Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/GVUoa6CzEPe28QLnQn0QWgmS7fs.roa
File: GVUoa6CzEPe28QLnQn0QWgmS7fs.roa (raw, json)
Hash identifier: rRFoEMM1/d2jC1gtB4NcX97xsdcABGETFZVCuxt+QHo=
Subject key identifier: 19:55:28:6B:A0:B3:10:F7:B6:F1:02:E7:42:7D:10:5A:09:92:ED:FB
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 018CCA2BAC88BBC74A00C7ECDDC7443367F2
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/GVUoa6CzEPe28QLnQn0QWgmS7fs.roa
Signing time: Tue 02 Jan 2024 12:35:08 +0000
ROA not before: Tue 02 Jan 2024 12:35:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.58.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ac:88:bb:c7:4a:00:c7:ec:dd:c7:44:33:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Jan 2 12:35:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1955286ba0b310f7b6f102e7427d105a0992edfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:47:9f:10:95:eb:97:6c:88:a3:2b:b2:00:
a0:f5:e4:06:34:2f:4e:a6:af:eb:08:58:ae:b6:f7:
68:15:f7:c7:60:de:b8:29:61:a2:75:5a:2c:72:e0:
85:1b:95:ed:27:35:98:bb:d6:6c:1c:fc:ae:0f:ed:
bd:d9:f3:ef:bc:7f:8b:5d:6b:57:58:aa:6e:79:bb:
a4:2f:22:0d:4c:2e:aa:ed:d5:43:03:59:21:ef:fb:
da:97:a1:d9:d8:7c:e7:4b:0a:08:d5:21:38:dd:9d:
7b:dc:97:ca:fa:d0:23:f9:c9:60:d7:11:41:af:aa:
11:6a:a6:b2:76:a7:4b:78:a8:1a:fb:9a:16:d7:e4:
79:52:2e:0d:1e:9e:09:ce:99:4a:8b:e6:dd:fa:94:
22:3a:4b:8f:db:33:1c:6e:26:aa:ff:58:9b:06:f9:
c3:65:2a:da:e7:93:6b:02:20:3e:95:f1:14:3c:7c:
31:cc:8e:51:08:fa:fe:84:a1:2a:3f:f5:04:ac:0f:
b7:90:a4:06:15:6e:f4:31:12:f1:07:3a:aa:19:f2:
d9:a2:92:93:9c:7b:07:92:c6:6b:6d:6c:64:ed:8c:
c3:61:42:1a:fb:49:8d:05:1f:26:19:12:2e:ab:77:
e1:94:72:54:b9:e6:9f:05:32:fd:8e:87:03:ef:95:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:28:6B:A0:B3:10:F7:B6:F1:02:E7:42:7D:10:5A:09:92:ED:FB
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/GVUoa6CzEPe28QLnQn0QWgmS7fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.6.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ee:75:b7:35:95:0d:c2:50:29:f7:7b:f8:2a:56:3c:6e:e2:
66:2f:10:9d:37:f5:4f:ff:c8:ff:10:f7:10:d9:07:4e:f1:dd:
f5:50:36:98:3f:22:39:eb:71:5c:8e:7b:6d:47:be:3e:ec:32:
b2:95:7f:c6:91:03:4a:18:c0:15:6a:14:ae:88:cd:16:c9:cb:
16:d1:a5:01:bd:53:e9:80:db:e9:40:10:79:08:e7:45:3d:44:
b8:8f:23:fe:89:a4:ad:a2:15:cc:fe:08:d9:61:f2:43:6e:27:
96:f0:b3:0f:bd:76:f6:45:45:76:30:f5:c7:1d:58:ef:e4:e1:
b6:b5:28:64:5d:57:dc:d1:32:10:d7:b9:da:c6:6f:33:b8:5c:
52:9a:7a:eb:12:53:f7:25:66:7a:90:3e:46:f9:c0:e4:f9:d3:
23:03:56:83:d8:5f:1a:36:d2:fe:69:d2:ee:68:64:cf:75:1f:
25:af:fb:4a:ab:9d:1f:4b:97:53:85:84:03:7d:27:28:6c:97:
1a:50:69:32:22:23:64:58:8a:90:09:6b:48:07:0c:a5:ca:50:
72:d2:36:e2:b5:3c:90:71:be:a3:09:8d:52:c4:53:fd:96:9e:
65:5f:41:22:ae:17:65:44:a1:99:93:01:7c:06:d9:6d:03:33:
73:62:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:37:14 2024 by rpki-client on console-ams.rpki-client.org