Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/GM0l4qS4JFYtDsN5Y4PTOwzjmGQ.roa
File: GM0l4qS4JFYtDsN5Y4PTOwzjmGQ.roa (raw, json)
Hash identifier: TEX+5pdb03hniG2uA/SjGVbW9ON9EGIWwzGdrwGlKio=
Subject key identifier: 18:CD:25:E2:A4:B8:24:56:2D:0E:C3:79:63:83:D3:3B:0C:E3:98:64
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01934E152B5BCAEC594B4F2365D27541B623
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/GM0l4qS4JFYtDsN5Y4PTOwzjmGQ.roa
Signing time: Thu 21 Nov 2024 09:37:10 +0000
ROA not before: Thu 21 Nov 2024 09:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204958
IP address blocks: 92.60.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:15:2b:5b:ca:ec:59:4b:4f:23:65:d2:75:41:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Nov 21 09:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18cd25e2a4b824562d0ec3796383d33b0ce39864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:8b:02:16:0f:c0:f1:a6:b9:99:f4:4d:05:
14:9d:de:1b:f8:34:9f:12:4d:0d:9e:8a:fd:fe:51:
89:ed:f8:bf:6f:74:e9:39:50:66:b2:5b:63:89:ec:
2a:26:f5:1f:61:c8:fe:78:cc:71:be:4d:20:80:30:
47:96:26:ce:6e:cf:e5:25:6e:75:60:61:ff:d6:1b:
56:7b:d2:13:a7:b9:ef:f5:e8:0d:c0:61:a4:d4:48:
c0:1b:d3:1f:f1:5e:5b:63:e5:ea:0f:6c:6e:8b:53:
eb:32:fc:3f:1a:7f:41:a8:e7:c3:37:85:3a:16:a4:
a2:78:2f:ea:92:c1:d3:ac:a4:ba:c7:28:53:b9:51:
ef:42:38:79:03:a1:e5:c7:7d:29:6f:14:58:9a:0a:
2e:33:d3:a7:33:45:a7:c8:ab:01:ec:9a:57:67:67:
b4:86:3c:5a:63:d5:44:f4:40:e1:a8:1c:1d:61:f4:
b5:f8:4c:0f:9c:77:21:53:5d:17:95:91:f6:04:d3:
f1:57:27:d8:3e:7c:f0:f3:17:0d:b9:29:71:c0:76:
30:1e:2e:5a:26:47:9f:3c:e6:fb:49:05:6d:41:92:
5d:ce:27:d2:11:9e:e3:90:fe:3b:6c:f3:e7:f6:1b:
a8:07:3d:03:b9:73:5b:9b:12:11:c8:0d:f8:b8:c9:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:25:E2:A4:B8:24:56:2D:0E:C3:79:63:83:D3:3B:0C:E3:98:64
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/GM0l4qS4JFYtDsN5Y4PTOwzjmGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:81:7f:0c:bb:2c:c2:5f:93:5a:00:2d:76:4c:93:8c:51:e7:
d8:61:cd:95:58:bc:f0:52:4b:6c:34:c1:d6:51:84:70:ab:3f:
ad:db:83:47:8e:35:c2:9f:e8:2d:e8:fa:73:15:89:42:79:70:
5e:c3:ad:d9:4e:5f:87:28:9e:52:11:e8:8c:be:10:f3:9a:fc:
fe:10:a0:a0:14:b4:be:bc:9b:69:e3:3e:ab:42:7d:a2:80:fd:
d0:ad:71:2d:55:54:bb:58:a0:fe:6e:98:3d:1e:55:dd:2e:71:
e1:06:28:bc:3e:f3:df:1b:ea:21:9f:ee:67:47:d6:b0:a6:77:
1b:0c:de:1d:cb:4d:d9:54:1e:46:0d:bd:71:0e:78:f6:5b:76:
6b:22:f1:91:31:f6:ee:2a:3c:dd:07:5d:b0:a5:bb:a7:27:a8:
01:b3:5f:23:9b:b0:3b:55:ee:59:f5:90:da:5a:71:eb:13:b6:
f0:dd:ca:c6:02:aa:3a:2b:e2:bd:c6:17:6a:e6:e6:81:cf:d8:
68:46:c0:c4:fa:30:bd:db:81:d7:f1:e2:26:85:76:1b:fc:2b:
62:b9:37:16:79:71:66:e3:3f:d5:81:a1:dd:1e:74:64:f3:e4:
84:c1:81:da:1d:2c:6f:55:7d:4f:83:6d:b5:49:cf:14:d2:ed:
74:41:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:05:13 2024 by rpki-client on console-fra.rpki-client.org