Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gGc25LIV4TxdGXl6EsmFUpC9Ruk.roa
File: gGc25LIV4TxdGXl6EsmFUpC9Ruk.roa (raw, json)
Hash identifier: l9IsqG+1VXrC1utqyflJiotSJDDXXRtHeNUkEFpM47I=
Subject key identifier: 80:67:36:E4:B2:15:E1:3C:5D:19:79:7A:12:C9:85:52:90:BD:46:E9
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC500932C9C9100F014D6169FC1FCB761
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gGc25LIV4TxdGXl6EsmFUpC9Ruk.roa
Signing time: Mon 01 Jan 2024 12:29:58 +0000
ROA not before: Mon 01 Jan 2024 12:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212183
IP address blocks: 185.79.3.0/24 maxlen: 24
185.79.2.0/24 maxlen: 24
185.79.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:93:2c:9c:91:00:f0:14:d6:16:9f:c1:fc:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=806736e4b215e13c5d19797a12c9855290bd46e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:73:1d:ad:24:4e:da:92:4b:c1:e9:3e:07:
58:34:c9:a6:d7:a1:95:a2:67:9e:50:26:51:02:12:
f8:e2:75:ff:68:fd:7d:d5:ca:61:b2:6b:40:d0:b0:
19:1e:d4:19:fe:b9:c2:30:8a:0e:c1:78:fb:21:79:
a3:91:f0:f0:0a:a3:d6:94:e8:bf:47:70:c2:31:ea:
ab:45:7e:91:82:bd:3c:80:eb:f6:0a:44:92:07:70:
ea:9e:b9:22:75:91:e4:f5:64:6f:d7:e9:55:60:38:
59:7e:c5:04:8c:01:1a:37:16:8f:ba:b6:5c:d4:67:
8e:be:6f:23:5e:8a:fe:fd:9f:cf:2c:a4:87:57:85:
c6:e6:85:66:bf:f2:aa:e1:9b:85:d0:1f:56:77:10:
72:1f:ae:8e:d5:5a:c4:40:82:0d:bd:18:22:ea:ee:
6d:b0:4b:fd:66:74:a4:df:ae:24:70:d6:61:74:fb:
59:33:1e:a5:b7:f7:e2:72:c5:00:9b:36:15:0c:dc:
90:aa:fb:f5:7c:b9:3f:69:8a:8e:39:14:37:cf:ff:
91:e3:12:a2:b6:cd:89:86:9f:eb:01:2c:25:8a:82:
f9:99:36:30:dd:ac:0e:04:be:0b:ee:23:5e:09:28:
8b:95:2b:aa:51:e8:2f:55:1b:78:14:de:e0:a6:a8:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:36:E4:B2:15:E1:3C:5D:19:79:7A:12:C9:85:52:90:BD:46:E9
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gGc25LIV4TxdGXl6EsmFUpC9Ruk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:80:fe:6e:82:3c:11:58:0c:23:6e:c9:71:49:44:4a:10:55:
92:b4:1c:f4:99:e8:d0:0a:95:73:c4:8b:73:a6:77:01:a4:8c:
e5:f9:81:77:32:5e:88:37:b7:fb:40:ca:84:69:f0:df:bc:de:
35:a9:c9:cb:b9:42:f6:3a:75:76:97:e9:6e:b5:b4:60:86:d4:
fc:06:4a:c4:9b:bb:fc:85:58:5b:c7:65:0d:3e:f7:82:d5:ef:
ff:74:39:62:f1:20:1a:0d:ae:9e:a6:ae:a6:d3:dd:bb:c0:6b:
9c:80:7c:0a:c0:87:9b:0a:40:2c:61:5b:70:43:05:4c:e1:ea:
e7:20:5f:0b:8c:61:00:0b:e0:24:fc:61:c2:7e:f7:1e:6f:43:
62:d1:5a:2c:f1:3d:81:fb:f9:57:93:6d:d2:4f:0c:46:79:f0:
52:0e:08:bd:80:5e:1c:45:30:c9:dd:6f:77:24:39:73:99:c5:
bb:d5:60:28:f3:55:1f:f1:12:66:35:35:9c:78:85:c0:7f:26:
ec:81:72:51:0b:51:0d:38:8d:03:7a:af:73:ee:02:b5:50:8e:
04:e6:a2:a1:ad:a9:4b:99:46:ad:3b:38:1b:03:34:81:ba:45:
ff:86:ce:f5:f8:85:dc:c8:a7:81:90:ac:18:9f:13:c6:a0:2c:
66:08:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:32 2024 by rpki-client on console-ams.rpki-client.org