71:
7c:3c:2c:b8:57:fa:7a:ac:1a:e7:dc:9a:b5:36:e9:
72:a1:18:48:76:a8:5b:11:c4:e4:a9:db:ae:e3:72:
f0:90:31:c9:a9:6c:24:be:83:e6:b6:6a:53:d9:f4:
24:34:c9:73:cc:94:fa:c8:f9:bf:07:cf:a5:f0:1b:
b1:2a:c9:cc:9f:1c:d7:c1:62:03:62:83:b4:be:29:
6c:14:53:eb:25:c9:74:39:ca:87:53:96:5b:07:b5:
3b:74:c7:da:9c:93:2d:ee:08:b0:24:c1:7f:ff:8f:
02:45:16:f0:ac:e2:61:69:45:b4:14:8f:2c:dd:83:
a0:ec:a4:f0:fe:85:e5:b4:b8:72:97:f1:07:b2:af:
bb:ef:ed:13:29:38:d9:41:7b:ee:c3:bf:50:7a:c4:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:0B:11:5D:47:8A:76:F2:F6:19:43:A6:12:72:0E:9C:F1:5E:1C
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/GtsLEV1Hinby9hlDphJyDpzxXhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.8.0/21
185.236.224.0/22
IPv6:
2a01:9500::/32
Signature Algorithm: sha256WithRSAEncryption
07:11:86:c1:3d:a9:92:2b:6a:bb:02:1a:95:9d:67:6f:11:3d:
51:48:44:88:6f:a3:0b:3a:5f:63:19:ae:00:44:75:db:2b:d5:
b8:67:0c:c6:c1:db:17:6c:33:57:37:5f:68:07:0a:19:58:92:
ea:23:00:40:ce:76:00:86:59:6e:91:44:1a:a2:52:16:5b:6e:
3c:b6:4b:65:4e:9d:03:8d:13:a9:e2:23:90:2b:74:16:08:66:
40:5b:42:ff:42:78:ac:e9:0e:21:83:51:20:72:58:1a:0a:52:
43:cd:82:ca:97:14:31:b1:bd:b7:38:00:0f:b3:29:54:17:d9:
c3:c5:84:52:fd:56:35:68:64:07:47:b0:c0:d1:30:7a:98:4d:
ca:7b:61:60:92:aa:c9:c3:4a:ef:72:37:dc:3a:a9:1e:52:35:
fd:7d:37:93:c2:7a:32:90:cb:77:a1:cc:56:cb:eb:02:90:d3:
20:63:78:7c:bd:b8:06:15:51:bf:42:85:48:17:67:a6:87:79:
53:94:e2:e5:aa:aa:20:3f:e6:d1:82:f6:f9:b7:4d:38:72:6f:
9c:48:df:70:bb:3c:53:12:2d:b6:b5:6b:f6:6d:29:78:2a:aa:
65:41:b9:a2:33:04:8d:9b:bf:b9:60:2a:f7:c2:f1:b6:9c:cc:
f5:92:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:37 2024 by rpki-client on console-fra.rpki-client.org