Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GbLDrHUJut0XJ6eVu8YGOCH9xgQ.roa
File: GbLDrHUJut0XJ6eVu8YGOCH9xgQ.roa (raw, json)
Hash identifier: 2HNGamPXeOyRCmzRIv7Eekeh5K7Bcxi0diLJat9fcbA=
Subject key identifier: 19:B2:C3:AC:75:09:BA:DD:17:27:A7:95:BB:C6:06:38:21:FD:C6:04
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DECC7683BD0C9AEF58EA42C179ADF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GbLDrHUJut0XJ6eVu8YGOCH9xgQ.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59530
IP address blocks: 5.8.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ec:c7:68:3b:d0:c9:ae:f5:8e:a4:2c:17:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b2c3ac7509badd1727a795bbc6063821fdc604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:01:82:b7:03:5e:96:c8:9d:64:be:af:bd:
2b:cf:e0:f2:81:f5:dd:2c:c4:06:bc:3c:fb:67:ab:
20:cd:56:17:e0:85:c7:33:90:c8:2e:20:7f:4e:f3:
fe:d6:eb:64:22:e3:1f:d6:2d:93:d1:3a:7d:c7:d0:
9c:e2:14:4c:87:09:96:09:7b:cb:21:13:83:0c:e1:
c4:cd:6e:42:90:3f:da:75:6f:ce:5d:59:67:c1:b4:
88:2e:79:89:5b:64:6f:c6:69:fb:54:48:0a:be:25:
4a:4e:62:95:cc:a0:33:df:1e:c0:f3:d6:6d:33:d5:
fc:2f:e9:92:9d:dc:f3:ae:d5:3e:6d:24:ec:00:40:
ac:2b:b0:fc:56:67:28:8d:57:7a:73:ab:61:aa:2f:
61:80:e7:2a:21:54:57:d0:96:88:f1:5f:15:01:6d:
cc:d8:80:25:c2:17:49:4f:c9:b5:71:e0:53:5f:7f:
ef:a1:7a:3d:b0:71:49:9b:12:5c:b2:bf:2e:7f:97:
22:18:a0:e2:99:1f:69:55:82:4d:0d:b8:26:23:64:
69:5a:ba:16:1d:77:89:ec:3d:a3:e9:38:cb:86:00:
87:c6:2d:a5:4f:37:79:da:8f:e1:3d:b9:94:2e:78:
16:77:e9:69:72:49:44:7c:fd:19:de:5b:06:5b:41:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:C3:AC:75:09:BA:DD:17:27:A7:95:BB:C6:06:38:21:FD:C6:04
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GbLDrHUJut0XJ6eVu8YGOCH9xgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.182.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d3:0a:1f:de:4a:16:99:01:da:85:77:87:b2:66:47:26:cc:
a0:8a:e8:29:2c:a4:70:cc:04:75:b4:19:27:81:0e:1d:ab:31:
25:33:64:13:9f:65:67:e9:d0:a5:33:7b:13:d3:e1:76:ee:29:
d4:2d:5e:ce:37:cd:bd:49:34:76:1e:61:63:49:ac:8d:29:c3:
3e:f4:ca:87:10:df:7c:db:5b:44:f2:c1:67:7c:11:d2:00:22:
d1:7b:d5:5a:00:7b:16:31:9a:15:1b:d1:aa:db:c7:5e:95:a6:
ef:85:15:8e:6f:8e:52:f2:8a:15:8e:a8:31:30:b6:28:d5:0f:
ee:74:a0:ba:37:11:67:be:b3:f0:c2:04:01:ff:20:95:92:da:
db:08:91:09:03:15:37:27:da:5c:20:87:19:ad:54:73:26:c8:
fb:43:28:12:de:0e:9a:50:ee:0e:84:8f:86:c0:b8:6e:db:eb:
17:ec:4d:1f:ea:be:ab:53:97:9f:bf:dc:f2:fc:05:42:3d:f1:
6f:db:27:1c:be:ab:57:f9:0f:87:94:0a:72:f5:84:f8:79:70:
7f:bd:30:28:6b:3e:47:3a:34:d5:f8:17:60:68:c5:27:8c:68:
2b:c7:9f:64:4c:03:fc:cc:e8:3e:71:61:5d:e9:1b:67:1b:6e:
2e:d3:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:51:25 2024 by rpki-client on console-fra.rpki-client.org