Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa
File: GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa (raw, json)
Hash identifier: VZ3F4vQh3oYYDCrI81r7/04BDQLhbWTQZUr5vWVVnJA=
Subject key identifier: 19:B0:64:68:46:71:25:1C:FE:E7:0C:42:C7:BE:C3:C3:FC:8B:D6:CD
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B65B65E5BE699576149CD9C2BACF0
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142419
IP address blocks: 2a0e:46c4:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:65:b6:5e:5b:e6:99:57:61:49:cd:9c:2b:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b064684671251cfee70c42c7bec3c3fc8bd6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:65:2d:47:fb:a9:a7:eb:cd:1d:02:3f:b7:
5b:58:1c:43:c7:7b:ee:ca:77:f9:5b:86:f1:b0:ca:
3b:2f:89:7f:64:46:c8:e7:3b:43:4e:f0:60:0b:e7:
24:bc:24:7d:33:b6:0b:e5:ee:80:96:7e:71:46:7d:
7e:6b:67:1d:78:cd:87:b7:be:d6:a5:6e:4f:30:f2:
91:ad:e7:7e:2a:25:ef:7c:ce:80:55:b2:49:8b:2d:
3b:71:a8:6c:80:d2:39:72:1f:3d:ae:58:91:ba:4f:
b9:da:d6:76:d2:cc:3b:8a:58:28:5b:d1:47:7b:1d:
ba:1b:83:2c:12:89:a2:19:44:a3:be:5c:65:c2:d7:
58:f7:3f:e0:7b:13:07:a7:e9:67:1d:e4:9d:5a:b0:
45:2e:dc:47:77:83:bd:e8:01:bd:9b:08:86:1e:00:
7c:82:96:29:95:46:4a:fd:06:6d:60:5e:23:b9:29:
b4:32:bf:5b:c6:38:65:70:94:19:5a:c8:61:28:a7:
92:23:7b:c3:14:6c:fc:4d:9e:cc:72:e8:bb:e4:14:
c8:32:ae:d1:ce:e2:f0:7f:dc:92:72:c0:12:27:6b:
d0:5d:95:e9:45:b1:18:c9:1b:10:72:0e:fd:6c:f8:
1f:75:ac:f4:38:6e:5f:83:9d:9b:7f:d9:83:13:d2:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B0:64:68:46:71:25:1C:FE:E7:0C:42:C7:BE:C3:C3:FC:8B:D6:CD
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/GbBkaEZxJRz-5wxCx77Dw_yL1s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:107::/48
Signature Algorithm: sha256WithRSAEncryption
12:f1:c3:21:f1:e7:8e:53:73:8f:be:76:ea:75:2a:f1:6f:2d:
6b:d0:6a:fc:ca:20:00:44:f7:3a:6e:30:d8:77:bb:34:17:11:
fa:15:c7:21:04:bf:cc:d6:41:ca:46:1e:d0:7d:3d:a0:80:63:
4e:ed:13:be:f5:42:03:e2:de:85:2a:0a:bb:a8:3a:94:c8:c0:
0b:b7:8c:e3:c3:0d:32:59:ec:4d:cc:e9:d1:34:cf:78:5a:a6:
e4:52:94:cf:bd:ca:e2:65:6c:bf:ce:7e:88:1d:1d:f4:e1:94:
47:96:06:ea:e0:25:68:83:55:0b:f0:09:45:db:50:92:f5:89:
dc:1c:83:f7:ad:bb:3e:89:48:b0:24:92:1a:16:d4:9a:ad:77:
76:e2:a5:78:34:cf:20:61:99:2b:6b:57:ff:d8:57:b0:4b:2e:
66:e2:7c:d1:70:ee:c9:16:e0:0b:cf:12:10:da:65:bd:79:73:
94:c3:71:b3:5e:23:ff:03:47:98:91:6c:92:3d:f4:c0:4f:06:
47:8e:08:01:4e:05:49:66:50:d3:4e:e1:83:42:d2:3f:ca:99:
7f:0d:19:44:c1:f3:12:ea:d5:b6:18:bd:03:dc:b7:4f:f0:d8:
76:67:cf:f6:7e:41:9c:6a:39:27:32:28:d3:db:22:d4:06:d5:
6f:4f:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:06 2024 by rpki-client on console-fra.rpki-client.org