Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/GxZvgHEXdH-35Y6dZJ7Vm3sf8kU.roa
File: GxZvgHEXdH-35Y6dZJ7Vm3sf8kU.roa (raw, json)
Hash identifier: QWBg/VyFQib5CPJSfA8myIWjw2hVYghwkT9NOeHoopo=
Subject key identifier: 1B:16:6F:80:71:17:74:7F:B7:E5:8E:9D:64:9E:D5:9B:7B:1F:F2:45
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 018CC3490C182A1D4E20786803AA0BCCB503
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/GxZvgHEXdH-35Y6dZJ7Vm3sf8kU.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201959
IP address blocks: 185.58.64.0/22 maxlen: 22
2a04:df40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0c:18:2a:1d:4e:20:78:68:03:aa:0b:cc:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b166f807117747fb7e58e9d649ed59b7b1ff245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:70:fe:46:1e:f7:e4:cb:1e:fd:50:18:9a:
17:d1:df:b6:39:7a:3a:ab:36:d0:ba:33:19:ef:d4:
ae:35:ae:e2:f0:d0:3e:38:1c:51:9b:90:1d:27:5b:
2c:b3:2e:fd:ec:69:7a:57:17:22:52:f3:74:be:ee:
f0:c1:9e:c9:2f:44:aa:52:f3:fe:bf:e4:80:e0:c5:
a3:a5:c1:4d:a8:95:da:fb:c0:aa:f3:86:47:a6:97:
ec:e9:4b:77:c8:f3:c2:af:a5:72:cb:40:60:f7:17:
b0:18:20:4f:37:5e:a0:a0:ad:6f:af:02:6c:56:e8:
48:06:48:9b:e1:f4:ae:2c:a3:1d:75:2c:d1:3e:27:
2d:1b:5d:80:a4:ad:51:ff:dd:3c:d0:76:40:96:71:
5b:41:ae:ad:68:9c:f9:6e:ca:81:3d:66:02:12:8e:
d5:07:0d:c4:04:14:ef:c0:06:cf:8d:3b:7b:22:e1:
bf:3d:50:39:0b:bc:d6:17:4d:dc:71:08:b4:cf:54:
62:fd:13:6f:14:2f:c7:fd:ec:d8:1d:d2:02:40:36:
5b:34:08:0a:38:43:8e:48:ed:de:e6:4c:96:04:78:
23:21:6d:75:cd:7f:f0:03:39:89:23:2c:f2:07:f9:
71:5d:84:84:84:f7:52:9b:ba:d0:c1:0b:03:27:fe:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:6F:80:71:17:74:7F:B7:E5:8E:9D:64:9E:D5:9B:7B:1F:F2:45
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/GxZvgHEXdH-35Y6dZJ7Vm3sf8kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.64.0/22
IPv6:
2a04:df40::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9c:7c:88:d4:59:c1:1b:1d:e6:70:20:b7:95:f0:f5:15:2d:
d6:94:32:d0:c7:9b:f6:2f:3a:2f:fa:8e:18:c9:fd:2e:45:3e:
a6:70:f2:04:ee:1e:42:19:69:e1:75:e7:cc:2c:c8:c2:71:9f:
0d:0e:ad:3c:d2:e9:1e:3e:5c:1e:14:c4:03:d4:63:b4:53:18:
d8:e6:6d:cf:29:e8:2d:d4:e7:0d:1c:c0:3b:c9:ae:40:7d:35:
a5:07:a4:4a:1a:d6:b0:37:84:48:3e:40:91:76:7c:18:54:ff:
84:e4:06:51:83:94:62:23:c6:16:62:86:cb:78:69:3c:2b:db:
6f:e2:fe:c6:2c:90:12:3e:9d:83:82:26:09:aa:34:4c:6a:58:
3d:98:f9:6b:f1:85:1e:40:10:77:0d:ae:92:61:dd:35:4d:c5:
d5:5a:23:a0:7c:52:8b:c0:07:a1:0b:0d:92:b9:52:59:e3:ca:
30:53:5b:90:2b:3f:44:e7:aa:72:10:be:df:84:8d:44:04:d2:
e1:76:ed:76:94:40:52:3e:0c:89:d2:32:30:2b:e7:ef:a1:23:
53:8e:91:d7:fb:4c:b8:f0:91:07:a8:05:26:3e:f5:74:39:05:
c4:cc:76:aa:16:97:0f:c0:36:10:ca:6e:ec:74:ab:ad:a9:02:
7e:b4:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:59:29 2024 by rpki-client on console-ams.rpki-client.org