Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/QS2kJBtmt1RhbzbbPFHSY8iuyN0.roa
File: QS2kJBtmt1RhbzbbPFHSY8iuyN0.roa (raw, json)
Hash identifier: wLNfIjfjB/Cufsq2+1DPwegAsj4qNltdJvWamauPm58=
Subject key identifier: 41:2D:A4:24:1B:66:B7:54:61:6F:36:DB:3C:51:D2:63:C8:AE:C8:DD
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 010DF7
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/QS2kJBtmt1RhbzbbPFHSY8iuyN0.roa
Signing time: Tue 11 Apr 2023 19:28:38 +0000
ROA not before: Tue 11 Apr 2023 19:28:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199518
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69111 (0x10df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 11 19:28:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=412DA4241B66B754616F36DB3C51D263C8AEC8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:7e:c3:2a:36:2e:b9:dc:ab:b9:4d:57:33:
8c:2a:0f:07:b6:63:c0:3e:5f:6a:31:d4:2a:d3:b3:
fb:00:ea:ee:b8:b8:7a:dc:65:98:a0:4b:4a:7c:63:
bc:ef:cb:9b:5c:80:9e:07:43:b4:b6:a4:42:33:ab:
af:09:05:d9:9a:a0:63:19:9b:77:d4:f4:09:32:19:
fa:31:eb:36:b6:56:d4:b7:00:13:67:37:02:03:5a:
00:fa:4d:97:0c:f7:5b:6b:17:ce:78:b6:f1:b1:f0:
30:48:d1:db:0d:c8:d8:3e:8a:17:4f:11:d4:c4:76:
aa:ee:ff:02:0e:ce:a7:bc:f4:4d:36:a2:72:87:a0:
0b:83:ef:e7:16:dd:01:0e:f9:c6:7c:f1:de:20:66:
25:2e:0f:96:35:57:42:cc:5c:8b:0a:3f:7e:f2:e5:
81:a9:ca:d3:22:80:3d:61:d1:7e:9d:14:f7:49:c7:
9b:b5:e3:9f:3c:7f:4f:4f:2f:05:1f:df:8d:6b:77:
84:38:f4:5e:65:ed:f2:4d:f2:1c:c5:2f:c3:a7:47:
ea:4d:b4:fd:cb:d5:33:09:5d:d9:51:e6:f7:c0:02:
be:93:b2:5c:59:13:d8:99:01:b4:1c:df:23:7d:a6:
fa:59:3e:7d:26:a5:3a:75:27:96:bd:3e:3e:31:2e:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:A4:24:1B:66:B7:54:61:6F:36:DB:3C:51:D2:63:C8:AE:C8:DD
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/QS2kJBtmt1RhbzbbPFHSY8iuyN0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ed:fb:4c:c1:c6:6d:ea:bc:66:28:54:29:0a:d6:df:82:10:
80:ec:dd:da:47:fb:66:bd:48:e7:f3:e5:f8:c4:c8:51:3f:c2:
b4:e4:01:29:ca:d3:d7:c3:7e:e0:61:f6:9d:af:c9:dd:7f:d5:
12:b4:eb:04:67:56:5d:e0:8a:a8:99:f7:83:8b:f7:2b:35:12:
83:1d:fd:2d:ed:7b:9b:45:36:c8:b4:7f:21:21:a0:8a:f0:b9:
5a:70:05:a8:1e:14:4c:a0:1b:17:eb:f6:4b:ff:92:49:5b:d7:
a9:1f:ca:a7:d5:1a:66:83:f4:06:d5:6d:3d:78:88:0a:c9:1a:
aa:73:e7:be:1f:eb:64:d4:68:16:6a:d7:6e:e1:f5:82:74:88:
96:84:34:0a:c8:22:1f:cd:4d:5c:4c:3c:21:61:d2:14:8c:6e:
42:cf:05:8f:6a:0c:ee:5d:72:46:a0:bb:53:45:07:56:5b:3f:
97:c2:05:5d:df:6d:a1:c5:c4:b2:bd:f0:37:f0:8b:02:58:dc:
bb:3d:25:1c:d8:11:54:2e:3f:9b:3f:7e:6e:73:93:55:35:ff:
76:17:68:e5:13:37:30:fc:f2:13:21:15:06:75:cd:57:46:14:
62:24:a2:ad:0c:a5:10:22:10:3e:e7:44:7c:f8:00:d4:c5:83:
b9:c1:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:16:34 2024 by rpki-client on console-fra.rpki-client.org