Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/GRh9QwgE5LoxRxx9odajH0mDNBs.roa
File: GRh9QwgE5LoxRxx9odajH0mDNBs.roa (raw, json)
Hash identifier: AvBJ2Wmv6jOS1SztnAZDMDVRSYP7h6DtwN72R+6N2Ng=
Subject key identifier: 19:18:7D:43:08:04:E4:BA:31:47:1C:7D:A1:D6:A3:1F:49:83:34:1B
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AB093FC6D59BB4384784F6442CC08
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/GRh9QwgE5LoxRxx9odajH0mDNBs.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204004
IP address blocks: 185.107.16.0/24 maxlen: 24
185.107.17.0/24 maxlen: 24
185.107.19.0/24 maxlen: 24
185.107.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b0:93:fc:6d:59:bb:43:84:78:4f:64:42:cc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19187d430804e4ba31471c7da1d6a31f4983341b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:e8:95:de:46:36:5e:7a:85:01:e8:fd:ff:
19:4b:71:f8:dd:77:e2:0f:cf:45:81:87:b1:00:81:
aa:80:41:73:46:b3:b2:82:6f:d8:b8:36:65:04:39:
bd:c4:10:65:82:f4:94:51:df:05:6f:53:7b:c7:7a:
d6:10:1f:04:d1:f2:9a:8a:de:31:31:01:63:d1:e8:
f0:4e:2c:ec:8d:d3:78:a1:02:33:39:6a:1f:48:42:
c4:b6:a1:cd:cf:b3:99:a8:ca:17:c8:42:9d:0e:eb:
02:b4:2e:34:a0:aa:50:19:73:b9:af:50:5c:5b:48:
52:f3:31:3c:cf:95:8e:45:11:bc:91:3b:b0:7e:cc:
55:f7:4d:44:58:ce:36:c8:34:77:c1:e2:ad:19:22:
64:4b:7a:0f:88:ea:bb:a0:56:1e:a8:2f:ba:7c:bd:
7a:45:17:dc:a7:2c:6b:e9:04:cf:47:be:af:f9:d3:
73:5e:ac:af:bc:54:3b:99:f1:59:01:d8:be:34:53:
08:bb:d0:ab:c8:3b:92:35:12:2e:26:fa:07:fb:0d:
bb:46:59:68:1a:77:a0:72:7a:ff:e9:c0:1e:98:82:
0f:f3:3b:94:76:08:de:a3:4f:d7:0a:46:e8:3c:6b:
9f:56:9c:ec:7e:3a:dd:01:36:04:e1:41:cb:59:73:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:7D:43:08:04:E4:BA:31:47:1C:7D:A1:D6:A3:1F:49:83:34:1B
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/GRh9QwgE5LoxRxx9odajH0mDNBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.16.0/22
Signature Algorithm: sha256WithRSAEncryption
34:b9:9b:c2:5c:2e:87:c2:34:df:de:a5:ff:7d:b2:53:c8:f9:
d2:8f:b3:54:85:a8:de:5c:7d:a8:69:66:0f:64:fc:fb:af:4b:
f3:8c:0b:4a:81:37:f8:33:6f:4c:11:ed:ce:cf:74:73:b3:93:
7a:29:01:51:6e:0f:34:b1:7f:c2:bb:dd:2b:02:10:82:67:ca:
bb:ae:f5:29:91:3c:1b:3f:db:2d:54:28:19:89:89:60:7b:a1:
90:aa:95:d6:8d:2f:29:87:81:a6:4a:b7:ea:74:bc:d3:b5:e3:
d1:2e:bc:a8:66:ca:6d:5a:15:67:e4:76:62:f3:8f:83:5f:cf:
75:53:a4:fa:02:5d:83:58:13:d2:38:93:9c:fa:ed:c6:8b:50:
eb:d2:e9:bf:03:85:ae:dd:c9:ee:97:0d:a4:1a:06:47:45:05:
a6:37:fd:33:d1:42:5a:03:20:c0:4c:77:05:22:0b:13:f9:dc:
dd:e8:5d:2b:ba:7f:80:c8:4c:2e:20:87:51:4c:d2:9a:86:16:
b8:d5:6a:a8:4e:bb:16:09:b9:75:bb:63:11:c3:25:af:1f:7e:
19:9b:6d:24:21:b2:36:6a:7c:2f:03:9e:bb:47:a6:e7:07:d0:
56:9c:3e:7d:3b:2c:cb:10:00:c9:eb:00:7d:86:ba:45:7a:fa:
6a:20:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:03 2024 by rpki-client on console-fra.rpki-client.org