Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gxYrCKXgasE9s_0sudBh0OVyocs.roa
File: gxYrCKXgasE9s_0sudBh0OVyocs.roa (raw, json)
Hash identifier: fcDW0daoYwGjYvgw/eV9J7uLxy2kY1yV6f51Kdk1Kkk=
Subject key identifier: 83:16:2B:08:A5:E0:6A:C1:3D:B3:FD:2C:B9:D0:61:D0:E5:72:A1:CB
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019223546E294C0339D8CB38793CF404FDE9
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gxYrCKXgasE9s_0sudBh0OVyocs.roa
Signing time: Tue 24 Sep 2024 09:19:48 +0000
ROA not before: Tue 24 Sep 2024 09:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214180
IP address blocks: 93.92.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:54:6e:29:4c:03:39:d8:cb:38:79:3c:f4:04:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 24 09:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83162b08a5e06ac13db3fd2cb9d061d0e572a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:ce:84:51:18:3f:cb:60:44:09:2e:64:2d:
c5:d5:fc:be:55:71:1a:73:c8:88:f1:e7:ce:f0:cd:
c7:4c:a6:a5:c8:39:3c:01:cc:c7:e6:f6:f3:a8:c0:
e0:48:32:70:9f:f2:b1:ed:90:61:0b:60:43:10:81:
ea:20:0d:f5:9c:6f:54:a1:dc:ad:09:85:d5:0e:8e:
61:98:0b:bf:90:7d:45:cc:14:b5:ab:94:06:c0:31:
fa:bc:c7:b9:72:b7:d7:43:17:80:71:6d:2d:d8:cc:
aa:d6:38:8d:d6:f6:72:8b:03:c6:67:b0:8e:bd:0c:
ec:20:ee:59:35:21:a5:b4:be:13:82:9c:c8:bb:ae:
46:8a:97:2f:a3:dd:f6:fa:0a:1b:10:78:a9:18:f8:
48:a0:5a:13:2f:da:32:e7:14:9f:22:9e:c0:b2:27:
7e:f4:59:71:83:b0:00:10:3e:e6:9e:cd:29:2c:2d:
b8:f0:5f:ad:9b:74:cb:6d:18:6f:02:4f:d2:23:a4:
6d:78:52:57:4e:51:c7:76:5f:df:e5:a8:a8:d7:0e:
22:9b:fa:5c:ed:99:fa:fe:b0:cb:ca:ea:2f:7c:63:
e0:da:d0:d8:d6:1c:93:a6:02:15:ff:73:43:ba:b2:
dc:cc:ed:54:b5:67:f9:df:46:57:c1:68:ae:02:7f:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:2B:08:A5:E0:6A:C1:3D:B3:FD:2C:B9:D0:61:D0:E5:72:A1:CB
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gxYrCKXgasE9s_0sudBh0OVyocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d4:bc:e7:bf:cd:9d:ef:34:8d:e5:9c:31:9f:cd:e7:0f:4b:
46:09:18:aa:87:20:0f:f1:77:b2:92:94:0a:80:15:3b:1b:68:
58:e5:52:5e:59:50:09:33:ef:91:80:a3:9f:c8:ff:57:ab:63:
53:60:94:9f:e5:45:e6:9c:15:35:71:1b:50:5e:62:07:28:31:
54:32:32:be:92:12:81:d5:2a:f3:cf:c1:75:f5:f7:cb:23:0a:
a3:e4:05:6c:ab:84:41:8a:86:4f:21:38:78:6a:29:93:ad:96:
47:6f:37:fc:c9:83:2d:f4:b5:2e:d8:e1:94:a3:96:12:79:51:
42:7f:1b:30:b4:fc:bf:ba:78:3a:08:2d:ac:e9:d4:77:fe:34:
ac:61:6f:b5:a4:f2:94:7c:f6:91:76:33:1b:ce:96:4d:ca:d3:
d3:e7:ea:56:0b:2d:06:6c:40:a6:da:9d:05:a3:8b:b0:d1:52:
97:5a:a3:f3:a9:3e:52:e2:e4:fd:11:f3:e6:54:8f:ea:b8:65:
0b:c8:29:38:05:79:07:c2:83:ca:22:ae:56:63:d5:31:bc:52:
ce:d3:2a:d2:40:e8:f1:64:bb:4c:e4:5d:38:5f:fa:a3:16:5a:
df:e2:1e:05:a3:bd:72:08:89:56:5a:db:c4:77:d2:ed:73:e9:
bd:e1:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:35 2024 by rpki-client on console-ams.rpki-client.org