Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/gjH-YiB1-xjjNC6JtKOUF7gFnVY.roa
File: gjH-YiB1-xjjNC6JtKOUF7gFnVY.roa (raw, json)
Hash identifier: j+9eMPpUccCn9LT4TxoeDy7YodAbmby652vqOgA0m9c=
Subject key identifier: 82:31:FE:62:20:75:FB:18:E3:34:2E:89:B4:A3:94:17:B8:05:9D:56
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 018CC4935E135BE4974545092A79C77E0200
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/gjH-YiB1-xjjNC6JtKOUF7gFnVY.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.118.70.0/24 maxlen: 24
192.118.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5e:13:5b:e4:97:45:45:09:2a:79:c7:7e:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8231fe622075fb18e3342e89b4a39417b8059d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:0f:66:b2:90:5f:a4:22:55:04:0d:9f:73:
2f:77:a3:b7:98:d8:b8:57:ad:da:64:ab:18:29:27:
fa:ad:8d:50:56:9b:f7:13:d0:a2:28:21:df:fd:a5:
00:b9:dd:73:de:3f:7f:a6:0e:42:d0:c8:07:98:73:
a2:00:7d:dd:54:47:b6:a0:58:28:38:58:0b:7c:d0:
1e:cc:56:1d:60:83:71:db:a2:e8:48:3f:07:c9:3e:
ae:26:05:f6:ba:07:85:29:0f:88:50:fd:8d:ec:fe:
c3:a4:b8:6e:82:5b:94:ab:90:08:21:be:05:54:2c:
23:10:6b:5d:7b:4c:13:3a:61:30:c4:3e:83:cd:84:
72:27:6f:17:42:15:38:03:c7:32:e9:54:14:46:53:
66:92:f1:7b:81:40:f3:ee:8f:66:ff:54:0d:b5:6d:
22:c4:08:42:c5:ed:d6:1b:d7:98:d1:6f:c4:f4:40:
09:cf:89:c6:84:b8:dc:1b:ab:f6:c4:c1:fa:40:91:
b3:69:7e:51:f1:65:cc:cd:0b:ba:78:16:64:c8:08:
6c:73:9e:d5:3f:71:c5:86:6f:c0:1d:2c:22:93:16:
06:df:1a:a1:70:68:21:20:26:36:50:95:be:dd:58:
39:a3:8c:85:d3:01:7f:16:4a:b9:5c:f6:fa:16:cb:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:31:FE:62:20:75:FB:18:E3:34:2E:89:B4:A3:94:17:B8:05:9D:56
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/gjH-YiB1-xjjNC6JtKOUF7gFnVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.70.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c1:b5:a5:ca:e3:b0:25:07:ae:16:49:55:8a:2a:7b:c9:a6:
8d:36:16:99:50:a4:18:d1:a9:4e:61:2d:b1:5a:14:33:b2:8d:
ca:12:3d:af:a5:8b:3b:e9:55:f2:6f:1d:f9:9f:32:c3:eb:a0:
54:e4:5c:b4:2e:a2:b9:d1:9a:80:17:fb:20:f6:51:af:e5:09:
34:45:dc:27:f2:38:28:10:2f:05:be:b8:81:b4:e2:4f:44:70:
3a:2f:42:32:11:14:06:f8:73:10:b2:85:83:93:d8:74:f9:a6:
62:38:82:bf:9b:e8:84:fa:11:9d:b6:99:71:ae:87:a3:d7:b4:
fd:7e:d5:f0:a6:c0:18:74:00:06:52:a7:d7:62:8a:31:f6:48:
ec:1d:37:9d:98:c9:65:05:e5:ea:c8:e2:39:60:8c:9d:f5:15:
cf:9b:fd:cc:b8:7c:9a:6a:f5:2c:87:6d:1d:bc:b7:9b:0f:85:
62:8d:6b:a7:e1:ed:67:41:db:94:31:3a:aa:65:c2:50:43:5a:
d6:50:4d:58:74:e0:cc:ee:81:5e:89:a1:5e:d4:d0:d0:01:fe:
ac:67:44:77:2e:9c:8e:14:2c:31:47:6d:02:8b:a1:3a:df:71:
e5:55:7c:7c:4e:2f:20:04:c9:76:de:c1:e8:fd:6f:9a:a0:33:
15:81:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:06:31 2024 by rpki-client on console-fra.rpki-client.org