Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GWCTyDUrbLXPQ1rzdMnFP6oe3no.roa
File: GWCTyDUrbLXPQ1rzdMnFP6oe3no.roa (raw, json)
Hash identifier: Qp98NeGkpaDm+WTMW77UKO+Do7CPHyh91Pwl9PpE+34=
Subject key identifier: 19:60:93:C8:35:2B:6C:B5:CF:43:5A:F3:74:C9:C5:3F:AA:1E:DE:7A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F13E31C844C2030960061D1BBFE0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GWCTyDUrbLXPQ1rzdMnFP6oe3no.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49515
IP address blocks: 194.68.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f1:3e:31:c8:44:c2:03:09:60:06:1d:1b:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=196093c8352b6cb5cf435af374c9c53faa1ede7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:cf:2b:11:37:87:31:77:c2:4a:5a:b1:c1:
03:56:84:b6:43:99:a8:90:67:98:16:a9:d5:07:8a:
48:8d:12:85:6d:0a:49:2f:bc:60:60:a9:31:13:8c:
bb:9f:6c:14:d2:f8:5b:1e:a6:99:bd:13:3d:fd:c6:
89:4e:e8:81:1f:42:5a:41:20:5a:72:9b:eb:f7:7f:
cd:8e:09:b7:17:49:45:8d:92:4e:e1:cc:4f:f2:f4:
2e:2e:0f:9d:39:df:c7:76:2b:e3:3e:65:1b:0f:35:
15:7f:3c:37:2d:73:5a:01:9e:4b:f2:71:a8:1e:45:
64:e1:c2:04:6b:fc:ae:7a:67:ce:7a:f6:d5:72:4d:
84:3c:aa:62:d9:4c:d8:88:ea:cf:e6:47:08:1a:b2:
80:a5:75:2e:73:cd:ce:09:7a:30:2d:f4:2a:6e:bc:
0c:4a:72:83:0b:c6:3c:8b:30:ed:cb:db:4b:ff:6b:
09:28:e9:3e:f3:e5:dd:07:7f:30:39:07:d8:9d:1c:
ac:28:49:21:eb:88:00:86:aa:17:ad:3d:d3:02:ca:
a3:a1:7a:d6:69:75:8b:37:fc:4f:1b:85:18:d1:1a:
b9:af:f1:12:fb:9d:67:e8:52:93:e5:59:ff:77:02:
b5:c5:b0:8e:30:88:59:b3:e4:cc:a7:b0:f9:b8:87:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:93:C8:35:2B:6C:B5:CF:43:5A:F3:74:C9:C5:3F:AA:1E:DE:7A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GWCTyDUrbLXPQ1rzdMnFP6oe3no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.231.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4f:ef:43:c8:79:3b:95:13:8a:65:a0:38:f2:42:b1:ce:6b:
10:62:bb:8d:84:ca:cd:d8:76:ba:19:80:82:d6:1c:19:97:d9:
67:9c:93:be:ce:a6:71:e5:39:75:fa:f7:86:26:8f:ee:0d:b0:
28:44:a0:d1:a9:18:d3:cb:5a:83:55:71:92:70:d0:d8:f2:b5:
e1:a3:35:5e:02:3c:92:46:0a:34:4d:66:a4:a4:92:6e:de:e2:
3c:42:e7:cd:49:f7:30:28:71:8a:f1:ae:da:40:c8:63:9f:57:
03:92:91:10:08:56:22:ea:ed:2d:05:22:a2:68:43:17:b4:ed:
0b:e4:31:80:9b:ad:ab:57:a7:a0:a0:b0:cd:b1:90:89:2e:fb:
d4:8a:b9:f1:5e:d7:e4:4c:cb:5d:e1:c5:38:5b:d6:de:0a:c6:
8d:1c:5e:2b:c3:dc:9b:73:ea:aa:8f:74:ba:c9:95:8b:0e:eb:
ed:03:e1:f0:c5:05:37:9f:a0:a0:99:8a:74:75:21:3e:53:b7:
04:8a:06:d6:b5:cd:f5:77:1b:71:40:ed:68:08:5e:5b:91:6d:
cd:e7:ed:d6:4e:24:9d:03:70:dc:d4:bc:8a:27:db:04:1f:8b:
ee:a7:ac:48:84:59:e1:cc:d3:29:dc:20:5a:84:9e:f6:7e:bc:
90:b5:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org