Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/glZVmnY6S2V9NOfAg1osJZoRPkA.roa
File: glZVmnY6S2V9NOfAg1osJZoRPkA.roa (raw, json)
Hash identifier: fc88FBnkxxlWRqMeC+6WyAVbGC7ij3+Ybyf5ZgHNVXA=
Subject key identifier: 82:56:55:9A:76:3A:4B:65:7D:34:E7:C0:83:5A:2C:25:9A:11:3E:40
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018CC649E41C83067CA046B00D01DF1EE01B
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/glZVmnY6S2V9NOfAg1osJZoRPkA.roa
Signing time: Mon 01 Jan 2024 18:29:40 +0000
ROA not before: Mon 01 Jan 2024 18:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202715
IP address blocks: 194.170.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e4:1c:83:06:7c:a0:46:b0:0d:01:df:1e:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 18:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8256559a763a4b657d34e7c0835a2c259a113e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:3c:f0:0c:ec:45:88:82:e7:4d:98:5e:8e:
be:cf:ad:8a:e5:56:7d:6d:85:0e:48:0f:1b:91:28:
d4:69:ad:e4:eb:5e:48:97:d6:27:9d:2b:eb:a1:ef:
d8:eb:c4:06:d6:16:3e:39:de:10:c8:bf:60:aa:a9:
38:a5:a0:14:89:da:12:7e:cb:9b:eb:a3:34:3c:0c:
b6:91:02:e3:40:9b:10:67:5c:d1:ad:db:87:25:77:
e2:6f:67:40:6b:f0:77:ae:bc:28:20:3e:77:66:4c:
9e:52:c8:66:6e:e6:b5:e2:e9:ea:73:88:7d:21:75:
65:11:32:f4:e9:b3:72:c9:ef:b9:ce:33:be:f8:9b:
8d:0c:99:bc:e1:ba:65:de:cf:14:1e:18:c1:1c:bb:
de:8e:77:1d:f7:b4:44:62:c9:ef:85:f9:5c:84:4e:
19:04:7a:4e:58:bd:02:b6:26:fb:fd:6c:94:b0:9e:
e4:aa:ad:df:17:22:14:2b:88:f7:09:a0:14:e1:f7:
7a:d0:9b:3e:ae:7c:4d:f1:16:8b:67:86:2c:12:39:
e9:3e:53:b0:69:0b:39:64:8f:0f:9f:ff:c6:4f:67:
ca:ae:3b:49:e9:3c:ca:35:8e:c3:f0:2e:21:de:20:
19:ba:16:49:84:c0:5f:68:d4:31:79:85:00:8e:63:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:55:9A:76:3A:4B:65:7D:34:E7:C0:83:5A:2C:25:9A:11:3E:40
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/glZVmnY6S2V9NOfAg1osJZoRPkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.170.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b6:cf:9f:75:45:b8:cf:66:a7:82:d3:bb:e1:2c:58:14:de:
d4:8a:9b:6f:66:be:8d:f0:14:e7:3a:20:72:9d:51:ed:b2:c2:
3b:de:33:37:53:df:07:f5:34:01:b9:3a:3f:17:a3:70:27:0b:
c0:5c:ec:2e:f5:4d:c0:14:06:3d:3f:91:88:e8:9e:da:e1:41:
b5:ba:e2:76:a8:89:01:03:ba:3c:fc:82:3d:94:8e:f5:ae:e5:
92:7f:5e:0b:70:a1:59:7f:a4:6c:27:e2:90:46:14:64:f5:49:
13:75:80:ed:f1:36:cd:27:b6:84:01:31:2f:dd:22:44:3a:89:
2b:68:65:c4:7b:6d:16:a5:d9:7c:8d:9c:d2:c9:4d:31:ad:17:
da:0d:fe:56:e2:bf:a6:ce:cd:f1:42:64:c8:9b:ea:4c:0e:17:
5e:d3:5b:20:3e:5e:36:1d:6d:13:39:c8:0b:cb:66:3d:39:19:
fc:28:97:c7:f8:5f:81:39:95:3b:35:4d:a3:e4:93:ec:51:70:
6e:91:ed:39:dc:43:0f:d4:2b:df:32:46:fe:b9:02:48:1e:33:
56:05:3b:cc:19:9c:25:eb:67:f6:d7:db:ae:f0:a7:fe:64:d7:
f9:6a:3f:36:08:0a:2f:3e:b2:03:29:22:4a:6b:43:8e:74:a8:
38:54:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:12:16 2024 by rpki-client on console-fra.rpki-client.org