Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/GQGKt12k0D85JjtIARDmCBLsf5A.roa
File: GQGKt12k0D85JjtIARDmCBLsf5A.roa (raw, json)
Hash identifier: P3mdv5FDUPKX3Nyg8ouqtq6TDpJ1yGIXzO6rsLxwxm4=
Subject key identifier: 19:01:8A:B7:5D:A4:D0:3F:39:26:3B:48:01:10:E6:08:12:EC:7F:90
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 0190187CDC358B2FDF2858A26FD67576CAFC
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/GQGKt12k0D85JjtIARDmCBLsf5A.roa
Signing time: Fri 14 Jun 2024 20:42:34 +0000
ROA not before: Fri 14 Jun 2024 20:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:18:7c:dc:35:8b:2f:df:28:58:a2:6f:d6:75:76:ca:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jun 14 20:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19018ab75da4d03f39263b480110e60812ec7f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:03:3c:4f:d9:da:39:4e:68:a5:84:a6:a4:9b:
fb:8e:33:9e:e7:ae:c8:b7:bc:25:40:66:4b:c1:30:
a0:49:74:d2:55:39:d3:64:d2:45:54:d5:00:f6:af:
41:e5:94:ff:a5:5c:b8:72:d3:f1:6d:72:e7:22:71:
ed:e6:a1:de:90:06:e0:28:4d:63:44:7b:9a:7d:4b:
3e:a5:c5:04:3e:a6:e5:fb:f3:a0:48:6c:1d:30:7a:
2d:11:50:76:75:41:ab:5d:4a:56:58:68:12:ae:c6:
90:34:a7:38:96:7d:dc:06:d1:c2:71:30:1b:9d:b4:
93:a6:a2:61:e0:6b:13:dd:34:84:6c:09:cb:26:4a:
ce:df:58:17:9e:03:73:0c:45:fd:b0:7c:01:03:97:
b2:37:3b:12:39:f8:35:84:c2:1d:85:f7:5e:20:10:
8b:78:27:74:db:c0:da:ec:ef:f2:a4:85:6b:e4:25:
8f:5a:b4:95:ec:d0:4d:78:72:61:77:e1:bd:54:dc:
50:13:8e:f8:24:43:3a:d6:4b:3f:7a:39:a4:2c:31:
e0:71:09:7f:5b:51:ac:7d:a7:76:2c:8a:48:51:06:
ae:84:92:58:75:f7:cd:a5:ad:56:4d:8c:0c:ce:e9:
c6:4c:b1:51:db:49:b1:c3:ea:fa:44:37:32:99:4d:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:8A:B7:5D:A4:D0:3F:39:26:3B:48:01:10:E6:08:12:EC:7F:90
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/GQGKt12k0D85JjtIARDmCBLsf5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7f:99:e1:b6:54:8f:4e:52:18:be:74:11:1a:44:cc:84:5a:
46:8a:ef:75:0a:fa:4f:5e:a3:70:99:3d:9e:93:1c:b0:4e:d6:
04:ed:16:8e:ee:48:c5:25:7c:02:0d:6f:9f:d5:0f:c8:e7:19:
f8:ad:de:67:c8:cc:c3:34:2d:05:bf:e9:94:3d:15:e8:17:7e:
41:7d:9f:5c:52:53:b5:50:30:8c:1a:2b:a4:41:a0:0c:e5:a4:
68:92:b5:58:e3:9f:73:b7:9f:94:35:c9:63:ec:70:2e:59:96:
a4:a3:a7:56:d3:af:30:78:39:9b:8a:1f:28:0d:d2:1f:06:e3:
d3:b1:ba:10:70:9d:71:16:19:81:2e:10:69:ba:c5:d9:56:2e:
10:d5:08:b5:e1:de:03:2c:ea:04:7f:43:dd:85:6a:4e:d3:ca:
1e:f3:a2:28:bf:b8:63:e6:ac:08:53:57:2a:88:44:13:22:e6:
cb:2c:8e:06:45:ce:8e:57:7e:f8:c0:bf:67:bd:b3:55:f6:ca:
8f:df:b4:14:40:f1:fa:3d:67:5d:42:94:a1:b9:68:eb:12:f5:
de:68:c9:18:30:6a:26:48:37:8f:1c:5d:9a:b9:38:2e:2a:15:
16:53:f5:42:d5:15:fb:c3:4b:49:4f:8b:96:16:38:b3:9e:42:
9e:0f:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:28 2024 by rpki-client on console-ams.rpki-client.org