Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/GfdcBrGrAhWmMY3fhmfjZQNFlZ4.roa
File: GfdcBrGrAhWmMY3fhmfjZQNFlZ4.roa (raw, json)
Hash identifier: yOJ0V5ED0IE2VQocEkBGt98PvSkTcsdM+7cGupmSOtU=
Subject key identifier: 19:F7:5C:06:B1:AB:02:15:A6:31:8D:DF:86:67:E3:65:03:45:95:9E
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 018CC4253A387693DD9248B88462DBF20E3B
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/GfdcBrGrAhWmMY3fhmfjZQNFlZ4.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209913
IP address blocks: 91.199.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3a:38:76:93:dd:92:48:b8:84:62:db:f2:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19f75c06b1ab0215a6318ddf8667e3650345959e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:53:16:33:f3:f4:2f:53:47:18:94:d1:91:
8c:05:7a:e8:24:db:ee:e2:ee:f9:bd:7b:f2:94:49:
8f:c7:aa:99:b2:3d:30:e9:0b:0d:ad:a9:18:62:89:
ea:87:c8:a9:bf:6d:39:bd:92:cc:43:62:68:0b:a8:
b5:27:5e:22:40:e5:f6:5d:d5:ac:40:a2:6c:64:86:
20:95:dc:37:8e:57:6e:1a:96:8b:d1:41:b6:c7:6f:
b5:49:ba:e5:7e:c7:bd:9b:ca:61:32:00:f7:96:28:
60:53:a2:c3:04:15:2c:c4:09:c4:99:90:a5:de:29:
be:2b:16:ea:7b:05:f7:7c:da:1a:2c:14:d2:8a:17:
88:32:c4:78:a2:c3:13:78:2f:36:8b:90:8f:8e:e3:
cc:23:94:0b:2f:36:e6:46:40:cf:1c:18:62:ab:50:
4a:45:ea:ac:63:e6:98:ed:61:27:eb:7b:89:de:ba:
7c:12:f1:22:b0:6a:de:cc:3c:9e:63:67:fc:00:3b:
ea:ea:dc:de:5a:32:46:ba:e2:44:4e:a7:87:d6:4e:
c6:b0:dc:06:70:90:21:15:39:56:d4:1c:b0:a2:7d:
e1:7e:5c:a1:67:b5:a8:99:45:8f:2f:c1:75:d0:b3:
d4:55:81:9b:90:17:56:e8:66:70:a2:2f:54:60:30:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:5C:06:B1:AB:02:15:A6:31:8D:DF:86:67:E3:65:03:45:95:9E
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/GfdcBrGrAhWmMY3fhmfjZQNFlZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:86:7d:e2:18:6b:3f:b0:16:fa:9c:df:a2:ad:e7:08:95:7f:
6a:ac:06:34:97:b8:97:ca:a5:ca:d8:4d:53:f7:6f:f3:e2:15:
c2:3c:13:50:71:72:f9:78:cd:50:7f:ae:f2:fb:43:b0:7d:d0:
2a:54:1e:9f:85:c1:56:90:0e:72:a0:b0:8c:35:a5:44:3d:7e:
4a:79:c3:4f:74:04:11:cd:dd:e5:2e:49:4b:6b:b8:2e:66:bd:
1c:8a:a6:96:41:d3:5d:e9:25:8b:42:85:89:0c:a4:82:57:0c:
45:3f:7c:e7:4b:75:4a:3b:c8:33:49:cd:e9:ab:06:4c:10:66:
0e:46:fb:3b:a4:09:2f:e1:be:1b:fc:61:53:fc:eb:8e:69:7d:
e7:89:e8:b7:1e:5b:1a:40:fd:1a:28:17:38:ff:ff:8f:cf:58:
d6:a9:7e:e9:74:18:da:56:8f:86:f2:2c:11:ae:b7:4c:5c:d2:
72:6f:ff:4c:9e:be:21:e6:50:ac:73:be:9b:de:ea:66:f2:86:
3e:4d:00:d4:9e:24:7d:04:0e:8d:1f:1d:6b:5a:19:d7:9b:96:
32:cf:95:1e:ed:0f:eb:75:12:e9:a7:be:e0:50:0c:65:fe:47:
5f:76:ce:70:bd:33:63:24:a1:8b:2f:b0:ea:4b:0d:f7:10:f6:
01:e7:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:39:38 2024 by rpki-client on console-ams.rpki-client.org