Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCLgFqoTcQ802wZnSDTURAeovpw.roa
File: GCLgFqoTcQ802wZnSDTURAeovpw.roa (raw, json)
Hash identifier: SBGZh5wVAPwbiYYdurTn2HT2C+lZ+iAY0CkVMSPQ49o=
Subject key identifier: 18:22:E0:16:AA:13:71:0F:34:DB:06:67:48:34:D4:44:07:A8:BE:9C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6C45739C81EE8227CEC278C6B8218
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCLgFqoTcQ802wZnSDTURAeovpw.roa
Signing time: Mon 01 Jan 2024 06:29:44 +0000
ROA not before: Mon 01 Jan 2024 06:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400529
IP address blocks: 88.209.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c4:57:39:c8:1e:e8:22:7c:ec:27:8c:6b:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1822e016aa13710f34db06674834d44407a8be9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:f2:c6:ac:d4:3b:34:a9:2d:64:5e:1e:f6:
d2:94:b4:f2:a7:a2:71:53:41:00:53:2a:dc:6e:be:
21:43:5b:85:b9:c6:25:8c:0e:8d:6f:db:9c:b0:38:
ce:a9:df:70:8a:79:18:55:5b:10:22:46:6f:ee:00:
31:81:05:a2:94:47:85:28:fd:ff:8c:7b:db:17:7d:
4c:37:2b:76:c9:77:ff:64:2b:ec:6f:5e:3c:c7:c7:
d5:40:c0:5c:58:28:a5:75:94:16:73:8a:dd:c0:aa:
15:56:59:8e:4d:32:2e:fa:b7:be:fd:05:18:20:c0:
94:e2:68:df:4c:e8:ad:e5:97:a8:e3:4e:aa:0b:29:
5b:55:90:31:22:0e:a2:64:75:65:68:5e:74:a6:14:
22:e6:45:2b:92:8d:2b:1e:f3:c5:1f:87:15:cc:31:
9f:10:82:5c:27:26:a4:77:b1:86:bd:94:0d:f6:99:
b2:15:14:7c:8d:d5:63:45:6d:02:f9:b1:5a:e8:aa:
c5:2f:f9:44:4a:13:e6:9e:d9:14:ae:74:15:87:f2:
c2:80:cc:29:14:1e:7c:e4:64:44:72:22:d1:bf:8a:
a2:62:88:5f:ed:e3:80:e2:1e:50:9d:aa:26:3c:71:
a6:10:00:93:1e:49:e4:fa:ea:6e:59:93:77:2a:56:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:E0:16:AA:13:71:0F:34:DB:06:67:48:34:D4:44:07:A8:BE:9C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/GCLgFqoTcQ802wZnSDTURAeovpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.197.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3d:1d:bc:78:bd:31:87:3b:54:25:6a:a2:16:45:c3:f3:4a:
8a:d5:91:d6:bf:7f:f8:cd:dd:ab:e2:ad:34:ba:fd:fd:c4:fe:
08:0e:75:28:2f:4c:64:96:ce:ec:cf:22:0e:67:79:26:79:9b:
c3:2a:e4:d4:ac:da:00:67:29:b6:6c:af:b4:52:07:9a:5a:73:
ab:30:fa:cd:dc:f9:ad:39:f7:0c:85:09:ab:d3:d2:fd:8c:59:
58:dd:24:5a:06:b1:b6:dd:e9:6a:da:33:8f:02:c5:8a:26:8d:
75:46:41:49:24:2c:46:57:1e:49:2c:da:be:c0:44:1b:3a:ca:
11:d4:12:d0:34:12:6e:22:aa:48:c4:e5:0e:a7:ac:f8:85:fd:
a1:b9:ac:56:64:28:ce:21:0f:05:cc:bb:41:2f:61:54:97:8d:
a4:a8:b5:55:f3:08:4b:58:c0:28:d0:3f:d8:17:a3:48:3f:15:
9f:42:3f:2e:5b:1b:1f:da:4b:3d:30:c1:28:34:55:5f:c1:67:
a3:99:e0:a8:1d:eb:65:45:56:0e:08:64:5b:e2:0f:8f:78:7d:
94:fe:af:63:f9:01:f0:b7:35:27:dd:09:69:5b:2f:37:0f:96:
ac:f3:f2:3f:dd:70:a0:45:f4:1f:4f:08:45:f9:15:b3:7f:3a:
c8:45:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:59 2024 by rpki-client on console-fra.rpki-client.org