Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/GYwQH8gjoMI87zuAzZJbPyJBkvg.roa
File: GYwQH8gjoMI87zuAzZJbPyJBkvg.roa (raw, json)
Hash identifier: MQ+h84dTZ07ozAgAiwYXkM81XMS9MtMWB6DFmMxn6Ic=
Subject key identifier: 19:8C:10:1F:C8:23:A0:C2:3C:EF:3B:80:CD:92:5B:3F:22:41:92:F8
Certificate issuer: /CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Certificate serial: 018CC26D3362B02C3A9381C58D18D1EE30B9
Authority key identifier: A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/GYwQH8gjoMI87zuAzZJbPyJBkvg.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211071
IP address blocks: 91.213.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:62:b0:2c:3a:93:81:c5:8d:18:d1:ee:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=198c101fc823a0c23cef3b80cd925b3f224192f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:c5:7a:2e:5e:10:35:fe:da:e0:40:36:c6:
b6:91:70:58:51:7d:b2:09:14:91:ef:04:c2:21:db:
46:f2:24:df:b5:11:ad:40:2a:16:9c:45:c4:c1:21:
4b:5d:94:e7:e8:20:48:16:3f:b4:94:e6:ce:70:4d:
99:ba:ed:6a:97:b6:ff:d8:16:4f:17:62:cc:bf:bd:
43:dd:86:e4:c7:d1:f1:71:08:b3:c4:90:9e:99:f7:
7e:fd:07:b6:12:24:f2:39:1a:d5:6a:a4:4d:fd:47:
f1:ce:55:9d:01:d4:23:ac:40:97:c4:0d:a1:5d:87:
d3:0a:98:09:b5:9a:f4:fe:bb:3d:af:aa:02:38:b5:
be:34:47:24:59:ea:95:fb:e6:47:de:b3:b3:ad:bb:
e6:c3:53:cd:21:eb:7e:0d:13:41:be:24:78:09:5f:
64:5d:6f:86:fe:88:12:1e:0f:35:81:83:2c:61:25:
d5:7c:06:4c:5f:96:38:e1:10:97:24:0c:bf:1e:b9:
b3:39:2a:ae:81:a4:89:45:bb:4c:f2:49:61:e7:88:
2d:26:98:80:9b:fb:c4:b8:53:ac:5e:36:b7:e4:0a:
f0:b7:f8:91:5a:a3:2e:17:2d:4a:7b:9d:16:b7:7d:
a0:e0:7b:e5:f5:a4:8e:33:79:87:07:bb:5a:61:a2:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:10:1F:C8:23:A0:C2:3C:EF:3B:80:CD:92:5B:3F:22:41:92:F8
X509v3 Authority Key Identifier:
keyid:A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/GYwQH8gjoMI87zuAzZJbPyJBkvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.202.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0d:c8:db:88:3d:0c:d5:a6:18:55:dc:2f:a9:b8:1d:98:01:
5e:45:3d:2b:87:49:eb:ee:20:03:34:0a:0b:8a:24:97:40:b1:
d6:4c:28:a2:fb:fd:50:57:17:6b:60:b0:c1:c2:ed:3d:60:44:
99:36:7a:f8:af:65:de:56:0e:07:14:03:43:17:9a:b7:dd:14:
6f:48:2b:c5:ac:35:bc:28:aa:18:08:c1:14:c8:20:bb:d6:63:
69:80:c5:87:a1:4c:11:04:22:1b:a3:65:d0:70:45:fe:a5:d6:
b2:2b:1a:2e:3f:ff:36:40:50:60:2f:ba:86:d2:bf:8d:07:58:
b0:fd:f5:ae:d3:b5:c3:01:e2:f7:9a:0f:b2:09:77:16:a9:9f:
c0:21:4d:72:01:c9:41:49:44:06:b5:b8:7a:3f:67:be:03:5d:
1a:f9:63:36:78:f5:ca:c2:76:b7:ac:73:0b:ec:f4:52:3e:3f:
49:aa:58:d7:54:88:8b:89:19:7e:c7:8a:91:48:29:45:6c:1b:
5f:69:8a:e8:eb:f0:a0:b4:17:b8:fe:cc:98:51:52:b1:6f:3c:
45:5c:78:7e:0b:5b:16:50:f5:2b:6b:db:e6:3e:df:f1:1c:94:
60:46:83:7e:32:53:cd:27:01:a9:25:5e:66:26:81:2c:5f:0b:
3b:0d:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:26:17 2024 by rpki-client on console-ams.rpki-client.org