Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G0obgMV9-maIltZG_cb3UNBqvQE.roa
File: G0obgMV9-maIltZG_cb3UNBqvQE.roa (raw, json)
Hash identifier: nC743wZ9xrds+ez5J8t1bx96oI9bZUc3ci4roQzIDyo=
Subject key identifier: 1B:4A:1B:80:C5:7D:FA:66:88:96:D6:46:FD:C6:F7:50:D0:6A:BD:01
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B688D20D085AADF1B306A03A7B9655
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G0obgMV9-maIltZG_cb3UNBqvQE.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203999
IP address blocks: 185.188.63.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:88:d2:0d:08:5a:ad:f1:b3:06:a0:3a:7b:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b4a1b80c57dfa668896d646fdc6f750d06abd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:6a:cb:70:ae:78:04:de:3e:50:6a:8f:e1:
98:9d:cf:13:b2:54:52:22:4a:1b:86:45:52:d5:fa:
9e:8b:e2:ea:42:d5:e0:52:15:3b:a4:7d:8b:45:8f:
39:c7:e9:f9:e7:d0:a4:b2:ff:9c:ce:7e:04:3e:42:
2b:3a:09:7d:3e:8c:21:21:30:fb:81:c6:e2:43:1e:
e2:d0:c1:25:3b:32:cc:7e:3e:a2:51:2a:df:cf:25:
99:2a:f6:11:84:f0:61:3d:29:32:37:fe:4f:72:ca:
89:46:ff:c8:2c:8d:ed:f7:c2:42:71:f7:af:a5:0f:
5b:0c:98:10:eb:90:2a:02:49:f0:dd:0a:14:a3:c4:
53:48:30:3e:6e:bd:8d:01:ed:9d:d8:b5:ef:ba:e4:
96:93:e1:69:2a:64:59:8c:b8:23:ec:7e:fa:fe:98:
0b:e3:03:db:06:5c:de:d7:a7:fe:f0:27:38:25:fa:
0d:fa:01:2a:ab:34:c2:6d:7a:83:ae:5d:a2:95:f0:
bc:4f:1e:3a:1d:b8:a0:c8:5d:f9:cc:a6:cd:0c:a7:
1e:f6:c9:d4:22:7d:4c:e1:3d:6e:e1:02:1a:6d:3b:
e0:46:1a:c6:3c:ac:50:3b:31:35:3c:d2:14:65:2c:
ff:20:b8:99:20:cb:2d:0f:0e:73:32:63:46:8c:83:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:1B:80:C5:7D:FA:66:88:96:D6:46:FD:C6:F7:50:D0:6A:BD:01
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/G0obgMV9-maIltZG_cb3UNBqvQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:db:a5:c9:d0:4d:84:6f:36:90:61:22:b6:06:32:de:61:cb:
5a:59:17:47:5c:c6:c4:a0:41:75:96:4b:20:c8:56:97:1a:6f:
6d:53:c6:47:0a:8a:30:34:44:54:9b:dc:de:80:5c:83:c8:69:
ba:82:e4:25:ad:3e:76:23:f7:bb:23:67:8a:1b:d7:ed:f8:02:
68:ae:2e:0f:9c:48:98:f0:a4:74:cc:61:1b:7c:d4:aa:b5:b2:
1e:3c:b4:03:76:8c:ad:19:04:ad:64:d1:7a:b7:f4:5b:f5:bf:
73:05:e4:aa:c9:a9:30:f7:5f:fa:a1:a6:99:fa:6d:3e:a8:9a:
27:03:c2:f8:cc:6a:f5:6b:f9:f7:f2:65:a1:6a:cc:2c:88:8b:
21:3f:95:92:d4:89:a6:e8:a3:3f:39:6c:27:3e:6c:e4:1c:cf:
42:2a:e5:4a:d4:e7:8e:23:70:e1:dd:97:71:3d:c8:58:8b:1c:
50:09:14:90:3f:0e:6f:b7:36:23:90:d6:2f:9d:8a:7f:38:1e:
ca:59:fa:a7:e4:49:7b:06:5c:cd:0e:81:4e:3a:12:4f:e7:5c:
ef:36:5f:d6:2a:50:0d:b8:6a:a2:36:41:3f:56:fb:3e:d0:39:
79:d4:20:86:ea:eb:20:6a:0c:54:cd:eb:60:dd:5f:22:95:7a:
23:95:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:37 2024 by rpki-client on console-ams.rpki-client.org