Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Gxu_cZ8ndDsrzvdYsAr6pal8EJw.roa
File: Gxu_cZ8ndDsrzvdYsAr6pal8EJw.roa (raw, json)
Hash identifier: uHGdvVlN/EW5gyZ8gtDsKm0eNulv2GJJO0ck7XbUU+8=
Subject key identifier: 1B:1B:BF:71:9F:27:74:3B:2B:CE:F7:58:B0:0A:FA:A5:A9:7C:10:9C
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 018CC64B0DB40D715AF2086BF42B66B65E52
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Gxu_cZ8ndDsrzvdYsAr6pal8EJw.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35819
IP address blocks: 194.36.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0d:b4:0d:71:5a:f2:08:6b:f4:2b:66:b6:5e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b1bbf719f27743b2bcef758b00afaa5a97c109c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:92:d1:c6:a4:ad:76:11:75:2e:c3:b6:d1:
34:05:ba:09:4c:c2:82:b9:9f:9a:dd:6a:65:23:0f:
a9:f6:db:8d:c2:4d:58:a2:7c:5d:a5:b3:bc:fa:d4:
51:58:1d:5c:85:2b:1e:aa:36:f1:15:56:0a:a9:64:
b0:fe:e0:2a:d3:73:86:37:69:3f:55:4a:9c:2a:e7:
4e:1d:60:92:e5:44:d4:9d:40:39:a9:56:a0:13:0f:
b1:e1:82:eb:95:25:3c:c5:0b:aa:a3:db:de:a3:65:
b7:62:99:6d:6c:ec:6f:2b:b4:70:50:ae:91:71:99:
08:1f:ad:d4:f8:89:16:d0:98:89:ee:ff:09:a1:a0:
8d:94:61:92:52:31:ac:46:5f:79:2b:e8:8b:b5:92:
24:ae:54:8f:56:3f:f6:cf:fc:31:22:5f:22:4e:dd:
00:fc:21:f9:2d:f1:82:59:1d:c6:ea:40:8e:e2:a1:
41:46:ff:ed:92:81:d7:02:06:d0:5d:c0:f7:55:b7:
af:5d:2f:53:e6:5b:4a:4d:e0:b3:ac:0f:ba:f6:f2:
9d:0e:de:83:20:a3:88:a0:56:87:35:89:10:3d:5c:
b2:45:8c:db:82:f1:e4:70:37:59:7a:8a:37:e1:e7:
78:13:af:77:d4:8d:fc:0e:4b:8e:fc:31:17:9e:cd:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:BF:71:9F:27:74:3B:2B:CE:F7:58:B0:0A:FA:A5:A9:7C:10:9C
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Gxu_cZ8ndDsrzvdYsAr6pal8EJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.164.0/24
Signature Algorithm: sha256WithRSAEncryption
69:57:ce:ae:77:61:5f:b9:2e:32:e7:c0:3c:36:11:7f:b6:24:
58:cb:9c:ce:96:d0:f3:76:96:c4:74:be:b8:45:22:51:6d:e1:
cd:a8:06:75:c9:db:24:49:96:cf:10:90:eb:2b:84:66:45:0f:
9c:0e:0f:c5:88:dd:59:4d:10:11:fe:48:f4:98:a7:6f:d5:bc:
aa:ee:a0:9f:ad:e4:ef:07:b2:78:e1:3a:d5:54:76:a9:bc:8a:
a9:c6:fe:b3:7e:23:2b:7a:fb:f0:28:ab:c7:7e:72:59:44:07:
12:8f:cc:35:e0:26:ff:ce:58:63:26:be:14:28:d8:11:83:7d:
70:9d:19:ad:c9:cf:08:3a:70:8d:cc:92:08:89:43:04:b6:6e:
07:19:1d:91:85:06:eb:cf:38:53:be:f3:9a:1d:04:2f:80:94:
21:b9:c6:03:44:8c:06:ea:a5:6c:c0:11:55:f4:32:2e:c6:3c:
7b:9a:57:ea:38:a5:1e:66:2d:d0:4f:a0:fd:f7:a9:1f:8a:b5:
a6:25:98:5c:61:46:00:cd:8c:a7:d1:ec:af:83:1d:01:80:06:
11:7f:0a:5c:17:36:c7:b4:4b:2b:12:0c:b4:ef:88:47:ef:64:
58:9f:a9:6b:ca:d1:50:0f:32:89:2d:fa:c9:db:13:89:db:55:
73:d6:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:09:34 2024 by rpki-client on console-fra.rpki-client.org