Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/GNlKaNc8XiZ-4Zl7KfevHiW7Kjs.roa
File: GNlKaNc8XiZ-4Zl7KfevHiW7Kjs.roa (raw, json)
Hash identifier: 6riM3llWY8mcnXyUTPrk8TCvIjRFSdfuYJsAysJ0B+c=
Subject key identifier: 18:D9:4A:68:D7:3C:5E:26:7E:E1:99:7B:29:F7:AF:1E:25:BB:2A:3B
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 018CC94E11D26A74A03D18FB2D0B7BE14BDF
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/GNlKaNc8XiZ-4Zl7KfevHiW7Kjs.roa
Signing time: Tue 02 Jan 2024 08:33:05 +0000
ROA not before: Tue 02 Jan 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61118
IP address blocks: 212.15.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:11:d2:6a:74:a0:3d:18:fb:2d:0b:7b:e1:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 2 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18d94a68d73c5e267ee1997b29f7af1e25bb2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:c5:30:d6:9e:c0:5e:a2:9a:d7:06:1b:28:
69:0d:3d:f7:28:9e:dc:59:d5:b9:7c:5e:e2:82:3c:
54:54:d9:73:d6:a3:af:7f:03:8c:22:78:75:51:1f:
26:4a:c1:47:ee:1e:89:c8:1e:84:87:a3:16:c9:a8:
87:76:28:45:41:cf:a7:bf:4a:b4:cf:f3:35:14:f0:
f8:71:38:68:a7:94:e1:ef:01:96:8d:88:3e:f4:39:
15:41:92:0a:e0:9c:11:1b:4b:f2:0b:75:66:27:4c:
43:a8:9c:c6:69:08:a7:e6:d9:28:fe:c8:6c:82:25:
bb:f4:cb:25:88:c3:b5:96:50:e1:d4:23:ba:ea:d1:
dd:10:5d:2e:a5:99:bf:b3:6d:9f:81:22:5c:80:2b:
53:cd:66:f1:ac:d2:ba:c8:b3:b1:bf:38:66:97:0d:
63:29:f1:ee:3f:2d:93:34:5f:5d:55:7e:e0:d2:0f:
bf:2b:2f:17:e3:7e:58:5e:e5:55:1c:d1:51:db:ee:
7c:4b:0e:3c:25:50:27:c4:8a:6e:71:48:89:2c:1d:
79:cc:47:37:65:90:5c:34:83:01:e2:b0:20:08:63:
4e:d3:01:f1:ad:5b:a4:26:0e:1d:2a:9a:e0:9a:f0:
32:47:4e:11:7b:87:d8:99:2e:7e:02:aa:0e:b9:30:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:4A:68:D7:3C:5E:26:7E:E1:99:7B:29:F7:AF:1E:25:BB:2A:3B
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/GNlKaNc8XiZ-4Zl7KfevHiW7Kjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fc:0f:3c:bd:48:d3:dd:c1:49:7d:69:bd:a2:e6:e6:53:1d:
e3:ad:da:22:3f:82:7f:4f:2b:e0:f5:16:64:b5:cd:69:81:cf:
32:bf:98:66:3d:06:f9:84:1d:de:5e:9c:6a:d4:ee:3f:8c:03:
44:db:d8:7d:36:18:bd:1d:e3:b2:ed:6b:4a:bf:5b:49:be:6d:
92:06:55:e1:37:4e:cb:0a:1d:fe:03:72:ce:f6:ff:33:2e:df:
de:9d:86:eb:f9:57:86:31:2d:a5:65:2b:17:76:e5:d6:78:35:
8c:db:e4:3e:fe:69:1e:88:d6:de:9e:54:83:43:08:5c:e4:ba:
f7:05:07:4b:19:fa:0a:c5:fa:87:8d:ea:62:52:24:ad:1e:5b:
12:20:16:52:14:d3:8d:61:c6:79:3f:bd:6a:e1:5b:b2:bd:2b:
c2:8a:47:c7:cd:b7:b2:ab:af:49:15:76:5f:73:1a:71:36:4a:
84:23:77:c5:0b:2f:df:4f:08:b2:f3:6e:5c:f2:92:69:e5:06:
ce:09:a9:83:68:a7:c7:d3:6c:29:16:f6:17:19:19:a2:85:30:
3d:fb:8e:2c:f5:d0:1a:b7:71:6a:c9:e1:ca:4e:ba:41:cb:83:
b8:52:e1:b6:55:2e:8a:cc:86:d9:3b:fd:75:f2:d9:e2:4c:fb:
ee:7c:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:10 2024 by rpki-client on console-fra.rpki-client.org