Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GJb4dqoKjGsdQgIKfCZits6P6F8.roa
File: GJb4dqoKjGsdQgIKfCZits6P6F8.roa (raw, json)
Hash identifier: SJVXKhwZnzPKPx9CGkvoTq5OitoXAUwYlnNR3LWkPJA=
Subject key identifier: 18:96:F8:76:AA:0A:8C:6B:1D:42:02:0A:7C:26:62:B6:CE:8F:E8:5F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FB48E69872DE6D04E149EBD895D1D9F68
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GJb4dqoKjGsdQgIKfCZits6P6F8.roa
Signing time: Sun 26 May 2024 10:59:42 +0000
ROA not before: Sun 26 May 2024 10:59:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215391
IP address blocks: 45.138.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:8e:69:87:2d:e6:d0:4e:14:9e:bd:89:5d:1d:9f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 26 10:59:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1896f876aa0a8c6b1d42020a7c2662b6ce8fe85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:45:77:d4:ba:19:00:55:f3:bc:ca:0c:55:
6b:54:0a:8a:de:a7:51:62:50:ec:73:0a:60:fa:7b:
06:29:1c:86:b1:7d:b9:af:18:83:a0:f2:ea:9e:cc:
01:88:b6:2c:7b:87:0e:b6:14:97:fc:36:58:f2:b2:
d1:94:5c:3e:76:3d:9a:a7:d7:83:1d:82:dd:9b:24:
44:cc:98:a8:ce:02:a3:a8:6b:a8:4b:e8:34:e7:e0:
51:97:56:ac:c7:90:48:98:a7:4e:34:5f:f3:29:f8:
4d:f0:cd:63:1d:92:ec:d7:f1:86:44:c9:8b:29:e9:
be:f8:02:63:88:67:3e:d6:be:89:f1:ca:81:cc:bd:
a3:66:b7:ed:de:70:79:78:3e:93:65:4a:b0:fc:e1:
1b:3f:11:df:09:8a:92:27:bc:42:d7:ef:5e:dc:f8:
0a:fb:c4:9d:86:f1:da:06:fb:ed:e9:96:26:1e:92:
39:ac:5f:3b:9b:b2:f0:41:f4:5d:63:77:50:f1:01:
c5:8c:eb:b4:c1:97:1a:82:d4:72:b4:17:d1:59:b4:
8c:27:4c:d2:e3:a9:00:1c:30:5c:f9:eb:c1:ad:6c:
2b:97:67:c1:a3:f7:04:0c:6c:ab:df:d8:28:34:8e:
58:e0:ca:96:44:2c:47:6d:5b:81:a3:76:e9:68:25:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:F8:76:AA:0A:8C:6B:1D:42:02:0A:7C:26:62:B6:CE:8F:E8:5F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GJb4dqoKjGsdQgIKfCZits6P6F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1c:34:be:18:38:d7:e4:68:20:f9:e1:b6:71:ef:83:79:f6:
b6:55:1f:cd:40:b3:be:bc:19:68:ab:00:c5:54:79:ae:48:0c:
da:cd:80:a9:52:7e:c2:ae:ec:64:37:3a:70:01:b1:e3:52:0b:
30:1f:c5:ac:e1:35:33:e4:12:99:c5:e7:f2:8c:99:ea:0f:3a:
d5:a6:02:ee:b9:d9:c1:b3:d3:25:ff:69:a8:9e:7c:82:8e:02:
1c:c4:05:5b:28:ac:5d:75:84:ae:98:d5:6f:64:b2:40:53:17:
df:8b:3f:1b:2e:f0:93:1d:20:6a:d7:8d:e3:e4:09:73:80:76:
99:85:80:48:7c:49:0b:da:06:5c:b8:55:37:3e:9f:af:8c:56:
fa:ad:25:02:8f:64:8f:9e:ef:20:19:80:3c:07:2a:c3:f7:7c:
59:b0:bf:3c:1f:ec:77:da:a9:e7:b9:55:0f:1b:4e:97:de:32:
e5:16:b4:5d:4d:c1:a4:7f:ad:9b:87:c3:49:6d:e6:b2:5e:3e:
cc:d4:dd:2a:59:03:73:cd:a4:d8:df:32:32:a7:3a:c3:e1:1f:
96:77:ca:70:53:0e:a0:29:fb:42:26:55:30:c4:a8:b9:a8:4e:
6d:c4:66:79:2c:a1:40:1f:57:96:25:7a:55:d3:cf:f2:c1:f6:
66:3a:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:48:37 2024 by rpki-client on console-ams.rpki-client.org