Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Gvw93C2t4FzNoa5HvIuCJtDNtf0.roa
File: Gvw93C2t4FzNoa5HvIuCJtDNtf0.roa (raw, json)
Hash identifier: vrJUOxWFMiikrmshKC5J4sD01m8oSRLhGaR3N0loZ7o=
Subject key identifier: 1A:FC:3D:DC:2D:AD:E0:5C:CD:A1:AE:47:BC:8B:82:26:D0:CD:B5:FD
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018CC5DD26C2947121898FE9F3F074ECE85A
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Gvw93C2t4FzNoa5HvIuCJtDNtf0.roa
Signing time: Mon 01 Jan 2024 16:30:54 +0000
ROA not before: Mon 01 Jan 2024 16:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211043
IP address blocks: 185.102.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:26:c2:94:71:21:89:8f:e9:f3:f0:74:ec:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 16:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1afc3ddc2dade05ccda1ae47bc8b8226d0cdb5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:d7:73:0d:c2:7e:a5:d9:ad:49:0e:17:4e:
96:fb:f1:5d:2c:44:61:a0:57:15:82:17:37:03:aa:
17:26:45:83:71:db:95:20:c4:f3:92:e1:c0:3b:e3:
23:ba:4a:81:db:8f:49:04:30:1c:c2:61:d1:0a:9c:
ac:70:2b:af:f4:bf:23:05:ea:e3:08:6c:15:ad:da:
73:26:f5:3e:70:aa:df:a7:f4:9a:2d:eb:48:fe:4b:
2e:68:a7:34:0a:ce:00:33:46:af:0e:9c:90:00:cc:
4d:bc:55:4b:ee:ca:04:9f:0b:8e:ac:d7:35:57:b8:
43:2f:63:9b:84:80:a0:b3:e3:f5:7b:f3:b9:46:86:
c6:f2:6d:7e:78:e3:19:0d:45:6a:83:bc:30:56:6c:
8a:35:b2:f8:97:1e:45:19:fa:f2:6e:e8:ec:41:16:
04:c6:cd:4c:f8:97:60:f2:5b:a3:2f:de:36:63:35:
5f:f5:7b:04:62:04:46:d1:03:02:e9:6a:9b:a4:93:
4b:e6:f2:40:33:6a:95:fe:48:96:7d:d4:41:41:96:
44:01:13:f4:20:3b:ed:f7:1a:44:f3:b5:a2:22:70:
12:19:f9:cb:1d:7a:00:7e:32:4f:99:2d:9a:a3:ec:
51:14:b9:eb:19:ae:ed:91:b5:66:85:9f:93:f5:bc:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:3D:DC:2D:AD:E0:5C:CD:A1:AE:47:BC:8B:82:26:D0:CD:B5:FD
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Gvw93C2t4FzNoa5HvIuCJtDNtf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6b:ea:79:c9:a8:72:10:b1:fa:65:06:a4:df:03:8d:ba:bf:
62:dd:7b:75:18:48:33:eb:51:39:cf:26:d3:cd:54:34:a1:ea:
ca:95:00:f7:8b:7a:50:99:f9:2a:c9:bb:ba:c1:27:c6:cd:a9:
5d:5a:b7:99:59:45:69:8a:30:26:69:4b:42:49:70:0c:70:66:
6f:8b:f7:c0:d0:ae:66:3b:94:52:71:7e:9b:a6:dd:17:0d:61:
98:9f:bc:a1:93:00:95:65:30:7d:04:98:33:c5:cb:da:4a:31:
d1:ca:49:46:70:7c:24:60:d6:25:6b:be:62:9c:8e:8d:a7:a1:
06:cf:38:07:4c:58:77:22:69:20:5c:d1:ee:3f:5d:c2:60:ee:
93:fc:35:70:3d:bc:95:84:11:9d:c8:7c:78:25:8e:cd:c9:44:
12:0b:26:8e:c3:48:d3:b0:c3:7b:d9:b8:f3:ac:a8:79:f3:d3:
1d:35:0f:8a:d0:e4:2c:79:b3:6e:3c:5e:a4:d5:da:d4:4d:d6:
0d:df:99:d7:2b:9b:7d:0f:c6:c0:6e:a9:a4:c8:80:4d:4b:c8:
5a:9e:97:41:e7:a4:9f:29:e6:9e:55:b3:29:79:66:88:89:55:
8f:c0:f3:6d:49:c4:f0:d3:b4:97:bc:0c:7b:f3:70:0f:8f:c8:
4e:4d:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:25:42 2024 by rpki-client on console-fra.rpki-client.org