Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gu9LLvwllP_j_UsXFILJMvorni8.roa
File: gu9LLvwllP_j_UsXFILJMvorni8.roa (raw, json)
Hash identifier: CGDUMK26rKcPvg9TmRREjtPPJYrcDOmmawsfaTcQt9o=
Subject key identifier: 82:EF:4B:2E:FC:25:94:FF:E3:FD:4B:17:14:82:C9:32:FA:2B:9E:2F
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 018CC94E1E227E7195A105609368EB3C434F
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gu9LLvwllP_j_UsXFILJMvorni8.roa
Signing time: Tue 02 Jan 2024 08:33:09 +0000
ROA not before: Tue 02 Jan 2024 08:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.48.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1e:22:7e:71:95:a1:05:60:93:68:eb:3c:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Jan 2 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82ef4b2efc2594ffe3fd4b171482c932fa2b9e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:d1:be:ac:dc:1b:d9:85:5b:df:27:59:c3:
78:09:25:29:a8:0f:34:f7:9b:eb:92:df:81:0a:cd:
c4:6f:38:b2:31:02:df:f6:5e:d4:6a:91:9b:ab:aa:
0c:80:8e:eb:86:6d:c6:a0:6e:6f:6b:47:0f:7e:7d:
b6:4e:48:3e:c1:0e:fd:3b:49:7b:41:6c:dc:84:1d:
7f:76:3c:a7:17:9a:22:3e:3e:bd:1f:f4:ad:a5:b8:
fe:67:da:aa:f8:ac:69:27:74:8b:60:d5:99:f1:39:
93:aa:81:0d:28:34:dc:42:74:eb:c9:e0:aa:ca:f3:
2e:f5:03:93:a5:1a:17:43:b7:01:e0:30:cb:08:10:
17:b6:45:e5:1c:b7:f5:67:37:c1:6e:9e:56:46:c1:
d3:59:96:3e:81:ae:9e:46:d4:2b:8c:50:51:62:12:
19:79:f9:ac:c1:82:a6:43:20:e6:01:fa:4c:97:07:
1f:cd:4c:a1:cc:b2:77:a7:7f:6d:07:7c:68:3c:82:
4f:c3:ab:43:4b:3b:72:25:c8:cd:02:86:45:34:5a:
92:53:81:f0:45:29:27:18:65:2b:4a:a4:e2:6d:24:
0d:7a:68:73:c8:3c:5c:1e:37:f5:cb:c3:a8:b6:44:
66:1a:aa:c8:61:09:24:5c:78:bd:38:23:ee:93:cd:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:4B:2E:FC:25:94:FF:E3:FD:4B:17:14:82:C9:32:FA:2B:9E:2F
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gu9LLvwllP_j_UsXFILJMvorni8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ed:f1:2d:d3:4c:1e:c7:34:d4:8f:74:81:ae:cb:65:e3:51:
26:69:fd:99:10:3c:91:be:a5:5b:c7:db:49:6a:26:0d:67:ad:
c7:48:ff:fe:1b:2b:d7:a0:5b:c7:e2:78:b1:04:61:37:ea:d1:
44:62:78:0e:5b:fc:0e:2f:dd:43:fd:40:b1:0c:b3:1d:fa:2f:
93:09:87:9a:50:1d:1f:58:64:ca:a3:16:b3:0e:6d:cd:bd:3e:
e1:6f:e8:c2:15:d7:a2:f3:fe:ee:66:30:03:39:24:da:41:04:
c7:d7:f7:1f:0d:9b:df:ad:d8:7b:af:4f:17:07:1d:f3:36:75:
2e:83:af:f3:4d:bb:b0:41:00:9d:a0:48:4a:12:8e:3a:1c:58:
b6:1e:98:da:6f:a6:d4:6f:8f:88:dc:b4:5a:61:33:8d:98:46:
1d:8b:01:94:5f:36:8d:dc:56:6f:0c:cf:73:af:b7:40:fa:fc:
f1:f3:76:97:20:75:f1:36:bf:34:8e:e0:9a:94:b9:3e:d6:f0:
e8:be:48:de:8f:d0:52:ff:ba:4c:0f:6a:38:ec:fa:e9:da:4c:
7c:88:66:03:27:8b:e5:5d:f0:d3:ac:b4:f8:e9:ef:08:73:a2:
b9:7f:11:20:6c:b2:7c:0a:ae:db:23:5c:4d:a8:da:d0:42:87:
90:ed:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:12 2024 by rpki-client on console-fra.rpki-client.org