Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/GZLuyBYHTOfulL_ywnxjlH74VIU.roa
File: GZLuyBYHTOfulL_ywnxjlH74VIU.roa (raw, json)
Hash identifier: T/0V7jFnM8pQ95jCltSH3H/linCkKklRj/fPwtjx7yU=
Subject key identifier: 19:92:EE:C8:16:07:4C:E7:EE:94:BF:F2:C2:7C:63:94:7E:F8:54:85
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 018CC492E1FB7EB723F2F216D32AC2B114CA
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/GZLuyBYHTOfulL_ywnxjlH74VIU.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 212.81.40.0/23 maxlen: 23
171.22.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e1:fb:7e:b7:23:f2:f2:16:d3:2a:c2:b1:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1992eec816074ce7ee94bff2c27c63947ef85485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:d2:b2:0c:a4:a7:f0:63:82:17:f4:4f:c7:
4e:30:f1:86:51:38:c2:52:aa:32:53:fc:73:51:98:
a7:69:f1:fc:6d:8e:02:64:54:0d:0f:a7:e4:32:b8:
0a:82:92:ca:2d:bf:79:2f:cf:39:21:18:34:c9:76:
ef:ff:7c:af:fb:d2:ab:f8:a7:cd:3a:7c:15:96:68:
23:10:fa:12:ea:33:1e:9f:ed:87:0b:95:7b:40:4f:
04:0d:fd:5d:7c:48:4c:ff:64:5e:7b:57:e0:7e:4b:
b4:a5:6d:82:57:2e:2e:4c:d1:64:1d:76:6d:12:61:
c1:52:4c:63:aa:91:3a:ba:ca:5f:4e:2f:a3:a4:61:
25:62:db:a2:f2:b3:5a:b3:13:75:73:9d:c0:56:30:
b2:8a:a8:d0:31:aa:c3:66:b9:35:6f:ca:cc:d5:f7:
26:38:9e:95:7d:46:47:69:f2:db:c7:1b:22:44:92:
e4:c2:05:d5:27:cd:30:9d:4c:c8:e1:1d:80:45:80:
5f:d4:3e:66:22:36:5a:05:ad:f7:0f:8d:e3:1a:10:
c7:7e:9d:0a:7b:d8:77:87:86:54:f2:9a:de:4a:fb:
03:4d:bf:86:63:3d:38:4d:4f:ff:65:96:3b:d9:e0:
2e:6c:d1:5f:04:ea:90:71:a6:40:2c:72:83:cf:79:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:EE:C8:16:07:4C:E7:EE:94:BF:F2:C2:7C:63:94:7E:F8:54:85
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/GZLuyBYHTOfulL_ywnxjlH74VIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.191.0/24
212.81.40.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:a9:79:b3:93:ce:ed:cd:22:ea:6e:04:f2:dd:ed:bb:04:64:
2b:52:63:25:2d:e8:9b:5c:39:f0:85:9e:00:12:02:bd:d2:41:
6d:94:ec:f5:92:16:56:d5:fb:2b:44:2b:a1:c2:5f:5b:b9:bc:
5b:de:94:8b:3f:0e:31:69:97:41:a5:f1:22:2c:d3:07:f1:15:
e2:d4:1c:7b:f4:f1:20:46:19:61:af:58:8b:e5:7e:c1:9a:23:
e8:34:d4:a3:a4:ec:15:3e:92:c3:bf:d9:c8:65:75:a5:1f:89:
9f:c8:a3:68:d4:42:37:6b:8d:bf:86:5e:be:39:81:22:5b:47:
19:44:9b:ca:5d:6f:42:38:aa:f7:e6:93:10:e2:9b:37:12:92:
19:95:3e:92:d7:f5:05:7b:5c:92:58:9d:dc:26:8b:27:13:da:
5e:d0:db:28:db:6f:7d:80:2c:b4:17:7c:bf:d0:1f:11:fd:dc:
51:7b:cd:d7:6e:66:76:dd:76:a3:73:51:d2:29:f7:41:c2:0d:
52:a3:1c:ad:55:25:8c:54:54:f8:de:6b:13:97:83:fa:91:1f:
15:ef:5c:b5:64:29:3f:43:40:61:e5:8d:0a:c5:fc:51:3e:ba:
64:22:24:01:eb:ae:82:28:d7:cd:37:a0:49:c0:e1:39:91:1a:
d0:80:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 06:14:29 2024 by rpki-client on console-fra.rpki-client.org