Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gDpmTZgnC2hLDNoK7ph1U51IevA.roa
File: gDpmTZgnC2hLDNoK7ph1U51IevA.roa (raw, json)
Hash identifier: l0JQzTY+8s3yyR341nZe/QxXlGKm+RwhTEkA6sek5zw=
Subject key identifier: 80:3A:66:4D:98:27:0B:68:4B:0C:DA:0A:EE:98:75:53:9D:48:7A:F0
Certificate issuer: /CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Certificate serial: 018CC2DAFD12597809374AEEF760D35BDCD0
Authority key identifier: 82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gDpmTZgnC2hLDNoK7ph1U51IevA.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 195.211.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:12:59:78:09:37:4a:ee:f7:60:d3:5b:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82305ee267be68e82b3d5d69c4ed065b2e239fe5
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=803a664d98270b684b0cda0aee9875539d487af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f9:d2:f9:ac:9e:30:55:73:d0:4f:39:88:83:
3b:11:e5:7c:18:b8:06:6f:b1:03:88:49:df:fc:ab:
9a:5d:9b:78:e7:1a:f6:12:c4:b6:02:16:46:37:32:
81:a6:31:53:ef:4f:99:63:ae:64:71:58:a6:8c:fe:
0a:f2:95:73:2d:2a:84:f8:ed:0e:fb:2c:e5:79:b2:
7e:8e:ce:c7:ad:e6:21:4b:a5:d8:76:92:12:3b:90:
6c:e1:00:ec:2b:00:ff:da:22:5b:df:c8:f2:fc:a3:
e7:20:c9:77:b0:80:7f:cc:80:ee:1a:8d:c8:ea:b1:
bc:ad:d6:cb:49:74:88:f3:63:91:64:a6:9c:49:52:
aa:f2:6f:42:f8:5c:ce:9d:67:25:e8:4d:9f:47:84:
a6:1b:89:4a:77:52:20:a3:ea:d8:a2:2a:09:de:32:
72:1a:46:00:cf:22:8a:0a:9b:2a:35:d6:af:88:11:
a4:2f:a7:e0:d7:34:ab:d8:2e:d8:d5:43:96:e2:63:
17:e1:03:90:33:a5:8e:29:b7:2a:a4:46:a0:e0:a4:
36:a1:db:b6:f9:6a:51:b6:20:eb:62:e4:20:9c:e6:
6c:a1:51:40:bd:7c:5b:e5:8f:84:79:99:3c:50:bd:
e4:ec:da:a6:1d:9c:42:bc:69:87:96:af:78:f7:02:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:66:4D:98:27:0B:68:4B:0C:DA:0A:EE:98:75:53:9D:48:7A:F0
X509v3 Authority Key Identifier:
keyid:82:30:5E:E2:67:BE:68:E8:2B:3D:5D:69:C4:ED:06:5B:2E:23:9F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjBe4me-aOgrPV1pxO0GWy4jn-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gDpmTZgnC2hLDNoK7ph1U51IevA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c09df3-81fe-457b-b527-239987d4f98c/1/gjBe4me-aOgrPV1pxO0GWy4jn-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:af:84:78:81:6c:4e:02:28:7d:fc:7b:57:e6:36:76:de:fe:
a0:0b:9b:b6:51:cb:ff:bc:71:03:d4:e7:39:b5:94:ca:f0:8b:
e0:2a:b4:9d:7d:92:1f:b7:85:f5:84:2a:a8:9f:d5:47:0b:3d:
25:2c:ff:ef:cf:f7:b4:a0:5d:a6:70:7e:9c:be:4a:f2:13:dd:
a1:e8:05:5e:f2:44:93:33:b8:a1:2f:34:ef:2c:82:db:69:46:
49:b2:49:1a:9f:73:a5:35:2a:0e:25:83:ed:9d:dc:99:4a:17:
8f:9e:a7:a5:f4:98:9f:45:51:e8:84:15:a1:33:8a:41:06:56:
37:a0:96:a3:34:a9:fd:38:48:b5:3e:e3:a6:97:9a:43:51:fe:
f5:7b:f1:68:cc:db:9a:60:8b:65:63:e6:06:58:82:24:59:3d:
cb:95:4c:f3:5d:61:5a:16:84:86:6d:04:de:a7:68:3c:89:c4:
18:e5:8d:ae:6d:b4:32:1c:02:9e:20:ea:4f:56:d8:12:b9:44:
2e:26:3d:da:9b:cb:c4:01:a6:f7:77:88:e6:b4:eb:6a:38:b1:
3f:c7:12:32:c6:49:16:0c:cf:5b:24:5e:9a:a4:b2:35:1e:f1:
e5:02:72:af:2a:9a:49:ed:b7:b3:50:ab:2b:fb:0f:c7:d3:8d:
f7:44:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:29:50 2024 by rpki-client on console-ams.rpki-client.org