Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/gsAaIYCOt51nCgFJmPiuTi2Yzao.roa
File: gsAaIYCOt51nCgFJmPiuTi2Yzao.roa (raw, json)
Hash identifier: KK+pjj1ZedySP95hE+fB3kFzYrjWFLUicQYSLk2TXS8=
Subject key identifier: 82:C0:1A:21:80:8E:B7:9D:67:0A:01:49:98:F8:AE:4E:2D:98:CD:AA
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 018CC5DCC09C8FBB4D143B067B823046513B
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/gsAaIYCOt51nCgFJmPiuTi2Yzao.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205376
IP address blocks: 194.121.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c0:9c:8f:bb:4d:14:3b:06:7b:82:30:46:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82c01a21808eb79d670a014998f8ae4e2d98cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:06:57:99:9b:78:cc:5b:bf:b7:ec:43:cb:
60:a3:3d:a0:91:f9:39:6b:35:9a:77:de:34:a9:70:
46:97:1f:6e:b9:9f:b4:ac:6d:2c:33:37:49:d3:b1:
ad:12:8e:89:97:f0:d0:cd:ac:08:3a:6c:8e:5f:43:
a9:9e:cb:fa:40:c1:34:40:b6:a0:56:e7:09:37:20:
59:2e:d3:d9:35:66:f7:cf:ce:d0:b2:d1:cb:57:09:
29:92:9f:5b:63:a8:5d:51:75:00:e0:92:c2:4a:d4:
cb:29:f0:ea:e0:f8:b7:af:4e:7d:47:45:8c:da:54:
fb:21:49:6d:91:4c:d6:66:48:10:d9:8e:40:a0:35:
b3:8a:b7:e5:21:34:b3:d4:9f:3b:03:6d:5e:45:07:
96:27:35:10:7f:fe:d4:ea:a7:72:49:e8:9d:08:5f:
4a:bf:65:a9:48:1a:9e:7c:6d:ab:1d:d8:63:41:5e:
33:92:b9:1a:99:37:51:23:cb:c5:3e:c0:0a:95:f1:
38:2f:22:76:22:5c:40:b3:60:49:fd:36:b8:35:c6:
5b:8b:8c:31:3e:49:b3:3e:20:93:93:7b:28:62:a4:
f4:7e:e5:46:02:dc:28:98:79:49:65:ad:57:89:08:
0c:7f:77:fb:0f:02:e1:07:d4:1c:a1:77:b6:aa:2b:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:1A:21:80:8E:B7:9D:67:0A:01:49:98:F8:AE:4E:2D:98:CD:AA
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/gsAaIYCOt51nCgFJmPiuTi2Yzao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.26.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:d4:77:e8:29:87:39:45:8d:24:eb:dd:aa:5c:54:12:08:
e4:05:12:8d:a4:7d:29:64:fa:71:b9:38:6f:ae:d2:5c:02:1f:
62:0a:7a:ab:2d:7d:f1:1a:cf:fd:5c:71:36:2d:df:c6:d4:49:
fe:42:2d:20:42:fd:36:6e:40:3b:13:d3:7b:5b:dc:ee:09:92:
75:f4:83:4f:9f:a6:80:2b:dd:72:59:9a:d0:b8:e7:72:00:c6:
27:b8:a3:5b:fd:a7:4e:c7:b4:e4:5e:77:9c:47:59:27:40:c6:
35:cc:ae:94:14:ca:77:38:10:a6:22:08:e9:29:a0:d3:47:e1:
79:c6:db:26:ab:0f:71:41:ed:06:02:56:a2:32:16:9e:78:9b:
83:b4:98:a4:f3:f4:9e:da:4f:0c:1d:66:be:13:c8:fb:53:50:
17:df:fc:2e:76:1f:f4:37:3d:da:24:2a:a3:b2:09:41:94:1b:
1d:2c:1a:36:58:61:55:bc:c3:ce:ff:51:82:81:34:d7:f1:e1:
12:d0:6f:65:3d:49:10:a5:29:16:75:bf:93:56:bf:ae:cf:c5:
2a:59:aa:23:7b:4a:58:68:2c:72:9c:64:48:82:00:53:1c:1e:
13:d9:7a:a6:95:0a:e1:13:15:5c:e4:c2:e9:dc:72:c1:29:16:
13:09:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:49:13 2024 by rpki-client on console-fra.rpki-client.org