Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/GGTqg_Bc7ZbVI4Sq3vXpWtswsBA.roa
File: GGTqg_Bc7ZbVI4Sq3vXpWtswsBA.roa (raw, json)
Hash identifier: HAD0i3JQlSvkGwH4e5BcLv1CI9LBPfFm1xSUUsojag0=
Subject key identifier: 18:64:EA:83:F0:5C:ED:96:D5:23:84:AA:DE:F5:E9:5A:DB:30:B0:10
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 018CC793721FA4CC02C1D66DBA4FEEAF81A5
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/GGTqg_Bc7ZbVI4Sq3vXpWtswsBA.roa
Signing time: Tue 02 Jan 2024 00:29:38 +0000
ROA not before: Tue 02 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31069
IP address blocks: 193.30.246.0/24 maxlen: 24
193.30.246.0/23 maxlen: 24
193.30.247.0/24 maxlen: 24
194.187.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:72:1f:a4:cc:02:c1:d6:6d:ba:4f:ee:af:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Jan 2 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1864ea83f05ced96d52384aadef5e95adb30b010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:7a:1e:8f:25:ce:80:93:a6:6b:be:41:45:
c9:e0:f9:f1:8f:70:85:4f:ec:26:82:f6:b4:ae:16:
c6:49:46:b7:76:60:2b:6f:69:72:ff:65:1e:77:f3:
aa:4b:bf:d3:8c:1f:1b:1e:ce:5a:f5:2c:1b:ea:bf:
8c:a4:be:93:81:ba:9e:52:4e:40:23:69:8b:74:41:
d2:42:67:5d:96:47:19:7a:12:9e:3d:c8:41:59:23:
ba:34:17:21:29:62:b2:49:37:53:f7:12:15:9d:df:
c7:3a:aa:ab:36:b3:13:17:d0:3d:30:23:64:33:df:
fa:62:a1:d2:45:fc:29:11:29:ad:2d:c3:86:e9:f9:
76:c1:c4:00:61:91:fb:cf:55:32:27:e7:1c:db:bb:
a3:a2:97:50:e9:29:3f:a7:e6:cd:91:8a:e4:41:39:
33:8c:cf:4a:81:ad:a1:86:e5:8c:05:89:06:bc:c1:
70:ba:f9:a2:a6:45:79:3f:55:ee:c5:c7:62:56:50:
84:bd:21:5c:3f:b9:28:63:bb:82:e4:ff:6c:b3:26:
b4:bb:29:62:fe:8e:5e:51:a1:6d:75:66:d0:fa:2c:
69:5b:6d:74:54:86:37:ab:8b:aa:8e:ba:be:c3:6a:
9b:4d:db:86:e3:cf:94:94:68:48:8e:f7:08:68:58:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:EA:83:F0:5C:ED:96:D5:23:84:AA:DE:F5:E9:5A:DB:30:B0:10
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/GGTqg_Bc7ZbVI4Sq3vXpWtswsBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.246.0/23
194.187.28.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:15:e3:d8:79:eb:45:c6:e9:1f:14:80:f9:b2:6c:fe:76:
5f:d9:88:a6:c5:5e:36:f5:26:0f:21:69:3b:fa:d0:43:84:80:
7d:d6:8b:d7:a1:f2:aa:2e:90:71:eb:d2:b4:4e:de:20:85:7d:
6b:7a:2e:99:87:6b:48:fb:05:64:8c:5a:37:aa:00:66:6b:ad:
33:21:50:b9:93:c7:be:ed:dc:5f:79:ea:f3:1f:71:e9:5c:88:
68:93:ac:a0:82:fc:5a:33:d9:51:02:a5:6f:14:b4:37:a7:43:
0d:bb:8a:57:3c:d9:99:5d:c7:e0:f4:06:c8:1c:56:1d:ce:10:
6c:f0:da:e7:f6:b7:bf:30:9f:fc:1e:9e:25:fe:03:76:2b:fe:
0f:d0:d5:90:c9:ed:45:3d:c4:6c:13:72:e0:f1:12:77:51:23:
8e:67:ff:da:53:b8:85:1a:d5:f0:df:a6:c4:b9:58:fc:f5:57:
8a:64:b4:29:da:03:2d:45:74:df:78:01:97:74:82:57:c9:c6:
54:e6:42:23:6c:6d:03:bb:bc:74:9f:64:80:14:ac:2d:8e:b2:
e2:88:60:cc:54:9c:2d:08:73:1a:d7:36:ad:9a:4b:9d:79:37:
42:43:7f:2c:66:d7:43:63:a6:19:4b:58:c4:fa:3b:fd:84:04:
ed:44:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:34:39 2024 by rpki-client on console-ams.rpki-client.org