Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GxteE6QnTCdGmr9ckaS-YtkADXE.roa
File: GxteE6QnTCdGmr9ckaS-YtkADXE.roa (raw, json)
Hash identifier: Ev88ZUPh5KTYTXiRwajTIYXbqJMQ1Ff/jbHYbDOqfJI=
Subject key identifier: 1B:1B:5E:13:A4:27:4C:27:46:9A:BF:5C:91:A4:BE:62:D9:00:0D:71
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50127D7DE1436F65229AF0B04C36BE3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GxteE6QnTCdGmr9ckaS-YtkADXE.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206804
IP address blocks: 192.159.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:27:d7:de:14:36:f6:52:29:af:0b:04:c3:6b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b1b5e13a4274c27469abf5c91a4be62d9000d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:58:97:2b:bd:08:c0:24:58:dd:96:a0:c6:
2c:75:d6:dc:b4:75:52:6b:8b:13:ab:d3:00:78:3b:
47:44:db:58:12:32:ae:ab:57:67:2f:d9:7a:d4:36:
0d:51:55:f6:db:1b:cc:ac:e4:69:f2:d7:65:60:8b:
a2:97:e8:bc:9a:52:4b:f1:73:a5:e2:c8:72:3e:a6:
fa:4f:56:13:2d:93:a7:54:50:58:c8:b9:22:9c:2d:
d8:18:2f:18:88:b0:fb:a8:05:da:b8:10:74:e6:f4:
e5:d8:b3:e2:95:fd:8a:d8:2e:47:9e:43:69:f6:23:
4b:4d:3f:b8:3f:29:ad:d0:e5:d1:a0:79:7a:77:44:
b3:05:6a:45:05:72:e6:38:25:4b:22:06:6c:a4:2f:
07:dd:f7:82:13:90:88:b7:e6:d7:9e:9a:c9:59:74:
57:c1:67:5d:02:a9:7e:83:62:07:21:cd:96:18:c5:
8f:3d:87:40:6a:37:a8:70:76:94:43:33:6c:0d:34:
a3:1a:06:cc:33:36:aa:92:42:a0:9e:fc:1f:e9:9d:
3d:d9:c5:f7:8d:2d:95:df:86:d9:dc:83:a9:e4:d5:
fe:1e:66:63:50:34:ec:18:75:03:26:44:b3:ae:5b:
f9:24:82:de:f9:ee:b8:cf:4b:bf:67:19:1b:b6:31:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:5E:13:A4:27:4C:27:46:9A:BF:5C:91:A4:BE:62:D9:00:0D:71
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GxteE6QnTCdGmr9ckaS-YtkADXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.100.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d2:bb:08:d9:f8:92:c1:db:c3:88:80:85:74:2a:12:01:92:
98:76:21:15:22:b8:8f:24:f9:9e:3a:81:ce:41:61:4c:0b:72:
93:8a:4b:35:61:61:36:54:ee:ea:6f:6d:43:ad:dd:ad:22:ed:
11:92:35:49:cc:ab:dd:47:9a:e1:f7:1d:4d:ca:76:3f:d4:09:
f7:95:55:5b:03:ab:95:71:b1:05:21:f1:9a:84:97:07:4e:1b:
a4:e0:f0:6a:cf:22:fc:5d:26:31:25:2f:4e:8c:8a:7c:b5:e3:
f8:74:72:f9:c3:72:b2:65:6e:1c:f3:a4:d7:a2:13:72:5a:d1:
e4:da:f7:e4:18:96:0d:21:f7:84:5d:78:bc:40:3d:97:c1:63:
d0:a4:8a:d6:b6:59:c5:0e:df:0c:a5:2e:af:21:ad:ea:9c:f3:
8e:bb:ac:3e:90:1b:10:70:ed:af:84:4b:03:ba:6b:43:8e:24:
26:40:59:8f:1d:d2:d7:3b:83:b0:35:63:9d:04:36:44:b5:45:
44:22:af:76:98:34:f3:0b:4f:26:70:5f:9b:f1:b8:a3:32:9f:
60:41:7a:69:da:0d:af:31:ee:d6:07:60:16:3c:93:67:80:34:
75:9f:92:f8:75:8c:77:a8:0e:e8:1c:48:8c:a7:7a:16:35:34:
63:a6:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:22:05 2024 by rpki-client on console-fra.rpki-client.org