Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/gKWIHALsVe4cTgaS4PR2XDC8OaE.roa
File: gKWIHALsVe4cTgaS4PR2XDC8OaE.roa (raw, json)
Hash identifier: GRJgAjisMVrhhiXDdU636s6jjXFgv6grt++sDe/Ft/Q=
Subject key identifier: 80:A5:88:1C:02:EC:55:EE:1C:4E:06:92:E0:F4:76:5C:30:BC:39:A1
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 018CC348BE05146142B16DC842F4C863B004
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/gKWIHALsVe4cTgaS4PR2XDC8OaE.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 185.46.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:be:05:14:61:42:b1:6d:c8:42:f4:c8:63:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a5881c02ec55ee1c4e0692e0f4765c30bc39a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:be:cc:e2:68:73:91:0f:01:ce:ab:c7:a9:
dc:0f:e3:2c:58:e1:fd:59:56:d7:e7:b5:b1:38:9e:
29:bb:a4:88:06:33:1b:c8:99:b4:54:41:f9:ad:13:
27:96:34:f7:c3:f7:1b:d0:64:f5:04:33:3f:41:c5:
5a:c0:85:4a:e5:fc:18:25:fc:1d:7e:a7:42:f2:2d:
f8:f6:c4:5e:a5:29:96:af:56:11:1e:2a:d8:00:b8:
ed:75:ea:2d:aa:c7:7e:d3:74:52:98:93:7b:27:bd:
1b:6c:37:f2:13:81:a2:d6:89:c2:c9:18:75:80:71:
6f:3e:3f:5d:c0:d3:00:63:fe:6c:3f:2d:40:20:8f:
62:17:fd:8a:49:20:17:80:c4:0f:cf:ab:e5:da:c2:
09:29:6f:b6:d2:aa:97:7d:38:ed:29:2a:3a:14:77:
1b:84:aa:22:d9:d3:1d:00:d6:d0:ef:5f:02:88:4d:
ea:d3:f2:50:07:cc:39:5d:46:1e:7c:c9:b1:2a:9b:
ed:64:bb:3d:54:43:ea:f6:cb:45:b8:34:55:b9:8a:
fa:7a:60:13:4f:12:7e:30:86:c1:65:b5:f2:3b:65:
74:10:68:29:b1:29:59:9d:19:49:67:89:ed:54:bc:
de:b4:35:e0:e1:f9:87:74:82:52:65:60:3a:f0:07:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:88:1C:02:EC:55:EE:1C:4E:06:92:E0:F4:76:5C:30:BC:39:A1
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/gKWIHALsVe4cTgaS4PR2XDC8OaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c6:da:9d:1b:ef:97:0b:be:fe:b9:1a:1d:2c:4b:3d:5e:16:
9b:d1:c0:43:e2:ab:44:b7:f0:fa:c6:43:3d:8c:14:6c:09:86:
e6:89:4b:a4:79:3b:ed:86:2c:b2:c4:cf:ea:56:51:05:92:5d:
5e:a4:71:5f:72:29:af:c7:a0:9b:e0:5a:62:78:b7:b3:1e:d3:
2f:ae:df:fd:ec:7b:8c:31:79:3d:1b:30:5e:b4:01:ab:96:5a:
12:a4:0c:89:c4:96:3b:53:06:85:1c:9b:40:3d:83:70:c1:21:
ab:69:02:41:fe:28:4a:a9:9f:ba:d3:2f:1c:0f:84:81:39:ba:
24:2e:87:37:cd:51:1f:03:19:8f:fd:da:66:72:36:c3:21:87:
74:83:71:52:f5:1c:05:4b:ba:7a:78:67:52:7a:05:bd:f4:87:
39:82:28:98:cc:6f:72:1f:c8:88:8c:31:5d:d8:e0:b3:a3:68:
63:34:97:a1:7a:aa:67:3c:82:e9:8a:42:2c:05:f9:d6:d7:42:
e5:2a:ab:11:4a:fb:f4:57:f6:86:56:55:34:88:1f:ea:ca:16:
17:9f:a3:c0:35:d1:99:4f:ca:6e:23:83:dc:7b:76:a5:a9:a5:
5d:d3:91:c4:69:8b:85:ea:64:1e:df:ef:5c:c7:20:90:da:94:
68:ea:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:37:31 2024 by rpki-client on console-fra.rpki-client.org