Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GwJgUCh_gQio_BcTsdi44InbgV0.roa
File: GwJgUCh_gQio_BcTsdi44InbgV0.roa (raw, json)
Hash identifier: arXwf568yHQjcKdbHYWZPuCqSIB3W1mwN8P5KvdxddA=
Subject key identifier: 1B:02:60:50:28:7F:81:08:A8:FC:17:13:B1:D8:B8:E0:89:DB:81:5D
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDC9B1A7D1860F3DFE8EAAEF21850
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GwJgUCh_gQio_BcTsdi44InbgV0.roa
Signing time: Tue 02 Jan 2024 06:31:37 +0000
ROA not before: Tue 02 Jan 2024 06:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48086
IP address blocks: 91.207.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:dc:9b:1a:7d:18:60:f3:df:e8:ea:ae:f2:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b026050287f8108a8fc1713b1d8b8e089db815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:8c:2e:4c:36:ef:e3:e2:59:33:e6:07:ad:
d4:6b:f3:9c:5a:fa:66:8e:10:7c:5f:28:c5:a4:79:
d9:08:e3:02:3e:1a:9f:23:f6:8b:3d:80:7f:ae:44:
ad:2a:74:4d:88:1d:84:42:aa:5c:06:54:d8:a6:da:
df:52:5c:fa:cd:58:c5:d0:3b:e0:d3:72:8a:45:35:
6f:6e:b4:16:33:80:ca:c6:12:4c:63:ba:4c:8d:11:
ff:01:38:3e:97:37:df:30:d8:08:51:8d:59:d8:97:
43:e7:c7:a9:7b:da:4e:53:b7:e8:a4:e6:ee:73:f7:
3d:49:ec:a8:a0:5c:3a:45:fc:b4:4d:af:da:4f:64:
29:c7:a8:93:54:6f:d2:e2:3b:c8:85:76:4b:8a:f1:
02:c2:b6:09:fc:e0:cb:09:c3:f0:ba:54:a9:d9:bb:
61:a7:f2:3c:b1:7b:17:ec:97:de:79:e9:b6:e6:91:
0c:16:90:76:c9:28:20:aa:9c:79:fd:5b:ef:10:0e:
8e:12:1a:85:a6:79:64:2f:23:cc:7d:08:cd:d8:69:
d6:a5:6b:e1:52:d7:19:5d:ea:13:b5:8d:01:14:44:
4a:27:0a:24:86:47:85:f0:e4:4a:80:40:35:ef:61:
50:f4:15:bc:71:77:bd:d3:c7:13:74:d0:9b:05:e0:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:60:50:28:7F:81:08:A8:FC:17:13:B1:D8:B8:E0:89:DB:81:5D
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GwJgUCh_gQio_BcTsdi44InbgV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8a:9c:46:37:43:6e:95:82:8f:69:da:19:5c:bb:78:d0:1b:
dd:35:0f:ae:65:a8:83:ca:a9:b7:2b:26:85:a7:2e:ae:ca:25:
9a:f5:ea:1d:3c:16:92:bf:aa:96:4a:f3:04:7f:6a:8e:29:2f:
2b:81:45:e1:ba:43:6a:fd:95:d9:c5:21:9f:09:0d:31:b1:98:
44:7b:a5:30:9a:e0:46:e5:45:26:96:36:b6:0d:aa:34:62:25:
85:9f:51:6c:3f:60:66:e3:d7:fd:f9:94:0e:a5:07:03:2f:61:
c0:8f:a7:22:7f:d1:f6:e7:f9:7f:ea:3c:da:6f:47:8e:50:59:
94:86:28:39:03:ce:72:b3:50:4c:47:4c:03:b3:f2:83:11:b2:
26:2e:eb:3b:f0:75:b2:f6:04:d9:ca:bf:38:ec:5b:91:e9:5b:
c6:de:f0:01:0c:1f:8b:4f:25:14:58:86:2c:56:54:d9:73:e1:
8c:df:47:6e:fb:28:be:75:c4:81:e8:51:45:9b:4a:53:fe:68:
fe:f7:e1:a5:66:64:bb:db:57:6c:a6:1f:25:61:c7:3b:14:9d:
94:dc:ec:08:b0:d6:09:14:0f:c1:c6:c9:58:00:72:44:04:07:
25:ce:d6:55:3f:84:d8:42:36:fa:63:d2:43:49:da:ae:f7:55:
0c:a8:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:59 2024 by rpki-client on console-fra.rpki-client.org