Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Gpg9IOwhXdZyCtloG4AEUcdEpKw.roa
File: Gpg9IOwhXdZyCtloG4AEUcdEpKw.roa (raw, json)
Hash identifier: 4NuESlYHCkceFpfGHmO8kNMVtIqcOBhVdiueREQcXs4=
Subject key identifier: 1A:98:3D:20:EC:21:5D:D6:72:0A:D9:68:1B:80:04:51:C7:44:A4:AC
Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial: 018CC26D5C2FD18F436E82AA57FAFA194305
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Gpg9IOwhXdZyCtloG4AEUcdEpKw.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199284
IP address blocks: 5.102.160.0/21 maxlen: 24
185.97.180.0/22 maxlen: 24
178.19.224.0/20 maxlen: 24
2a01:75c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5c:2f:d1:8f:43:6e:82:aa:57:fa:fa:19:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a983d20ec215dd6720ad9681b800451c744a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:bb:fd:12:c8:db:41:33:ed:df:a8:a2:7a:
7a:76:50:f7:26:be:e7:96:9d:85:6f:c9:cb:2b:c8:
8e:86:1c:9e:68:fa:df:b9:e4:db:ca:14:04:8a:32:
9e:df:7b:1d:da:5c:0a:a8:a8:54:70:2f:1e:39:dc:
64:b7:64:2b:2f:51:3c:20:96:22:df:f9:a8:4d:b2:
42:01:c9:5f:cd:59:e3:c2:e2:9f:e6:88:51:f5:0a:
c8:52:b5:f7:5e:6e:2d:86:75:2a:f4:20:e2:48:40:
c2:f7:70:b4:fc:9d:67:4f:42:6b:0e:3c:c0:59:96:
a8:fb:a6:94:13:2a:c7:12:6b:dd:c1:cf:75:27:4d:
70:ba:57:5b:10:6b:22:40:84:b9:56:00:9e:49:0e:
0a:04:9f:5d:34:d8:38:8d:2c:49:78:50:b4:60:18:
88:79:e4:8a:85:59:27:ec:ac:a7:95:f5:54:e7:ef:
3f:8a:a9:b3:61:d0:70:4c:5f:60:a3:2d:6b:a3:a5:
4a:cb:1f:65:c4:d6:fc:08:ce:30:28:69:b1:b8:dd:
d7:2e:87:8b:ec:c6:1d:c1:1d:8d:22:3e:93:c2:0d:
30:f5:a4:be:26:a5:c5:fe:73:b4:80:62:a5:e6:1f:
c7:67:eb:b1:70:76:19:1a:d3:e2:c2:e5:fe:d3:49:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:98:3D:20:EC:21:5D:D6:72:0A:D9:68:1B:80:04:51:C7:44:A4:AC
X509v3 Authority Key Identifier:
keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/Gpg9IOwhXdZyCtloG4AEUcdEpKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.160.0/21
178.19.224.0/20
185.97.180.0/22
IPv6:
2a01:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:d6:a3:a9:1b:1e:8c:85:af:09:31:94:f3:83:7d:b5:ba:4c:
45:c5:24:17:20:20:b7:2f:0c:b6:d5:83:05:d8:34:7b:c1:20:
bb:b0:24:7f:df:76:ea:59:1c:62:11:39:5e:27:70:da:09:79:
90:ae:91:2e:b3:44:69:9e:a8:97:02:25:a6:7f:4b:d8:fa:c6:
0a:f0:95:48:17:b0:53:40:53:2c:4b:08:d2:7c:9d:22:8e:3f:
38:ea:15:83:1e:db:41:da:4a:ae:e7:53:1e:58:b3:62:43:46:
28:7f:ad:9f:28:2d:f0:b3:dd:4f:66:45:7b:b0:38:b2:68:ef:
6d:27:06:f8:c6:70:54:6f:a8:ae:2f:00:75:ed:3d:f8:5f:2e:
da:09:77:b1:ff:5c:f8:9b:9c:c9:fa:f7:0c:88:26:b9:7f:d6:
96:5a:63:5a:4f:7f:74:b5:b0:0a:77:a8:05:ec:db:ee:c7:0d:
19:8c:f7:30:48:c8:a0:f5:e4:35:47:a2:03:ea:4a:c4:cd:3b:
21:a7:fd:d9:11:bb:cb:7c:1c:fa:9f:cb:21:68:9b:6c:54:44:
df:f5:b1:43:aa:2b:19:95:30:d7:b6:ba:2e:b8:ab:15:a2:b7:
e2:d6:98:8d:1e:f1:f2:25:43:13:3d:f6:da:fa:11:d4:68:8c:
fd:00:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:07:17 2024 by rpki-client on console-ams.rpki-client.org