Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/GQrc7B9uGOdrFZyLVdiy0La5ZKY.roa
File: GQrc7B9uGOdrFZyLVdiy0La5ZKY.roa (raw, json)
Hash identifier: OuBhu91WfsQjS32L8XgLKc5QVbti1pa5cdldeZVZhmc=
Subject key identifier: 19:0A:DC:EC:1F:6E:18:E7:6B:15:9C:8B:55:D8:B2:D0:B6:B9:64:A6
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 018CC26D2651AB364F55B14E80E22F81B503
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/GQrc7B9uGOdrFZyLVdiy0La5ZKY.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211328
IP address blocks: 185.254.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:26:51:ab:36:4f:55:b1:4e:80:e2:2f:81:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=190adcec1f6e18e76b159c8b55d8b2d0b6b964a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:c0:ae:99:bf:3c:17:71:c7:ea:56:1a:ac:
28:a5:15:6b:92:17:f7:40:a7:b9:9b:1d:a5:dc:c5:
6b:3c:e7:e5:30:fb:f4:b0:26:13:db:f2:7f:30:45:
76:e9:c5:d8:a3:79:0c:9e:c8:43:3b:ab:7e:f4:45:
14:ce:2f:d2:a9:f8:12:6b:b7:75:94:3d:93:2f:09:
d1:1d:26:ce:7f:3f:cf:9e:a4:4e:0b:70:13:22:c3:
b4:c3:f9:94:67:04:19:92:84:d7:8d:a8:97:04:5b:
54:64:24:fc:34:e1:ac:f0:07:a9:7a:a5:dd:6d:c2:
ce:04:fd:b9:a4:28:ca:b4:f3:48:99:fb:ee:df:4f:
c2:9a:8a:d1:92:0c:e1:b3:49:e7:98:97:76:18:ca:
3f:e0:1c:58:6f:04:41:95:73:c2:62:34:74:dc:f8:
e4:c6:fc:30:a8:f8:8e:7a:b9:6b:5c:9b:d6:cf:46:
b3:41:2a:66:27:3c:a8:f4:6d:7c:f1:a6:81:2e:29:
71:27:d4:53:41:1f:e2:bc:b5:98:a6:3e:ba:1e:5b:
5d:f5:15:fb:84:50:35:01:ae:42:7a:fe:06:81:f7:
e5:26:b9:e6:75:ba:e9:99:e4:f8:ca:d9:c2:82:6a:
b2:cb:23:0c:cf:2a:dc:63:2a:df:34:fb:99:2f:f8:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:DC:EC:1F:6E:18:E7:6B:15:9C:8B:55:D8:B2:D0:B6:B9:64:A6
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/GQrc7B9uGOdrFZyLVdiy0La5ZKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.122.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ff:96:f3:e5:7d:eb:be:15:da:1b:c9:79:43:83:8b:2b:83:
f2:66:3a:e3:f3:cf:e7:f3:6c:9e:a3:d0:f6:f0:55:12:c6:32:
dd:4e:6a:cf:02:ba:4d:29:9d:28:02:c3:bb:af:18:bf:3c:2e:
e6:63:48:9d:60:c4:bb:26:0f:1b:83:98:8b:8a:53:da:0e:9c:
4c:5f:1f:04:97:1f:05:a1:ca:55:9a:b2:26:ed:5e:c3:89:2e:
aa:5d:c4:09:01:a5:64:38:62:64:20:a0:c6:81:3d:36:e8:ea:
57:94:01:59:35:bf:14:68:fb:05:fd:3d:6d:e6:fa:d1:89:72:
dc:3b:14:3b:30:71:cd:af:72:25:6e:6f:80:f0:c7:e2:6b:f5:
79:88:47:42:27:59:50:01:bf:d4:3f:0d:84:af:6d:8a:80:d5:
98:41:84:59:5c:40:e2:e6:a3:9d:2b:4a:9b:f2:8d:53:ff:15:
fd:25:88:f7:d8:d5:0e:83:b6:f4:98:4a:46:32:12:ff:b3:65:
d4:68:f1:e7:55:d3:75:29:ab:2b:db:30:c4:45:85:a9:f1:26:
97:61:6c:ed:05:c2:f3:31:8a:5a:74:36:36:8d:db:f9:ff:bd:
07:70:70:8e:2b:e1:d4:fa:68:0a:ff:8e:07:1e:37:1f:93:d4:
c8:f8:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 20:10:46 2024 by rpki-client on console-fra.rpki-client.org