Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GQ0LAK9SKlpXz8UBdN0zTGzlUQk.roa
File: GQ0LAK9SKlpXz8UBdN0zTGzlUQk.roa (raw, json)
Hash identifier: /5jT80OFLy4R0Uuzi29hVIzm29LvaFKRsDtXG/S8/qE=
Subject key identifier: 19:0D:0B:00:AF:52:2A:5A:57:CF:C5:01:74:DD:33:4C:6C:E5:51:09
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01924D63096F79BC4C4D3D4864208FDE0A88
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GQ0LAK9SKlpXz8UBdN0zTGzlUQk.roa
Signing time: Wed 02 Oct 2024 13:19:48 +0000
ROA not before: Wed 02 Oct 2024 13:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51561
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:63:09:6f:79:bc:4c:4d:3d:48:64:20:8f:de:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 2 13:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=190d0b00af522a5a57cfc50174dd334c6ce55109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:e9:69:a9:72:92:f3:c2:9a:56:13:d0:22:
c6:2b:d7:07:7d:db:39:9f:ca:af:52:5d:6a:b6:d3:
cd:40:eb:10:39:49:50:77:c3:1c:07:2b:cf:c5:57:
cc:87:7b:5d:e8:27:82:b3:61:30:3d:60:ca:98:bb:
e2:ef:99:c8:9a:be:ca:cb:0e:1b:9b:e6:51:ad:a7:
95:1f:bb:5a:7b:ef:95:c9:5e:bb:ea:23:28:67:74:
b9:07:61:ff:ac:ec:0f:74:b5:bc:4e:aa:ba:3d:e2:
93:5d:ae:38:4d:17:21:ea:c1:78:db:e3:8e:cd:95:
96:80:29:10:e7:4e:ff:be:34:da:f1:3f:7a:0b:23:
0c:b6:c7:d7:95:f7:16:46:04:25:df:83:9c:b0:c5:
e7:24:44:4b:9d:7f:24:d1:7c:f1:a7:94:08:9d:2b:
d1:30:a4:e2:d5:73:79:de:74:40:a8:1b:5c:73:42:
a2:76:30:b6:f3:b8:f0:24:e2:d7:65:1c:a9:8b:a1:
68:d2:d7:b4:9e:2a:84:59:53:f4:99:a0:d7:0e:2b:
b8:2c:c6:27:bb:6e:cf:df:71:67:f3:99:4a:06:c4:
1e:57:26:bb:20:eb:2e:14:f7:92:ba:62:1b:51:ed:
0e:23:1d:2f:a6:d2:f2:76:dc:73:58:2d:80:d9:71:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:0B:00:AF:52:2A:5A:57:CF:C5:01:74:DD:33:4C:6C:E5:51:09
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GQ0LAK9SKlpXz8UBdN0zTGzlUQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a2:31:0f:85:58:df:af:e4:18:30:2e:4c:a7:72:f3:0e:aa:
f6:d6:3f:4b:a3:99:ea:2b:14:cb:c9:a6:67:c6:87:65:79:34:
7d:09:7d:09:30:ae:27:e5:f0:75:ba:85:46:6f:bb:04:d3:5e:
d2:5c:1b:27:a3:2c:9b:9e:57:6b:6b:cf:94:66:71:48:71:ca:
d5:22:4a:de:ac:04:38:76:ad:25:38:32:76:e7:d2:19:b2:af:
52:fa:b6:cd:af:9c:84:8a:4a:fe:4a:d8:8b:7a:7f:d0:75:f4:
27:df:25:60:ea:5f:ae:eb:de:8c:9c:87:c9:cb:19:86:91:ae:
8d:ce:d9:f6:c2:c4:4a:c1:79:68:d3:e7:0c:13:08:a8:9a:93:
94:a6:8e:19:8d:55:bb:c9:5a:9e:17:ae:c0:31:19:94:2f:28:
67:98:f3:11:14:54:16:ff:d6:05:9c:e4:23:8b:9a:e6:f6:1e:
06:13:7f:47:82:30:e4:9b:a0:0a:6c:af:d8:94:71:46:e4:1c:
4b:13:99:a8:76:5f:cb:10:53:be:7e:ea:08:5f:2f:90:44:40:
bd:3a:83:e4:57:1f:9c:32:47:3c:81:f5:3b:d9:de:a4:54:e5:
f8:f2:f4:c1:be:12:ae:2c:d8:68:85:d5:71:e0:f3:21:fc:5c:
e9:a3:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:25 2024 by rpki-client on console-fra.rpki-client.org