Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/gAV1_0yCORXha5xtLk1NRumjvyQ.roa
File: gAV1_0yCORXha5xtLk1NRumjvyQ.roa (raw, json)
Hash identifier: s30GeoIDeHky+QEu5jqE9XHQiuLpuh51XpYyiHZrHJk=
Subject key identifier: 80:05:75:FF:4C:82:39:15:E1:6B:9C:6D:2E:4D:4D:46:E9:A3:BF:24
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 018CC4250F528D3EFAE1209C5C8075370A57
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/gAV1_0yCORXha5xtLk1NRumjvyQ.roa
Signing time: Mon 01 Jan 2024 08:30:12 +0000
ROA not before: Mon 01 Jan 2024 08:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39402
IP address blocks: 185.118.25.0/24 maxlen: 24
185.118.27.0/24 maxlen: 24
185.118.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0f:52:8d:3e:fa:e1:20:9c:5c:80:75:37:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jan 1 08:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800575ff4c823915e16b9c6d2e4d4d46e9a3bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:7f:3f:93:f0:c2:b7:b3:15:aa:ce:71:4c:
7d:45:89:b3:dc:43:f3:9f:c3:a2:66:66:a0:e1:67:
a3:08:fa:02:b9:64:1a:9c:ae:5c:57:c0:9f:d4:a4:
ad:c0:32:c4:f6:f5:1f:47:43:fc:fe:4f:5b:a9:ed:
e5:4d:96:7b:09:79:b8:a9:09:12:db:e6:7b:c5:af:
fc:63:d1:78:11:55:98:67:d7:f9:d9:98:29:1b:a3:
a0:57:a1:47:6f:70:ea:48:c1:cf:92:b8:af:86:77:
c1:23:19:76:e7:82:2b:26:33:64:6f:92:6b:5a:61:
de:fd:c9:b8:08:1d:f6:ae:a6:d6:74:b8:39:b6:29:
5b:2a:fd:5a:45:98:de:b9:3c:fd:73:60:e9:41:21:
58:b3:18:73:99:e8:45:eb:c7:ab:29:d9:c9:8d:72:
dc:7c:2a:ca:a5:86:90:69:5a:1f:e3:3d:20:37:e3:
ea:14:f9:4e:82:e4:d2:1c:1e:18:39:63:64:e9:5c:
b1:9b:8e:86:14:ed:2e:4e:72:5e:df:29:ad:51:3d:
3f:09:fd:e0:31:7c:8f:e3:37:5e:22:66:f5:06:46:
3c:cd:19:cd:0f:dc:6e:5a:2f:e3:1c:92:73:2e:53:
7f:0e:83:c5:5e:e4:9b:a9:ec:5f:04:2e:6b:fa:81:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:75:FF:4C:82:39:15:E1:6B:9C:6D:2E:4D:4D:46:E9:A3:BF:24
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/gAV1_0yCORXha5xtLk1NRumjvyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.24.0/23
185.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3f:41:85:36:e0:23:25:50:85:96:bd:bc:12:74:33:27:74:
ca:53:e8:c2:87:98:71:ed:4c:31:f6:31:b7:cf:91:73:0c:1e:
a1:c3:fc:64:41:35:0a:c8:8d:fb:e1:1e:cc:e0:4d:3e:6a:87:
25:66:d2:65:f9:8f:74:de:c0:33:1a:b7:54:1e:e2:6c:da:ac:
4c:ce:7d:50:fc:b3:5f:d0:4c:52:bd:c9:5b:c8:26:4d:23:a8:
17:76:8c:15:5a:eb:6d:17:0a:60:ae:54:ae:73:35:e1:aa:50:
dd:55:86:00:34:f5:35:8c:d8:64:d9:23:bd:8b:66:ad:e9:16:
61:47:01:1e:02:f3:8c:00:2e:3c:22:e3:55:e6:c2:c8:57:38:
91:7d:31:75:3d:41:79:6e:50:0d:3b:7e:04:58:15:35:5d:01:
81:8e:0d:61:43:7c:11:73:f1:f1:dc:47:fb:b3:5b:c5:5a:f5:
ec:81:14:9c:68:42:33:3e:4f:14:8b:78:23:11:f9:c8:a5:4e:
a6:f7:9f:2a:32:b6:cd:1e:c6:2c:69:67:af:bb:01:c0:6c:81:
29:4f:c9:6a:a9:45:bc:11:9a:7e:e4:9d:42:64:62:e6:08:e0:
d7:09:e6:ee:a4:34:24:15:dd:63:c8:fa:ad:9d:fe:cb:f2:99:
29:a0:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:06:44 2024 by rpki-client on console-fra.rpki-client.org