Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/GgGUXgid9IV23BUdM80QD6QPK60.roa
File: GgGUXgid9IV23BUdM80QD6QPK60.roa (raw, json)
Hash identifier: WfFWzn13/mIu03ttr5mntkNty8v4lAW6X/3zFagPLvM=
Subject key identifier: 1A:01:94:5E:08:9D:F4:85:76:DC:15:1D:33:CD:10:0F:A4:0F:2B:AD
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 018CC94D70A70FB40E9CF8BE6A42E8C5D0FE
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/GgGUXgid9IV23BUdM80QD6QPK60.roa
Signing time: Tue 02 Jan 2024 08:32:24 +0000
ROA not before: Tue 02 Jan 2024 08:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43736
IP address blocks: 91.195.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:70:a7:0f:b4:0e:9c:f8:be:6a:42:e8:c5:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jan 2 08:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a01945e089df48576dc151d33cd100fa40f2bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:3c:ca:2d:d5:da:fc:bb:1f:5f:cc:7d:52:
64:66:ca:cf:6e:a9:64:cb:87:f3:a8:2b:ed:02:2a:
04:6e:28:cc:5e:70:2c:e6:e8:cb:a9:07:70:c6:a1:
76:90:d6:8c:6a:c0:28:02:91:0c:ca:b5:94:8d:04:
7b:1d:51:a3:e3:10:f6:f2:6a:a5:b3:7b:c8:ae:49:
6a:a9:ae:4f:50:f7:4e:ca:b8:68:9d:39:6e:34:39:
9f:3e:19:9d:83:c3:08:c1:15:cd:b6:2a:20:3e:41:
04:7d:9f:c8:55:65:de:f9:94:a0:6d:28:48:ec:49:
32:6c:e9:37:15:89:d3:74:60:91:41:31:a8:93:65:
64:2b:9c:b8:24:60:d5:a7:d0:78:e7:51:dc:11:cc:
f6:d2:a6:72:05:4b:81:0b:3d:ee:ad:82:8a:bf:99:
a9:f2:05:0a:24:8f:94:77:e9:da:a6:61:58:85:f4:
ca:97:08:41:02:61:6d:b6:5c:b2:9a:b9:9d:ad:b3:
9e:47:5d:79:70:30:5c:53:39:da:9b:0c:82:f4:f1:
56:02:7b:1c:cb:eb:fb:e9:02:1c:db:6e:3c:3d:49:
91:6a:13:29:24:aa:dd:ca:57:62:cd:53:db:e9:cd:
fc:c9:b2:ef:5f:6b:a2:67:79:d7:d2:b4:82:85:75:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:94:5E:08:9D:F4:85:76:DC:15:1D:33:CD:10:0F:A4:0F:2B:AD
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/GgGUXgid9IV23BUdM80QD6QPK60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.144.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:82:6f:34:51:59:5e:2d:7a:c3:fa:a4:8a:78:e1:bc:b7:58:
cf:ed:69:10:ec:60:49:85:95:31:ad:fd:1c:1a:84:bb:c1:b2:
89:99:01:9b:15:6f:71:3c:bf:fd:63:1f:13:bd:51:a5:65:03:
25:af:d7:87:f3:5f:16:9e:eb:a7:12:c2:9a:6d:86:9d:57:67:
a9:64:26:72:79:1a:b7:2c:1a:fd:ee:c3:b1:6f:3a:29:80:16:
97:e8:bc:86:c0:01:00:77:f2:af:fc:2e:7c:19:c1:8e:a7:41:
e4:36:0b:3c:e5:61:68:4a:aa:5d:88:4f:b5:35:f9:67:c3:cc:
0b:48:8a:25:59:73:a5:6d:45:2d:18:ee:af:e2:5b:f8:81:f5:
e2:12:43:bb:26:15:3c:72:e0:63:73:89:f3:f2:b1:c3:cb:72:
cb:83:c0:b1:d0:fe:b5:66:24:3c:14:4a:f2:f9:46:9c:84:8f:
de:a8:41:44:c8:97:59:27:31:53:52:78:15:a7:2a:20:40:5a:
a1:72:e4:14:7b:d4:9a:08:74:f4:d1:85:57:2b:7a:8a:53:e8:
75:ea:38:fe:ff:76:eb:56:9c:11:dd:0a:d5:4c:37:ff:29:ec:
95:01:e5:6f:1a:a6:f3:0b:f5:b0:fd:b8:80:02:76:76:fc:3f:
8d:de:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:10:53 2024 by rpki-client on console-ams.rpki-client.org