Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/GaV_nA6Nrxc9As3uCvj_dwflGWY.roa
File: GaV_nA6Nrxc9As3uCvj_dwflGWY.roa (raw, json)
Hash identifier: +qgqhOZ+KRrQbENVOaeCoUsFyoOHrR7a4XDKSNv8XFg=
Subject key identifier: 19:A5:7F:9C:0E:8D:AF:17:3D:02:CD:EE:0A:F8:FF:77:07:E5:19:66
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 018CC64B5B727DC70D37A081159DCF064C52
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/GaV_nA6Nrxc9As3uCvj_dwflGWY.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 185.142.41.0/24 maxlen: 24
185.142.42.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
185.142.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5b:72:7d:c7:0d:37:a0:81:15:9d:cf:06:4c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19a57f9c0e8daf173d02cdee0af8ff7707e51966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:0b:ac:11:f8:a1:ba:c2:d4:d7:9c:7a:b7:
e7:91:1f:e1:e8:22:3e:cf:27:e6:fb:fd:08:c9:0e:
0f:76:5a:64:0a:c6:69:19:cc:2f:73:41:c6:43:8d:
7f:0a:0f:39:80:84:94:82:47:dc:20:85:48:81:a6:
10:93:08:a8:7d:5f:a9:00:fc:b9:d7:c9:c8:af:72:
82:14:47:15:a8:8e:da:a5:4d:33:ea:8a:89:4a:d7:
31:f8:d0:48:32:ee:aa:d5:1f:38:7b:ff:57:bb:d5:
a3:84:92:43:2f:02:56:ca:1f:7f:22:af:bd:41:03:
93:1c:37:ca:81:51:34:1b:70:ca:d8:a5:7c:58:af:
0a:6f:68:34:77:82:cc:47:65:ba:a5:2b:0d:72:00:
21:37:21:d2:66:4e:19:03:5e:f0:22:a9:82:f3:9b:
6c:c0:4b:2b:f4:c3:47:53:5d:1c:4b:ae:45:48:16:
0d:a5:21:0c:e4:3a:09:f7:d5:b6:29:a9:4f:ca:29:
71:e2:c5:c4:4c:fb:ee:61:69:a8:27:a5:53:86:e3:
9f:94:92:ac:0e:fb:e5:85:1b:fa:52:86:e1:8e:42:
7a:14:7c:ba:69:2e:08:22:1e:f4:3e:da:0b:41:8f:
84:55:92:f4:28:85:5d:84:fe:e6:72:f5:9b:dd:85:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:7F:9C:0E:8D:AF:17:3D:02:CD:EE:0A:F8:FF:77:07:E5:19:66
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/GaV_nA6Nrxc9As3uCvj_dwflGWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
31:e4:22:72:e5:0d:37:7e:52:4e:74:ee:3c:9f:22:91:7f:e3:
91:53:4e:d1:88:a1:c8:28:a5:6b:4f:14:9a:ad:6e:7a:ea:19:
81:f9:c9:eb:4a:92:8a:64:17:8d:b8:3b:cc:09:e3:02:f2:1b:
d9:66:62:e2:3b:86:44:d0:c1:9f:3f:dc:09:01:71:30:95:36:
1b:e0:b8:8e:d9:cf:2b:3d:e5:c2:51:8a:83:ce:64:81:20:5d:
a9:08:e7:0f:e9:a9:f7:15:6c:25:d6:1c:11:42:09:ea:2e:01:
8a:69:22:23:c0:35:6a:5a:b9:a5:38:5c:d5:7e:bd:90:77:ef:
50:3f:fc:76:d3:a1:78:f6:ee:f9:0c:6a:24:55:ff:54:7e:a6:
7e:f0:c9:28:3e:98:0d:b4:02:f9:3b:1f:98:9c:24:3d:04:66:
a9:ca:9f:6d:02:9f:e1:fb:60:cc:f3:01:aa:24:36:48:1b:d0:
f9:e9:4a:68:8b:86:e4:5e:26:e4:40:4b:c6:b2:c5:6a:c5:56:
69:ca:34:c8:26:24:f3:f9:ff:bd:21:7e:83:ca:d5:fe:09:bd:
a7:bc:27:e1:26:24:e9:c9:60:4d:27:20:65:91:cd:6b:2d:fe:
99:ff:77:82:7b:9a:d2:26:f0:3f:87:2b:16:25:da:1f:6b:5f:
ca:18:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 11:50:04 2024 by rpki-client on console-ams.rpki-client.org