Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/GLCNc-AsxVVDn49M_DNMvyyXpf0.roa
File: GLCNc-AsxVVDn49M_DNMvyyXpf0.roa (raw, json)
Hash identifier: 79oqLFwhBlkAIxHCNqR7cN3S9JDWMn6u1HD6daHClKo=
Subject key identifier: 18:B0:8D:73:E0:2C:C5:55:43:9F:8F:4C:FC:33:4C:BF:2C:97:A5:FD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018CC86F85D3DBDDBF6F5529D2BC89347DE4
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/GLCNc-AsxVVDn49M_DNMvyyXpf0.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52045
IP address blocks: 185.41.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:85:d3:db:dd:bf:6f:55:29:d2:bc:89:34:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b08d73e02cc555439f8f4cfc334cbf2c97a5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:32:9b:ad:9c:f9:19:33:ac:cd:2b:f5:8a:
cd:7b:ba:a5:65:f2:d9:1a:46:36:52:b8:61:8b:73:
0d:2d:f5:81:72:da:a1:d0:f6:70:a8:f1:53:8e:00:
a5:cc:06:d8:1e:7c:34:e2:0c:fb:ab:17:1d:f3:a8:
08:70:38:c7:5f:fa:53:fc:af:f8:32:85:8f:33:61:
80:92:3b:e5:46:b5:c7:54:a2:1d:a9:f8:ef:1f:6d:
44:c7:5b:86:59:e4:13:0d:9b:01:8e:75:2e:74:87:
fa:fb:f4:33:c5:7c:a2:5e:71:0e:2b:77:fe:76:6e:
fe:4d:8c:fc:e6:8d:2f:68:f3:8b:50:b5:8a:20:52:
d8:38:e0:e3:b6:0f:c1:1a:37:16:ca:e1:66:3c:69:
a7:93:74:68:7c:61:dd:5e:e4:64:b8:24:82:36:a3:
c4:f8:21:0e:1c:85:35:da:43:45:d2:33:85:f2:63:
35:52:09:30:4b:7b:d5:f0:c0:b5:ad:9c:61:11:93:
8d:86:41:75:32:f7:13:12:50:5a:37:16:77:4e:50:
3b:f5:d6:27:0c:4a:ec:27:f0:96:1b:8d:52:cb:ac:
50:24:c2:c7:c4:49:11:50:c8:20:3a:39:7c:a1:c0:
6d:26:8b:73:c8:8c:25:bb:1d:a4:b5:04:68:8e:19:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:8D:73:E0:2C:C5:55:43:9F:8F:4C:FC:33:4C:BF:2C:97:A5:FD
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/GLCNc-AsxVVDn49M_DNMvyyXpf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.21.0/24
Signature Algorithm: sha256WithRSAEncryption
58:17:9a:76:76:49:fa:a2:c4:c6:54:50:97:d3:4d:9a:b3:02:
14:31:1c:cb:4a:5e:10:dd:05:b3:34:0d:a3:9f:20:1d:c2:86:
e8:17:7a:3d:07:4b:ac:16:a5:f2:20:35:d1:e1:77:e3:d2:60:
66:62:ad:49:7f:72:85:e6:53:60:c5:9d:53:ca:49:18:1e:65:
19:d3:c6:b7:ef:19:80:9e:45:d4:69:ef:f5:c6:bf:a5:aa:f6:
a1:d9:e4:66:21:71:9e:1d:02:ec:0d:29:8b:53:9e:cf:6f:6f:
3d:e7:3f:ef:cd:20:fb:02:8a:17:c1:2d:1b:f9:bb:a3:86:80:
fd:d3:d0:78:fe:fb:ef:5c:2c:13:13:29:c6:72:76:8d:de:83:
a7:26:97:90:fb:fd:52:f9:60:4e:33:6e:16:8e:03:3e:22:69:
22:7b:bd:2d:7d:4a:3c:0c:ef:94:3b:af:82:02:1d:6c:35:77:
6b:13:5e:c4:ac:53:98:8b:62:83:dc:42:aa:82:9b:96:06:73:
4f:b9:3d:f4:78:e7:47:05:bd:8b:da:08:26:bd:50:b3:c0:6d:
34:c6:89:f1:e9:0e:15:16:4c:52:ea:ea:2b:8c:cd:eb:ae:8f:
8a:66:a9:0a:a4:e3:29:93:9a:09:2f:9e:70:ee:8a:98:94:95:
3a:ff:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 20:08:05 2024 by rpki-client on console-ams.rpki-client.org