Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/GxFnLWMV7s_pguBparLEcy1r81I.roa
File: GxFnLWMV7s_pguBparLEcy1r81I.roa (raw, json)
Hash identifier: Nhu7XDSoeS5Sc7wj1PCo8Sn91zH6LnF3Uz/uLwnyPgA=
Subject key identifier: 1B:11:67:2D:63:15:EE:CF:E9:82:E0:69:6A:B2:C4:73:2D:6B:F3:52
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 018CC4255EAB9B1B7388D21113660FF03B95
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/GxFnLWMV7s_pguBparLEcy1r81I.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29003
IP address blocks: 185.95.220.0/22 maxlen: 22
81.90.48.0/20 maxlen: 20
2a02:8f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5e:ab:9b:1b:73:88:d2:11:13:66:0f:f0:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b11672d6315eecfe982e0696ab2c4732d6bf352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:40:69:41:9a:bf:bb:f2:30:81:ae:ee:07:
16:fd:eb:58:97:e9:40:07:51:17:c7:fc:3a:2d:45:
13:d8:12:18:a9:ef:42:20:5a:f8:41:6f:9a:74:3b:
a8:da:99:8d:eb:42:42:88:74:1d:d4:6e:85:24:33:
26:72:57:c9:16:bf:af:a2:d9:08:a5:c9:b2:d6:a7:
3a:7a:02:02:c1:94:85:0f:56:99:12:18:bf:a9:06:
71:6d:87:9b:df:33:81:9d:ca:ec:79:0a:27:ce:c7:
e8:9a:61:40:b8:a3:55:be:b9:f3:b3:f0:30:f3:d1:
cf:65:6f:6f:f6:da:62:f7:82:e9:fa:64:b6:04:95:
13:ff:c0:a4:ef:ae:1e:9b:1b:da:a9:7b:de:fb:5d:
da:11:82:96:ee:c4:18:f8:3d:49:28:51:5e:ae:53:
68:2b:ea:02:2f:3b:b7:3a:a3:ff:05:9c:f8:a3:69:
5a:f5:da:f4:c3:70:dc:e2:93:66:2e:e2:1f:d7:0f:
dd:b5:cc:54:d8:75:6c:c8:64:b5:52:ee:42:d3:e3:
93:33:12:db:0a:87:63:15:dc:ad:0a:28:fd:4b:85:
f4:5b:9c:15:4e:76:77:b1:d8:58:e5:30:3f:da:c9:
76:ec:fd:5b:e2:04:d5:3f:ec:51:57:0e:6e:fb:74:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:67:2D:63:15:EE:CF:E9:82:E0:69:6A:B2:C4:73:2D:6B:F3:52
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/GxFnLWMV7s_pguBparLEcy1r81I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.48.0/20
185.95.220.0/22
IPv6:
2a02:8f0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:b9:e8:ec:10:d7:ac:2c:f3:03:8d:28:b5:07:0f:48:9a:bd:
93:7f:3f:44:d9:5d:7e:5e:2f:89:59:1d:b4:37:13:1a:b2:de:
ae:60:56:cf:63:19:93:95:a2:23:f9:0b:c6:9b:48:fb:c3:19:
b9:80:58:c3:8d:2f:30:9d:20:f3:d4:0e:27:75:a0:ac:9a:42:
62:f8:a0:ef:3c:e5:5b:dc:d3:83:8c:a3:7d:09:57:cc:7e:5c:
69:c3:7d:a4:f8:92:99:12:87:93:f4:d2:6c:6a:6f:b8:a2:b5:
10:60:4c:71:9e:3a:23:83:89:8e:0a:22:74:37:3c:f6:19:6f:
88:28:2f:4e:93:b3:f3:31:47:84:1f:09:38:02:18:76:94:52:
6f:61:97:eb:34:09:5f:9e:5a:0e:09:48:e0:5d:4d:c4:05:2c:
e1:d0:00:36:f8:a2:9f:15:0a:d5:d2:46:8d:01:97:86:98:41:
aa:e5:16:57:64:eb:d1:8a:36:ac:d6:1e:a0:d5:6e:21:7e:fe:
30:4d:e6:be:91:7f:a4:70:c2:5a:f3:a7:87:fb:58:3e:34:33:
2e:b6:1f:41:27:8f:2f:a0:f9:02:e6:61:2c:b1:13:90:b2:06:
76:03:af:8b:83:72:8b:a9:07:cc:cb:2f:37:40:08:04:c9:64:
49:81:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:38:54 2024 by rpki-client on console-fra.rpki-client.org