Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/gmILmQzz_7IRSMICP7i8wZBQ96c.roa
File: gmILmQzz_7IRSMICP7i8wZBQ96c.roa (raw, json)
Hash identifier: OjcqPKdtH8Zqs5iII4RLtPg6K7DgDVYP68OIrSbsFlw=
Subject key identifier: 82:62:0B:99:0C:F3:FF:B2:11:48:C2:02:3F:B8:BC:C1:90:50:F7:A7
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 018CC8701790E45B568FA69ED4F8EA23B91D
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/gmILmQzz_7IRSMICP7i8wZBQ96c.roa
Signing time: Tue 02 Jan 2024 04:30:38 +0000
ROA not before: Tue 02 Jan 2024 04:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210108
IP address blocks: 194.49.100.0/23 maxlen: 23
194.49.103.0/24 maxlen: 24
194.49.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:17:90:e4:5b:56:8f:a6:9e:d4:f8:ea:23:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Jan 2 04:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82620b990cf3ffb21148c2023fb8bcc19050f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:8c:0c:9f:da:2d:10:cb:8e:d1:d0:62:5f:
04:7e:20:46:39:00:5f:94:67:6d:18:4b:3e:1d:a4:
fd:69:60:83:c0:67:fb:d5:d3:d6:6b:12:79:8e:ec:
0c:f0:21:c8:bd:a9:e7:84:0f:b7:80:c9:0a:65:87:
0b:39:e3:e1:87:fa:b8:9e:07:ec:ee:20:1b:66:da:
01:ea:1b:e1:4f:cc:1e:11:38:87:6a:91:a6:b2:9b:
da:5a:28:ee:2c:8f:50:ed:8f:1a:41:a4:c3:30:7e:
06:3e:ec:fc:86:cb:73:35:90:7e:c6:6a:4c:a9:5f:
5f:7b:1e:d5:3c:08:f3:99:cb:31:9e:89:9a:c6:5a:
be:36:00:d9:bb:a9:61:64:0f:6a:7d:3b:84:8e:76:
57:bf:e5:8f:80:58:2a:30:c4:23:20:eb:a1:0f:aa:
73:56:07:84:c9:5f:49:b8:6f:a2:c2:dd:ea:4e:ef:
96:5f:de:db:c8:fb:09:c2:aa:da:33:a3:ee:4c:00:
d8:b7:52:e6:49:dd:2a:4b:f9:06:8e:c4:fd:49:75:
81:70:84:08:3e:c7:2f:cc:c0:69:ad:8a:08:42:4f:
16:00:4b:45:d9:e6:48:f5:4b:b8:59:af:e8:26:57:
c6:c4:04:cd:ce:8d:de:0c:7a:bb:29:10:77:be:66:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:0B:99:0C:F3:FF:B2:11:48:C2:02:3F:B8:BC:C1:90:50:F7:A7
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/gmILmQzz_7IRSMICP7i8wZBQ96c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:eb:cf:b9:1e:6d:e3:2a:a8:a1:d7:60:bb:4c:80:e8:d2:58:
a2:46:9f:5b:c6:2d:a0:92:01:1b:9f:ec:24:c6:49:a6:d2:42:
67:81:9a:7e:03:99:ec:98:95:7c:81:e4:af:68:f8:d3:0c:a5:
a2:dc:9b:d9:a2:7f:25:bf:52:15:b1:64:4f:8f:ac:ee:cf:24:
d0:25:3d:89:db:a4:69:28:a8:1d:e2:b7:88:83:ce:71:0d:59:
18:85:e5:a6:37:ba:cd:5e:11:0e:fb:8d:fd:0e:3a:6d:a9:75:
c0:43:c7:47:24:f0:2e:07:ae:63:b0:50:c1:a0:64:36:d3:0a:
a7:fd:d0:56:b2:63:cf:fe:4c:64:06:0d:46:14:47:d0:5b:c2:
52:fb:13:c0:7f:cb:70:61:75:48:b7:46:b3:f7:8a:35:53:21:
66:24:fd:e5:20:ef:35:1c:05:9e:3c:e7:62:94:0d:07:07:37:
3f:67:16:81:79:3f:49:35:84:de:a9:7a:65:25:9c:ad:ec:af:
82:92:2a:41:57:fe:2e:72:0d:d7:b4:0c:59:53:31:bc:c1:38:
81:50:77:fd:4e:43:88:be:1e:f1:6b:94:83:c9:ae:7a:aa:e6:
ab:bc:9d:63:9e:64:2c:8b:b9:4d:79:75:69:88:17:df:af:5f:
b2:a4:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:28:49 2024 by rpki-client on console-fra.rpki-client.org