Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/X-vDT-gpmkt16WHd7phkGGtHE5o.roa
File: X-vDT-gpmkt16WHd7phkGGtHE5o.roa (raw, json)
Hash identifier: gT2/L+J18PDx0dxSeRI2tVti4++rVBVyrTi0lTVqZiE=
Subject key identifier: 5F:EB:C3:4F:E8:29:9A:4B:75:E9:61:DD:EE:98:64:18:6B:47:13:9A
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 018CC56DEC5AD4879BC34A6311D7CDDC026D
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/X-vDT-gpmkt16WHd7phkGGtHE5o.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8893
IP address blocks: 193.101.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ec:5a:d4:87:9b:c3:4a:63:11:d7:cd:dc:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5febc34fe8299a4b75e961ddee9864186b47139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:17:50:7a:04:5c:55:07:3e:d2:7c:87:f6:
a5:fb:84:c6:34:f0:5c:98:fa:06:d8:08:dd:31:90:
50:4c:55:b8:17:02:4d:f0:20:af:25:e2:f7:6e:0d:
ff:33:49:40:c4:e1:5b:3f:65:1c:85:23:cc:48:23:
cc:9a:59:35:01:31:ff:fe:ec:7c:27:de:01:d2:cb:
03:29:06:57:99:06:68:85:1a:63:dc:3a:42:fb:3f:
12:02:45:43:24:90:10:ab:52:a2:8a:5e:27:8e:b0:
4c:2d:9e:dd:e5:b6:a2:74:69:10:27:dd:76:df:ad:
5d:d9:f6:ee:4d:56:8f:52:a3:b2:84:f2:d1:c6:a1:
80:7c:e8:05:38:63:9c:fb:1f:66:d4:2f:4c:58:2a:
6b:61:e0:2f:5e:8f:0b:1e:16:52:0c:ff:b3:fd:87:
46:ec:90:1f:cb:ed:a2:6e:78:e0:df:4c:de:5e:0b:
ef:1f:c4:4a:d6:b8:97:5f:d4:63:30:d3:26:e2:55:
6d:6c:b5:31:29:ac:e9:a7:e5:e6:ff:a4:0a:69:fa:
98:95:4e:af:e6:de:e6:7d:74:a7:38:02:1f:c7:39:
8c:20:25:a5:ea:34:11:3c:83:d3:9c:57:1f:25:52:
05:0d:74:49:96:51:d9:0c:ad:6c:e5:4f:a0:41:cc:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EB:C3:4F:E8:29:9A:4B:75:E9:61:DD:EE:98:64:18:6B:47:13:9A
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/X-vDT-gpmkt16WHd7phkGGtHE5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.47.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ee:5e:69:0e:b4:cd:a4:d2:34:3a:b1:44:a6:2e:f7:81:c0:
36:72:3c:cf:a1:68:d2:ec:ef:aa:09:00:e8:5e:a8:78:b4:d7:
b6:ce:db:96:fa:63:3d:af:75:57:8d:da:8e:ff:9d:29:1c:57:
83:7e:25:e1:db:a5:55:21:2c:5f:75:05:c1:f4:d7:9e:a6:42:
97:21:c1:7c:b0:3b:d7:72:a0:83:3c:82:89:17:80:a8:69:bd:
30:d9:80:c7:45:5c:d5:1b:b1:d5:94:51:fc:b1:d6:f2:82:c0:
4a:bc:8b:83:0a:5c:e7:73:be:d9:68:f2:21:1e:be:e2:d4:fd:
e7:51:66:88:6b:62:73:88:7e:fa:68:9a:82:65:2a:6a:9d:c0:
aa:dd:2f:f0:49:b4:a0:8f:b6:a0:e3:a5:c6:13:42:b8:90:76:
ee:74:df:91:b5:c7:32:f8:42:6b:bf:6b:5e:e3:d4:4c:66:f7:
80:f7:b7:71:c9:08:23:83:c8:bd:19:24:7e:94:d6:88:ae:fd:
e2:d4:b3:a5:28:35:cc:df:68:8c:16:4e:5d:90:6c:9b:d5:91:
83:98:ab:ef:35:cd:ce:d8:ce:e7:57:66:13:a8:f7:11:d1:d2:
23:7d:f9:65:d8:7b:3b:81:b3:0f:e8:c3:d7:ea:4b:5f:13:7d:
6a:00:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:49:04 2024 by rpki-client on console-fra.rpki-client.org