Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GOMpy66WDm6mUpp2L54cJb_WxOI.roa
File: GOMpy66WDm6mUpp2L54cJb_WxOI.roa (raw, json)
Hash identifier: HgTcArtvE5zogGLESSx7y6UbeHkBcx9x0yEPd77gVnM=
Subject key identifier: 18:E3:29:CB:AE:96:0E:6E:A6:52:9A:76:2F:9E:1C:25:BF:D6:C4:E2
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F28DC007EEE059EDA228A4E7E20A
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GOMpy66WDm6mUpp2L54cJb_WxOI.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8253
IP address blocks: 83.212.128.0/19 maxlen: 19
83.212.160.0/21 maxlen: 21
2001:648:2e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f2:8d:c0:07:ee:e0:59:ed:a2:28:a4:e7:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18e329cbae960e6ea6529a762f9e1c25bfd6c4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:6d:84:3d:3b:79:96:72:93:30:ee:50:5c:
e3:a3:9e:ea:6b:39:1a:9a:b3:f1:5b:87:53:19:50:
91:8f:1b:cd:30:99:82:8d:3e:0c:58:93:a8:a4:59:
a4:e1:75:61:b8:c2:39:2a:08:1f:86:62:71:b8:b6:
83:28:88:27:3b:d8:32:5b:89:63:8f:bb:38:b8:c2:
61:b0:c7:8f:7a:ff:e7:5a:d6:d1:cd:4d:ed:9a:47:
6b:94:72:d6:18:38:19:36:6e:1e:a9:9d:a0:ef:96:
eb:ec:a5:9b:6e:22:39:e9:1f:24:f7:12:d8:0f:b6:
26:3e:75:38:d3:01:0c:97:69:25:14:7c:64:a8:31:
f9:4d:c8:9a:06:96:44:98:c5:77:95:99:36:41:e1:
69:9f:35:0c:e9:89:4a:de:ba:58:19:30:1f:c2:5e:
20:0c:b7:41:cc:7c:35:70:81:64:7e:32:3d:45:3a:
8d:b8:cb:35:81:77:65:ba:88:c3:b4:50:60:88:43:
b0:bc:5a:bd:fc:a2:16:08:71:61:7a:0c:39:21:b4:
53:e6:0e:ed:5a:7d:56:02:06:f8:53:a7:b4:39:29:
19:0b:7e:22:ec:87:60:5e:a4:6b:c9:51:eb:27:e9:
21:20:00:68:7c:a7:83:3c:a1:85:4b:6a:4f:aa:56:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:29:CB:AE:96:0E:6E:A6:52:9A:76:2F:9E:1C:25:BF:D6:C4:E2
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GOMpy66WDm6mUpp2L54cJb_WxOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.128.0-83.212.167.255
IPv6:
2001:648:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
67:a6:65:e9:49:94:10:10:92:6b:cd:00:08:f0:ff:f9:84:9e:
7d:7b:17:53:b0:46:68:75:ca:22:ba:f8:ca:7f:4f:c5:39:58:
10:21:c6:a5:e1:cc:e7:ea:70:33:d9:fe:e6:86:72:15:c2:94:
3d:04:53:d6:42:6f:ce:b5:e5:8d:7e:7f:03:dd:db:06:94:89:
6b:a1:ae:6a:96:96:8f:7c:74:b2:65:bf:1d:46:ec:e3:f9:b9:
24:0c:c2:ff:7c:dd:7c:14:5c:6b:52:75:19:72:37:70:36:45:
a8:3a:78:88:74:a1:83:05:95:c3:74:4a:39:2c:05:c9:52:fa:
2a:89:c4:c2:7f:d1:eb:f6:64:9a:9e:8e:9a:b7:48:78:2c:de:
36:ab:93:16:53:5d:a1:96:22:30:1a:a5:4b:17:1e:c9:c7:cd:
0b:29:56:fc:8a:2f:fa:bf:58:4e:60:5e:06:f2:0d:56:5c:1c:
06:43:c1:7b:22:9d:c9:d7:27:e3:e5:2a:12:f4:86:08:5b:ce:
8c:67:15:0b:cb:66:4c:f4:b3:05:ae:d1:37:35:8d:49:fa:08:
5f:d0:27:eb:d0:88:1a:97:a2:2c:be:35:fe:83:5e:42:24:34:
cc:d1:26:da:6a:dc:c7:17:bc:13:de:78:49:54:94:01:12:35:
55:1b:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:33:26 2024 by rpki-client on console-fra.rpki-client.org