Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/GC-wNDRG1czwLkH1fXMmecer_dI.roa
File: GC-wNDRG1czwLkH1fXMmecer_dI.roa (raw, json)
Hash identifier: /21euQHaLclE42xfY7ptCmj1qtOrp9GqAzQ1CWQ6r5U=
Subject key identifier: 18:2F:B0:34:34:46:D5:CC:F0:2E:41:F5:7D:73:26:79:C7:AB:FD:D2
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 018CC86F1DF69A21D00900FC07B0FDCBFE9A
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/GC-wNDRG1czwLkH1fXMmecer_dI.roa
Signing time: Tue 02 Jan 2024 04:29:34 +0000
ROA not before: Tue 02 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1d:f6:9a:21:d0:09:00:fc:07:b0:fd:cb:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=182fb0343446d5ccf02e41f57d732679c7abfdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:b2:56:fb:b2:2a:15:df:58:ca:f4:ef:f5:
46:19:92:0b:00:80:54:ad:0f:8b:ad:fd:c1:2b:56:
f7:c3:14:78:9e:d6:b2:d0:96:95:d0:a0:b2:1f:8d:
1e:2e:b1:7b:e0:7c:4a:50:8f:20:8a:db:66:3d:56:
5b:54:eb:09:d9:eb:70:67:37:2e:17:f1:a5:52:bd:
0e:b6:fc:36:cb:68:75:cb:d8:bb:e1:7f:23:29:82:
39:24:f8:91:d8:b7:5c:1f:79:92:4c:ce:64:68:5c:
f2:a3:d0:51:e6:38:3c:ad:b2:56:e6:3e:42:21:1b:
3a:b6:2c:ab:25:71:70:c4:82:68:ae:91:1a:3b:3a:
33:6e:01:f6:f8:48:b6:6b:63:11:58:f8:14:c1:b3:
75:04:0a:ad:2e:90:71:13:99:c6:fa:11:bf:aa:3e:
3e:2f:9b:64:f5:29:ec:81:2a:0f:2a:e6:2a:83:0c:
ec:6f:e6:07:b0:6e:20:c1:63:b5:54:08:47:6a:1d:
22:fb:3a:e1:40:3a:29:e9:ae:33:72:a9:25:06:62:
c1:7d:ff:bd:b3:08:ff:a8:9c:10:53:41:fd:e2:ce:
89:c8:6f:63:9b:85:f7:c4:da:fe:38:95:f2:a0:b8:
95:75:cb:40:fd:e1:51:ce:9f:a9:36:63:18:bc:79:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:B0:34:34:46:D5:CC:F0:2E:41:F5:7D:73:26:79:C7:AB:FD:D2
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/GC-wNDRG1czwLkH1fXMmecer_dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:77:8d:30:64:0a:05:2c:27:96:89:35:3c:3f:07:4c:15:1a:
01:8e:7f:dd:c3:af:10:f2:bc:1a:25:50:fe:71:8f:96:ac:e1:
0b:9b:93:e5:2c:88:81:ec:dd:9f:f9:71:5c:fb:45:02:91:c0:
59:6b:cc:a4:af:b3:87:4c:2a:fa:8c:63:9b:82:cb:09:33:e7:
5f:ab:98:de:e6:7d:9f:e5:6c:a3:56:12:1c:ec:58:9c:17:c0:
7e:0a:61:04:4f:8a:db:89:19:5e:a1:94:86:86:29:b0:50:cf:
9c:8c:35:26:c4:e2:d0:c2:99:3d:54:c7:f4:e0:7c:14:d1:1e:
e3:8a:9a:09:79:7a:7b:80:b5:5b:60:14:9c:d4:a2:52:8a:e9:
bf:f4:eb:52:14:de:7d:9f:55:01:a4:4f:5a:e9:24:a0:d3:ea:
60:84:40:cc:11:3c:00:19:11:ba:be:53:93:d7:8b:ef:96:8b:
6c:aa:a3:9e:90:56:16:7e:a4:1d:f3:3b:3c:dd:3a:7c:18:5e:
66:9a:ab:8d:d4:a0:d7:10:d9:70:e2:5e:40:f9:80:25:af:2d:
8c:17:4f:ba:f8:b7:c0:04:cf:2d:98:fa:af:41:f4:5c:d5:ce:
7a:bc:60:80:a1:1f:63:fd:31:e6:21:df:1a:94:e1:eb:1b:93:
02:df:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:24:16 2024 by rpki-client on console-fra.rpki-client.org