Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GSLCBYJQkdWIIagK-h1rTttLL3g.roa
File: GSLCBYJQkdWIIagK-h1rTttLL3g.roa (raw, json)
Hash identifier: YWDyGpR2obd5j+kCvNOvm2O3qKugPlY7Ewx3AGrT+Ww=
Subject key identifier: 19:22:C2:05:82:50:91:D5:88:21:A8:0A:FA:1D:6B:4E:DB:4B:2F:78
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192220CACB13079281D0D93E38DECB3360D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GSLCBYJQkdWIIagK-h1rTttLL3g.roa
Signing time: Tue 24 Sep 2024 03:21:48 +0000
ROA not before: Tue 24 Sep 2024 03:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35177
IP address blocks: 5.139.192.0/19 maxlen: 19
5.139.192.0/21 maxlen: 21
5.139.200.0/22 maxlen: 22
5.139.204.0/23 maxlen: 23
5.139.207.0/24 maxlen: 24
5.139.208.0/20 maxlen: 20
62.183.100.0/22 maxlen: 22
62.183.104.0/21 maxlen: 21
62.183.112.0/22 maxlen: 22
85.173.136.0/21 maxlen: 21
94.233.128.0/21 maxlen: 21
178.35.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:0c:ac:b1:30:79:28:1d:0d:93:e3:8d:ec:b3:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 03:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1922c205825091d58821a80afa1d6b4edb4b2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:71:f8:ae:28:b0:c1:48:2d:91:12:63:b4:
ce:4d:90:a8:0d:cc:0b:84:13:f4:01:dc:44:55:5b:
66:03:65:2f:88:73:e2:05:dd:73:29:2c:25:da:87:
c5:f1:68:0b:a5:a9:e5:54:5b:73:d1:d4:87:a6:cf:
c9:d4:d9:77:7c:71:af:0b:3e:ce:76:8f:af:bf:a8:
1d:4f:30:8d:5b:06:cd:54:9c:8d:88:42:16:f7:15:
0d:8f:9f:5d:16:42:5c:5d:89:fe:21:f7:70:a7:4d:
b9:ad:19:51:72:e6:0d:63:91:3d:0d:7e:c8:19:7a:
e8:b9:2c:0f:83:b6:38:60:2a:c7:b4:f2:15:e8:61:
36:51:12:6a:e4:c5:70:90:b8:b4:da:ef:18:5a:18:
af:33:14:83:98:29:1d:0d:f2:5a:b2:f0:dc:3f:34:
9c:02:21:27:74:b9:92:b5:89:7f:b4:53:7c:37:31:
ab:a7:c3:a4:ec:4d:b4:6e:67:89:00:a1:4a:00:a6:
fd:2a:96:a0:08:60:58:a0:04:7f:97:ce:40:a0:f1:
44:3b:9f:2f:8d:fb:42:79:b4:2d:ff:6d:a3:99:f9:
f4:81:14:45:e2:e7:22:c7:7f:c6:a2:0c:f1:58:8c:
0a:15:81:2f:a8:b8:ff:e0:15:28:04:92:57:66:d8:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:22:C2:05:82:50:91:D5:88:21:A8:0A:FA:1D:6B:4E:DB:4B:2F:78
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GSLCBYJQkdWIIagK-h1rTttLL3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.139.192.0/19
62.183.100.0-62.183.115.255
85.173.136.0/21
94.233.128.0/21
178.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
25:75:a5:b2:7a:49:aa:be:c8:0d:98:8b:57:c7:c4:ab:f3:be:
b6:d0:cf:b1:48:17:4c:28:e8:dd:af:64:fa:e0:d6:a9:ae:c7:
ff:d3:cf:3f:8e:fb:d5:81:e7:32:b9:d7:a8:1e:b3:14:de:54:
e3:d8:46:28:a0:07:ba:b5:39:57:b9:36:0c:cf:2e:ac:e8:7c:
17:32:3d:81:21:17:b1:60:03:00:aa:aa:a0:c1:4e:14:b8:70:
19:12:08:23:95:7d:96:96:35:4f:12:f7:cf:c9:1d:c7:0e:89:
66:62:68:e9:19:be:1f:5c:b8:f0:81:3e:e5:6f:6e:f6:09:2c:
f2:de:d4:3b:34:49:7b:df:c1:4d:5a:9f:9e:08:e1:da:79:e6:
c1:60:9e:27:cd:a9:d3:df:12:b6:dc:1e:ed:c1:53:dc:84:4a:
df:0f:fa:fb:cd:28:c5:80:c2:cb:18:7a:26:8c:29:9b:e0:77:
62:12:08:9b:cc:8d:cd:8d:ad:47:d1:be:93:5a:d2:34:ca:3e:
41:1a:be:aa:d3:66:f5:75:26:8b:a9:8e:a7:28:d4:3f:f2:16:
9f:04:1b:f1:1b:20:42:ba:f2:60:b4:bd:9a:95:cd:a3:39:c5:
8e:9a:a3:b3:b9:90:46:18:52:d9:f4:37:b7:61:39:ec:10:3e:
cb:79:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:25 2024 by rpki-client on console-fra.rpki-client.org