Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GqpD40TFySeZ47qy2qBcESEulIA.roa
File: GqpD40TFySeZ47qy2qBcESEulIA.roa (raw, json)
Hash identifier: KUSsNYFRRq4zRX9JrPydnVIrPipm6ZjZi+8GqsbcTIk=
Subject key identifier: 1A:AA:43:E3:44:C5:C9:27:99:E3:BA:B2:DA:A0:5C:11:21:2E:94:80
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D3034A09F2F77A0414C13F1731B06ED79
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GqpD40TFySeZ47qy2qBcESEulIA.roa
Signing time: Mon 22 Jan 2024 08:06:11 +0000
ROA not before: Mon 22 Jan 2024 08:06:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 45.10.109.0/24 maxlen: 24
45.11.212.0/24 maxlen: 24
45.88.208.0/24 maxlen: 24
45.88.211.0/24 maxlen: 24
176.53.187.0/24 maxlen: 24
193.56.185.0/24 maxlen: 24
193.160.211.0/24 maxlen: 24
194.32.124.0/24 maxlen: 24
194.32.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:34:a0:9f:2f:77:a0:41:4c:13:f1:73:1b:06:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 22 08:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aaa43e344c5c92799e3bab2daa05c11212e9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:c7:50:bb:6e:91:fb:9e:da:31:f2:06:2c:
f8:e4:8f:8c:5e:ab:ae:e1:59:df:4a:33:3c:fb:33:
3a:49:ed:b2:42:80:dc:1a:0a:6b:54:62:b5:16:fa:
3c:78:59:ff:b1:ae:4b:65:ab:64:ba:50:d9:cb:97:
1f:af:47:2f:6f:06:c7:01:31:68:20:37:d0:a5:ee:
b3:8e:04:b9:94:2a:16:79:25:5a:8f:61:f2:d2:be:
ff:75:80:6b:22:6f:ea:c0:e8:31:fa:50:ce:77:1a:
c7:6d:7e:91:fc:83:da:a1:11:d2:3c:68:c4:6e:c5:
7e:f9:90:16:c1:e7:a8:dd:59:7d:5e:3a:57:5f:f8:
51:2b:40:c3:ae:e7:24:fc:d4:1b:57:43:1e:32:61:
ad:fc:5e:e0:30:98:d0:e5:ec:68:09:15:17:9f:07:
0d:11:35:28:92:ae:da:fd:56:9b:80:50:06:a4:12:
da:79:67:c1:d8:3b:b3:3f:2b:db:9a:a0:38:59:74:
9c:8c:e0:0f:47:47:1f:18:c5:78:81:82:0b:aa:63:
58:58:4b:e3:18:ae:66:ce:64:ee:a4:1f:5c:9e:2e:
e5:0b:8e:47:53:b8:c6:d5:48:85:34:58:6a:5a:eb:
a3:63:92:44:80:f6:f4:f7:42:45:9b:96:4a:ae:05:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AA:43:E3:44:C5:C9:27:99:E3:BA:B2:DA:A0:5C:11:21:2E:94:80
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GqpD40TFySeZ47qy2qBcESEulIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.109.0/24
45.11.212.0/24
45.88.208.0/24
45.88.211.0/24
176.53.187.0/24
193.56.185.0/24
193.160.211.0/24
194.32.124.0/24
194.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8b:cd:3f:cf:ba:68:2f:69:a6:f4:13:4c:ef:92:78:c1:88:
62:71:b5:df:f3:4b:de:d5:f6:5b:2c:28:18:5f:5f:bd:d1:7c:
2f:09:10:ea:e3:a4:42:05:44:d0:14:2a:d8:3a:c5:d7:ec:63:
2f:e1:a5:9c:1d:74:19:40:c1:db:15:60:cd:67:b2:66:aa:31:
aa:08:ff:73:86:20:ee:e9:10:5c:5c:97:b2:1f:fe:60:9f:35:
1f:38:5c:23:5b:bb:b6:ca:bb:40:cc:33:b4:a4:7d:ef:27:f4:
dd:8a:78:21:d9:6d:d0:33:35:65:6f:73:d2:de:47:04:8c:93:
84:bb:f3:66:1d:1e:de:80:0a:17:50:6d:74:3d:49:14:8f:9c:
45:55:68:3a:4a:21:6c:ee:00:9d:03:bb:24:38:d2:e7:84:1a:
37:d7:19:9b:ea:1c:34:9b:e6:a0:7e:4a:ed:f4:b8:fc:ab:0a:
0f:f9:4c:87:9f:5b:82:44:bc:47:2d:ae:f4:ab:4f:3d:40:4f:
18:e0:30:bb:73:66:c8:50:91:40:27:0e:61:20:d3:cd:ee:da:
ba:95:8b:26:03:31:2b:c7:7f:47:f4:cd:91:06:8f:96:66:2a:
bc:27:83:ac:f5:68:db:60:29:df:41:b6:c4:09:48:d4:02:4f:
14:08:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:38:19 2024 by rpki-client on console-ams.rpki-client.org