Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/GbM5jcDH1wZs8EY9DDaxL097TRM.roa
File: GbM5jcDH1wZs8EY9DDaxL097TRM.roa (raw, json)
Hash identifier: EthAqGIGb3LYMg+Mmzdu67sUYN5r5iWkg8fLnfrEUbA=
Subject key identifier: 19:B3:39:8D:C0:C7:D7:06:6C:F0:46:3D:0C:36:B1:2F:4F:7B:4D:13
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018CC9BC80EA53A5197F54FCF00440F6D446
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/GbM5jcDH1wZs8EY9DDaxL097TRM.roa
Signing time: Tue 02 Jan 2024 10:33:43 +0000
ROA not before: Tue 02 Jan 2024 10:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42214
IP address blocks: 91.246.28.0/24 maxlen: 24
91.246.29.0/24 maxlen: 24
2001:678:4bc::/48 maxlen: 48
2001:678:47c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:80:ea:53:a5:19:7f:54:fc:f0:04:40:f6:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 2 10:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b3398dc0c7d7066cf0463d0c36b12f4f7b4d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:26:73:ff:df:82:7c:32:44:a5:03:1e:27:
4d:0d:47:15:8c:af:ca:ef:61:1d:3b:dd:b5:84:56:
d9:5b:3f:e8:17:70:c6:4b:28:ce:54:6d:d9:bd:0b:
cd:c0:84:29:8c:52:94:f4:dd:9a:74:71:1e:bb:d4:
18:a8:23:f7:ed:bc:91:80:3c:e2:d8:00:2a:1a:0a:
8d:3e:38:54:3a:a3:9b:0d:e8:f1:0e:df:82:c1:44:
cd:7b:01:23:61:76:e7:0e:46:d9:4b:9e:7d:de:e5:
9b:cc:3d:70:11:63:8e:25:5d:ea:f0:7e:b3:fd:9d:
90:d7:7e:56:88:9b:37:4f:0b:55:b9:eb:07:16:6a:
04:dc:2e:01:bc:04:10:01:d6:02:83:f5:fc:92:74:
1d:9e:17:dd:f5:6b:df:62:c6:95:7a:10:2f:18:ef:
11:ef:ab:3c:82:71:75:99:90:f6:ca:9c:60:82:76:
3a:46:6e:22:b4:4d:98:24:48:3d:fe:67:bd:ce:49:
e1:35:dc:a4:1d:04:05:ac:6d:32:e1:04:fa:ae:35:
69:18:5b:99:43:8a:53:e7:33:dd:83:57:bf:a0:9b:
7d:3b:22:0f:b4:b0:8d:66:7b:cb:bc:3b:1d:22:bf:
97:ab:49:f8:b2:37:ed:f3:f4:b2:5d:2f:ad:d5:e6:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:39:8D:C0:C7:D7:06:6C:F0:46:3D:0C:36:B1:2F:4F:7B:4D:13
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/GbM5jcDH1wZs8EY9DDaxL097TRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.28.0/23
IPv6:
2001:678:47c::/48
2001:678:4bc::/48
Signature Algorithm: sha256WithRSAEncryption
11:93:68:51:9a:92:1c:97:ec:e6:91:4c:d2:ea:ad:98:43:94:
99:21:02:9e:7a:df:58:70:fc:b2:75:7f:b1:c3:c9:92:83:82:
28:2b:e1:cc:d5:fb:72:f2:72:0b:3b:dd:0c:7e:c7:5b:37:9b:
62:7b:e0:05:a7:07:77:b4:a2:6b:9e:3e:a2:83:f6:ac:94:29:
8f:d0:3e:49:31:09:00:ce:60:e0:dd:9a:41:dc:88:1d:59:98:
dd:d3:a8:73:47:b5:60:74:6f:80:d8:2e:66:28:01:b6:46:5e:
bc:62:bf:a9:27:7e:fa:6d:50:e6:7e:b3:65:d0:40:92:28:b9:
9c:dd:5f:25:3d:8c:39:67:5c:11:12:23:b3:31:93:0f:51:fd:
d8:f9:37:38:b0:5c:03:77:ae:4a:56:6c:e9:58:8e:44:b3:a9:
22:a4:67:fa:66:22:4e:2c:28:48:83:6c:c3:3b:56:35:29:b7:
1d:54:92:eb:71:eb:ef:53:74:07:44:1f:6e:d7:65:e3:61:2b:
32:5c:e7:57:f1:e4:20:6d:46:9a:b4:13:5b:84:dd:78:aa:c9:
66:16:57:6f:c8:59:45:1b:6a:5c:06:24:f7:21:44:61:4d:fc:
11:8f:d7:ee:15:a1:13:20:0b:4f:1f:3a:5e:57:65:48:84:d6:
87:37:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:06:16 2024 by rpki-client on console-fra.rpki-client.org