Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GMdYD1gZjTT--L-XjLXnAt0aSpE.roa
File: GMdYD1gZjTT--L-XjLXnAt0aSpE.roa (raw, json)
Hash identifier: HJ9cyMuYEmwS6q5jmT9nfUukiObn/2fBkEo3zVpPQuo=
Subject key identifier: 18:C7:58:0F:58:19:8D:34:FE:F8:BF:97:8C:B5:E7:02:DD:1A:4A:91
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BB833086E31567AD61282B063644
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GMdYD1gZjTT--L-XjLXnAt0aSpE.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200704
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bb:83:30:86:e3:15:67:ad:61:28:2b:06:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18c7580f58198d34fef8bf978cb5e702dd1a4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:51:cf:6c:e6:7d:6f:f3:85:a6:72:de:5e:
53:3d:1a:83:b1:d1:64:1a:c0:e0:6b:f8:53:33:fe:
91:a0:b2:64:e8:e1:7a:95:cf:97:53:58:f1:23:bb:
93:e7:e8:f6:c1:02:26:cf:f2:a6:bb:e7:ce:43:db:
2a:03:01:28:29:d1:a8:e9:60:54:ac:d8:fd:f5:b0:
76:56:d0:be:3d:bd:f7:61:79:37:f2:e6:e4:fb:1e:
13:44:cb:0b:58:ad:91:02:5d:db:6a:50:c1:f3:9e:
31:0a:09:ba:33:31:f4:6f:56:04:86:0a:49:57:78:
a0:ea:b7:03:11:1f:6f:14:84:c9:0e:4e:03:8f:68:
5d:83:f8:e6:ab:af:da:e3:39:9d:bf:e8:2e:38:ff:
ce:1c:70:e4:14:cd:82:ca:c8:62:91:1c:f6:a7:6a:
75:84:45:61:be:86:34:9e:cc:46:58:17:af:bd:0d:
73:1d:62:75:f2:14:60:de:3c:3a:cd:17:fd:cb:41:
5c:44:e9:69:2b:10:93:24:f9:bd:62:4b:78:1d:46:
b5:7e:30:ad:01:bc:bd:ad:da:07:ee:21:4c:a5:70:
f3:69:a1:95:0c:c7:b2:f9:00:e5:2b:7b:95:1b:30:
bc:d0:de:9b:01:7f:f1:8e:24:fc:21:13:45:bf:8b:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:58:0F:58:19:8D:34:FE:F8:BF:97:8C:B5:E7:02:DD:1A:4A:91
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GMdYD1gZjTT--L-XjLXnAt0aSpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
12:00:a7:3f:e0:0a:e5:d2:f7:dc:e3:24:43:fc:ba:15:ad:68:
43:ac:8a:8d:84:67:1f:fa:f1:75:c3:5b:a3:bf:1d:97:00:b5:
39:05:ba:a7:2b:e2:86:79:96:69:98:76:13:92:84:a8:6f:07:
ce:0b:60:e9:f7:34:75:02:77:4d:bd:70:d0:15:76:35:96:03:
51:03:78:ba:d9:b8:aa:43:5f:ec:bf:55:9c:8d:de:e8:af:53:
67:b5:83:ee:57:49:f2:d3:1d:d7:c4:98:23:3b:36:53:db:0c:
c0:64:99:50:a5:19:8e:04:e0:e1:91:a8:7c:88:a6:1d:25:1b:
94:42:4f:74:15:b4:01:b0:9e:82:2f:de:ab:89:00:66:78:d7:
37:d9:ed:0a:37:7a:e3:c6:ff:4f:02:24:0b:52:1a:bb:ea:68:
59:ee:34:4a:52:1d:cc:38:a9:e1:a2:0f:81:6b:5a:1a:22:62:
41:4e:8b:d4:b3:7b:ae:d5:13:e2:1f:96:18:6e:63:c2:43:94:
04:44:dc:19:ee:59:57:8a:a5:4e:23:cb:14:2f:b5:cb:72:31:
cf:97:81:9f:74:8d:04:a9:78:ff:fd:5c:4f:d9:fb:f6:f8:a3:
5a:d7:5b:ba:a6:18:42:9e:16:72:91:f3:ab:fc:c1:2b:b5:82:
37:75:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:41:01 2024 by rpki-client on console-ams.rpki-client.org