Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/GVLd2uhGVJnrbESg_ejdN6McY8c.roa
File: GVLd2uhGVJnrbESg_ejdN6McY8c.roa (raw, json)
Hash identifier: H4puExoZhfTixqIDy3Q8LlIPM+lCraQbXgnbV9GUuZk=
Subject key identifier: 19:52:DD:DA:E8:46:54:99:EB:6C:44:A0:FD:E8:DD:37:A3:1C:63:C7
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 018CC9BCBEF362E778882C38A372D9CFBFEC
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/GVLd2uhGVJnrbESg_ejdN6McY8c.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:be:f3:62:e7:78:88:2c:38:a3:72:d9:cf:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1952dddae8465499eb6c44a0fde8dd37a31c63c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:ff:57:f9:b3:60:58:55:36:99:b2:7e:71:
c7:1d:55:66:aa:15:63:e1:89:75:e0:d6:d3:52:ca:
eb:0c:fa:5b:ff:6e:9a:81:f2:77:da:c2:fd:61:55:
2c:66:fd:60:eb:ca:94:db:2d:2a:c0:e2:a7:bf:8e:
a8:fc:f7:3b:cf:5b:83:05:5d:55:2f:7d:fa:7c:26:
92:8e:aa:65:ed:61:a7:3b:13:09:2c:34:22:d7:05:
f7:81:b7:92:62:44:1f:2e:e6:9a:fc:e4:f7:a0:fb:
14:cc:8c:33:71:07:8a:f6:51:ba:ba:12:d5:6b:04:
db:54:7b:bb:6d:c2:fc:13:9a:17:e4:c4:b7:7a:bb:
e5:3b:8a:5e:bd:7f:31:fa:9d:5e:61:7b:5d:3f:fc:
95:09:c2:38:f2:7e:5b:79:c5:b0:e9:1c:51:a5:7c:
ab:fe:52:11:78:69:89:9f:d1:42:02:0c:d2:4d:a8:
83:5f:eb:8b:f0:4d:a2:f1:56:50:c9:9a:37:a4:eb:
98:b7:70:59:fd:27:90:1b:96:6e:3d:5d:4b:d8:8e:
6a:b6:36:8d:a9:74:7a:01:b0:dd:ae:64:8a:b3:4f:
f7:fe:9a:70:2e:23:84:ba:65:1a:57:87:94:14:f2:
f7:22:d0:3e:c0:aa:52:e9:80:65:5d:b7:94:61:37:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:DD:DA:E8:46:54:99:EB:6C:44:A0:FD:E8:DD:37:A3:1C:63:C7
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/GVLd2uhGVJnrbESg_ejdN6McY8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e6:8d:09:84:4a:49:24:af:88:6e:a1:ff:1c:1c:a0:db:e7:
1f:d0:a7:b0:25:bb:b7:55:bf:9a:56:7c:d6:40:6b:02:a0:b4:
a4:e1:50:d5:58:7d:77:43:12:0d:ff:52:c7:84:a4:77:e5:67:
97:2b:48:5c:37:05:cb:20:09:24:c6:05:eb:94:70:81:be:5e:
8a:4d:b2:08:7f:f3:f1:b0:39:8f:24:4a:1b:61:9b:29:5f:0e:
cd:8a:69:17:1d:5a:ae:34:a5:5f:22:f3:ac:d9:ee:60:19:2c:
79:7e:87:6b:e1:0c:ba:1b:4c:71:26:53:f5:3d:fc:3c:06:a7:
37:a2:23:5f:f6:da:94:71:03:37:86:ab:fd:66:e5:ae:f9:db:
d5:b4:af:dc:d5:49:74:9b:16:b9:d3:70:2e:3e:b1:f8:33:0c:
58:31:00:57:9d:d9:be:ab:1a:26:d5:72:b1:6e:7f:ec:33:55:
0f:41:a3:a1:18:d0:b6:9b:76:3c:52:b8:7f:0e:65:cc:90:05:
b5:ef:74:8f:18:61:c8:8d:4e:8a:4f:86:85:82:69:bf:fb:57:
65:ca:37:ea:cf:89:d4:e2:61:ba:42:ee:c4:8b:dc:c9:0a:03:
bc:c2:ed:d2:07:c7:65:d5:8d:1f:62:de:53:d6:7c:b0:50:b2:
f5:67:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:56:11 2024 by rpki-client on console-ams.rpki-client.org