Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GKx0CmHzTwc6qOo3_CuOrykQwGc.roa
File: GKx0CmHzTwc6qOo3_CuOrykQwGc.roa (raw, json)
Hash identifier: XbkPzIM5CNo8bhg3QG6JDY8Hft1wKplgSq2RRCGXtM8=
Subject key identifier: 18:AC:74:0A:61:F3:4F:07:3A:A8:EA:37:FC:2B:8E:AF:29:10:C0:67
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191930A2CDC0F55DE0C4F1CE6B27CC0AC70
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GKx0CmHzTwc6qOo3_CuOrykQwGc.roa
Signing time: Tue 27 Aug 2024 08:53:23 +0000
ROA not before: Tue 27 Aug 2024 08:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51281
IP address blocks: 77.87.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:0a:2c:dc:0f:55:de:0c:4f:1c:e6:b2:7c:c0:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 08:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ac740a61f34f073aa8ea37fc2b8eaf2910c067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:c1:d9:9b:e5:af:b9:eb:20:20:49:34:e2:
0d:98:76:79:d0:54:8c:fe:e3:71:e6:8a:f8:0e:ab:
53:89:ae:98:14:0a:bc:51:48:a1:48:ce:03:19:3c:
98:ea:22:42:f2:b2:7b:d1:a4:32:3b:90:74:07:5d:
57:3a:b3:15:45:5d:e3:c1:84:84:fe:5e:87:33:0b:
d5:cf:26:26:66:8f:03:6c:9a:03:2f:bc:fa:9e:e5:
7f:0f:77:1c:c7:a7:88:fb:3e:54:be:c2:f1:df:81:
0a:bb:c4:4b:89:6e:4b:57:41:45:7a:7f:cb:43:5c:
5f:43:e9:c4:15:fa:49:96:06:dd:4f:1c:71:be:bb:
93:f2:71:3d:c9:1c:2d:3f:d0:b7:39:b1:54:3a:78:
3d:3b:79:e7:df:e2:ec:3e:a4:9d:04:7b:c8:a4:29:
d9:d2:cf:eb:61:29:8c:78:f1:48:77:90:94:01:ca:
c3:1a:c8:ba:95:ae:e1:dd:4b:3c:8d:6e:8b:0f:2a:
be:55:14:51:4d:1f:bb:b2:b2:32:58:27:e5:75:61:
f3:ed:cf:4c:e7:ee:c7:1f:9d:09:6b:86:e3:31:dc:
6b:76:d2:3e:13:89:2a:f7:4a:7b:81:c7:99:41:65:
ca:a2:6a:05:f3:66:6a:9d:ee:ac:7e:7a:88:b8:1d:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:74:0A:61:F3:4F:07:3A:A8:EA:37:FC:2B:8E:AF:29:10:C0:67
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GKx0CmHzTwc6qOo3_CuOrykQwGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.112.0/21
Signature Algorithm: sha256WithRSAEncryption
24:05:d3:08:20:63:0d:f6:bc:1d:7f:ae:9c:e1:82:dd:69:59:
ab:7b:4c:04:74:85:4d:2d:2f:7f:77:cb:3a:27:f4:68:80:a9:
4a:bb:a0:b2:55:86:d1:e0:70:d1:81:99:23:af:03:ab:80:63:
5f:0f:13:ac:60:25:d0:f7:a7:a0:77:03:d4:d0:d0:74:83:62:
ff:b0:42:52:85:98:6b:57:1e:02:47:ad:e4:17:20:86:7e:96:
14:8c:ab:d3:e3:1f:43:6c:3a:37:90:2c:71:aa:6f:92:18:29:
58:24:fe:90:f5:7e:a5:62:d6:03:1c:47:44:12:f9:9d:bc:92:
7a:b0:04:51:32:d7:1c:09:42:41:b4:db:7e:7c:ee:a4:63:c5:
5f:35:71:8d:e5:1a:af:3b:8e:40:a6:00:9a:3b:dc:d7:00:3f:
64:ba:3e:64:35:df:a5:49:1e:2f:0a:18:0b:3a:e5:5d:a3:5e:
a3:d8:49:c8:b7:75:9a:aa:a2:e9:a7:6d:64:a4:1e:7e:8f:f7:
1f:8b:97:79:70:49:16:2a:8a:08:3f:cd:0f:24:ee:7a:47:bc:
24:6e:2f:ed:08:4e:ef:5b:60:92:5e:5f:2e:d4:41:12:9d:52:
d4:94:a1:79:8f:f6:54:29:6e:f2:5a:23:84:0c:fa:0b:1b:98:
88:78:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:56 2024 by rpki-client on console-ams.rpki-client.org