Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/gcVpCAi7rdZLLkjwBLFP40L1_CA.roa
File: gcVpCAi7rdZLLkjwBLFP40L1_CA.roa (raw, json)
Hash identifier: 80gXqn7B7nNVcSwWHj2kEycjP3BpimeJClxn8DfsbjU=
Subject key identifier: 81:C5:69:08:08:BB:AD:D6:4B:2E:48:F0:04:B1:4F:E3:42:F5:FC:20
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 018CC8DF9BF98CF45A26BA9076C33CCE6812
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/gcVpCAi7rdZLLkjwBLFP40L1_CA.roa
Signing time: Tue 02 Jan 2024 06:32:26 +0000
ROA not before: Tue 02 Jan 2024 06:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 193.22.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9b:f9:8c:f4:5a:26:ba:90:76:c3:3c:ce:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c5690808bbadd64b2e48f004b14fe342f5fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:3b:92:96:86:5c:75:c6:6c:36:ce:13:3f:
3f:ac:67:6d:36:16:72:17:e1:1b:5e:d2:dc:dc:90:
d1:95:d7:d2:6b:22:f1:85:ab:c8:cb:4f:4a:d5:7d:
8a:da:cb:04:ad:22:98:1e:58:ae:96:71:14:3c:72:
a6:05:3c:77:de:d8:31:19:d1:8b:94:7a:21:50:3b:
28:04:64:4a:1b:cb:81:2f:fc:3f:2f:ea:d6:06:b4:
da:d3:45:c9:c6:16:c6:77:02:61:17:ee:25:cd:b0:
a9:a8:16:da:7d:e4:66:4e:6d:89:48:4b:b7:17:06:
ad:af:91:ff:96:a6:72:0a:7e:b2:8f:2e:0e:03:8c:
1a:71:73:e0:46:1c:3a:cb:ea:21:8f:38:de:33:33:
c7:74:50:26:0f:cb:d3:16:d3:fa:78:54:89:26:aa:
50:7b:45:28:11:50:05:cd:19:30:a0:40:f2:a3:87:
4d:d7:2c:90:cb:a6:95:ee:c3:67:6e:9d:1d:1e:e4:
45:73:b4:03:f9:8c:cc:be:35:5c:90:56:e0:88:e8:
86:9f:1c:95:07:e0:d7:93:4d:6b:2e:6f:a2:1b:a8:
cd:23:3b:65:db:3d:ac:00:a2:5a:76:8a:21:9d:7c:
43:71:03:20:07:4b:e3:0b:85:82:15:0d:1e:d6:24:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:69:08:08:BB:AD:D6:4B:2E:48:F0:04:B1:4F:E3:42:F5:FC:20
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/gcVpCAi7rdZLLkjwBLFP40L1_CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8e:b5:49:7b:bb:f4:8a:e0:0f:32:56:34:62:04:91:4a:1f:
fb:6e:5d:f0:f8:cd:b2:62:bc:31:d6:e9:d6:87:59:c5:51:b7:
7a:b7:5f:b6:fc:6c:da:64:ce:cb:29:d7:43:6e:df:f4:79:80:
66:d2:39:77:cf:70:13:d4:67:1a:fb:ce:6d:cc:1b:ff:bd:c5:
0b:3d:53:1c:27:b7:0f:62:c3:5b:5a:66:f0:37:a8:07:1f:59:
ee:19:4e:f2:05:f6:5a:0d:b0:6f:ea:61:5d:d2:6c:e6:04:88:
b5:3e:2d:06:da:40:18:f4:48:9d:ee:5a:4e:4c:88:23:6b:98:
63:5d:e5:46:75:89:44:5b:b7:c9:9b:9c:56:df:a4:1e:04:d0:
3d:e4:19:9b:a7:0d:a2:3c:76:f6:26:e1:3e:80:c6:74:c8:89:
26:6c:e3:00:3b:0b:14:3f:1c:12:7b:c8:5e:20:cc:53:52:2c:
d4:ab:a1:ff:7d:44:96:9b:e1:73:16:9f:a6:87:94:4e:bf:99:
fd:e3:50:44:92:d6:c1:57:e5:08:8e:d6:3c:27:60:38:f5:6c:
31:14:83:aa:f5:d6:85:b8:0f:bb:87:b6:42:98:e5:fd:66:5a:
9d:d7:c0:94:d3:a8:9b:02:2a:f9:80:6a:d5:cf:08:e1:a7:aa:
aa:6e:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:52 2024 by rpki-client on console-ams.rpki-client.org