Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghppE1ycA98IeOwZgk5fqbLfS48.roa
File: ghppE1ycA98IeOwZgk5fqbLfS48.roa (raw, json)
Hash identifier: xF0RQ75vAZ80bszGrCjRB3II4xF0lNpMemvk4HGdtOU=
Subject key identifier: 82:1A:69:13:5C:9C:03:DF:08:78:EC:19:82:4E:5F:A9:B2:DF:4B:8F
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018CC424BC64247EDBB4E8D46E35AC0ED584
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghppE1ycA98IeOwZgk5fqbLfS48.roa
Signing time: Mon 01 Jan 2024 08:29:51 +0000
ROA not before: Mon 01 Jan 2024 08:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.236.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:bc:64:24:7e:db:b4:e8:d4:6e:35:ac:0e:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 08:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=821a69135c9c03df0878ec19824e5fa9b2df4b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:35:01:9c:2b:70:7c:30:4d:11:1e:11:18:
1b:b4:36:e4:36:31:84:b0:27:67:6c:65:24:69:29:
8d:77:a9:2b:3f:c1:de:60:55:71:d8:1d:82:01:c5:
49:1e:ca:5f:9d:c1:31:91:47:99:78:81:9d:42:d7:
1c:a4:cd:e4:c9:cf:c9:d1:68:dd:69:1e:8c:e9:54:
e5:04:0d:2c:7b:f8:f8:32:bf:96:1b:f0:33:84:aa:
03:17:08:d4:a6:e3:34:87:b7:e9:08:36:85:4a:a0:
70:6d:61:7e:17:dd:90:73:55:2a:c5:ab:d7:57:6a:
c9:2d:d2:d9:72:ac:e8:70:85:70:0f:6c:37:b5:78:
3d:54:2f:cd:9d:4f:40:8d:9a:52:35:59:37:02:a3:
bc:e8:52:9e:02:bd:43:40:65:78:8c:0c:f7:0d:34:
2f:35:50:9b:bf:c1:b6:22:7c:62:85:f2:5e:df:06:
38:2d:6b:fc:54:df:f7:17:8a:c9:ff:4b:b9:a7:00:
f3:45:f5:33:d3:f5:4a:8b:e3:a3:61:fd:0c:af:0f:
54:62:0b:9d:c6:d3:e1:0b:3f:ad:6f:22:cb:b1:39:
16:0c:9a:56:5f:5b:0b:6b:7c:c7:58:61:80:65:04:
d0:f0:1d:1a:cd:17:87:3d:85:29:39:1b:f5:86:21:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:69:13:5C:9C:03:DF:08:78:EC:19:82:4E:5F:A9:B2:DF:4B:8F
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghppE1ycA98IeOwZgk5fqbLfS48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:92:5f:8c:2c:c6:8d:71:83:5f:f9:78:b5:38:17:40:4c:7b:
c6:3f:d4:b8:00:9a:32:46:65:d2:03:59:e9:df:95:0d:a1:d8:
b5:42:ec:83:cc:6f:59:af:c0:5c:e2:77:ff:6e:5e:bc:56:0b:
a2:06:ce:4a:d7:37:6a:23:88:77:f4:73:8e:64:bd:72:45:fa:
24:b4:9e:cb:17:ca:39:0f:3b:61:12:0a:06:26:ce:07:4c:ca:
a4:85:c2:1d:91:7e:5f:33:c2:c8:fb:c9:05:39:df:3d:01:49:
1e:77:e7:64:59:7d:6e:23:e8:1d:3c:c4:f3:94:16:62:1b:b1:
3e:ad:2f:cc:ca:56:c7:b6:95:96:01:05:29:ee:1d:fe:ff:2e:
f0:0b:92:9d:9a:c7:b6:ac:b4:af:62:6b:a9:c9:9f:78:e5:ca:
d0:4f:df:91:49:16:10:f0:41:58:66:94:6c:94:cb:1d:c6:72:
6f:9c:d5:40:8d:fe:07:4d:d8:1c:8f:be:03:0d:19:f8:9a:40:
e7:10:90:a9:56:5a:cb:03:a9:62:ff:5b:79:48:7d:2a:d1:0d:
36:7a:35:a0:31:bb:d8:b3:24:14:1f:03:c9:a8:5f:c1:23:d6:
e1:3f:31:c4:db:b9:93:3d:34:30:68:68:37:bb:71:96:53:f3:
eb:e2:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:04 2024 by rpki-client on console-ams.rpki-client.org