Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/GmDbKDh135p8vqUOth3V26cDS_s.roa
File: GmDbKDh135p8vqUOth3V26cDS_s.roa (raw, json)
Hash identifier: awMhGS/3JTKZYsVU22oIRwZXERA5MBcBlIgZqYsndoQ=
Subject key identifier: 1A:60:DB:28:38:75:DF:9A:7C:BE:A5:0E:B6:1D:D5:DB:A7:03:4B:FB
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 018CC9BB9C3F0BDDA6BD4A1FB13D342BD2FD
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/GmDbKDh135p8vqUOth3V26cDS_s.roa
Signing time: Tue 02 Jan 2024 10:32:44 +0000
ROA not before: Tue 02 Jan 2024 10:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47201
IP address blocks: 79.98.125.0/24 maxlen: 24
79.98.121.0/24 maxlen: 24
79.98.122.0/24 maxlen: 24
79.98.123.0/24 maxlen: 24
79.98.124.0/24 maxlen: 24
79.98.120.0/24 maxlen: 24
2a00:d30:122::/48 maxlen: 48
2a00:d30:125::/48 maxlen: 48
2a00:d30:120::/48 maxlen: 48
2a00:d30:123::/48 maxlen: 48
2a00:d30:121::/48 maxlen: 48
2a00:d30:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:9c:3f:0b:dd:a6:bd:4a:1f:b1:3d:34:2b:d2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jan 2 10:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a60db283875df9a7cbea50eb61dd5dba7034bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:d8:8b:15:43:d0:a1:1c:73:5e:08:cb:6a:
af:70:d7:6a:eb:bc:be:0d:43:10:3c:4a:47:33:7c:
1a:26:05:39:cb:f7:6a:83:a5:7b:95:ce:6d:20:62:
20:8e:d4:08:fe:3c:1f:37:df:60:6c:5c:37:20:fa:
07:bc:d1:7d:91:32:5c:ac:3f:ab:ef:85:4d:6e:45:
a4:90:31:36:82:c6:4f:52:20:19:f5:13:69:72:ed:
e1:5d:11:05:a0:e1:2f:8f:f8:93:dc:cf:d1:5e:34:
ce:57:c1:0a:32:14:ee:66:67:c7:e2:31:fe:5c:40:
18:d8:9a:84:28:71:01:a4:c9:0c:3f:9b:31:f5:7d:
64:b8:70:e5:f0:46:c1:44:f2:69:e0:09:d5:7e:b1:
91:d9:94:f1:35:70:1c:45:fb:61:18:3b:6a:3a:a7:
fb:d4:cb:29:83:40:c3:54:bb:d3:4d:43:7d:0d:3b:
b2:b1:2a:09:af:d7:fb:e3:4b:94:fe:19:59:6c:7e:
a4:6c:38:66:7b:4f:44:5a:0a:e0:e2:af:7b:a5:c6:
36:88:84:43:69:b6:0d:59:2e:32:c8:66:46:6f:d5:
1b:ec:0b:38:65:28:33:38:53:79:c2:cd:99:11:05:
4d:7e:25:f5:9a:66:8b:70:65:f1:b0:32:a7:0e:24:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:DB:28:38:75:DF:9A:7C:BE:A5:0E:B6:1D:D5:DB:A7:03:4B:FB
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/GmDbKDh135p8vqUOth3V26cDS_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.120.0-79.98.125.255
IPv6:
2a00:d30:120::-2a00:d30:125:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c3:48:d9:20:da:d2:86:43:e4:7a:e8:10:38:16:17:e9:b3:0b:
cf:24:9b:b0:a2:9a:70:13:ae:b2:f4:67:56:78:a4:da:bd:fa:
e2:a4:3a:fa:01:8b:f7:01:07:eb:9b:8f:f4:47:21:87:9a:ee:
8d:f2:eb:d4:ba:e3:54:ca:f4:f3:ae:2a:c4:90:67:3c:f4:d6:
ff:6e:bd:e2:ad:54:71:5b:91:04:68:93:2b:68:0c:9b:75:47:
73:5c:18:92:7a:df:e5:e0:c3:e4:cf:55:4a:91:7e:d5:cc:11:
ab:a2:df:c0:13:2b:70:6d:81:4e:41:22:b2:73:87:50:d1:c5:
a4:85:71:72:e3:93:50:1b:c0:af:6c:20:1b:d8:39:7d:52:b3:
9d:3c:1e:d4:aa:92:1e:8d:6e:ea:37:d7:bb:be:22:3c:07:e5:
29:f8:e6:49:2f:c7:11:58:da:02:71:bc:f5:13:98:1b:ee:a2:
fd:54:26:bf:55:08:5e:70:47:38:99:b9:b1:c1:4b:27:27:b9:
48:07:5b:69:6a:cd:85:2d:ff:bc:f7:da:bc:97:79:de:9f:86:
c6:89:e9:24:fe:39:68:f7:4d:5b:2b:1c:1f:21:17:9a:87:d2:
35:5e:76:bf:3d:51:6c:15:23:fa:80:21:d9:b2:34:5d:71:82:
58:86:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:36:49 2024 by rpki-client on console-ams.rpki-client.org