Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G7H_fqxH2wpNWoZxghL99WWLR08.roa
File: G7H_fqxH2wpNWoZxghL99WWLR08.roa (raw, json)
Hash identifier: 5QT95sE8k5pKqD8jJpoVnewcb/Vu7xthjTX1Wec2fdU=
Subject key identifier: 1B:B1:FF:7E:AC:47:DB:0A:4D:5A:86:71:82:12:FD:F5:65:8B:47:4F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6C42D94109A24779DCE4E53FD781
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G7H_fqxH2wpNWoZxghL99WWLR08.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211526
IP address blocks: 2a01:5a8:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6c:42:d9:41:09:a2:47:79:dc:e4:e5:3f:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bb1ff7eac47db0a4d5a86718212fdf5658b474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:0e:53:f2:3a:57:a6:9f:71:b2:b7:bd:a1:
ec:5f:6a:20:6a:12:47:a7:a9:92:49:2e:51:33:c8:
58:33:6e:90:f9:c0:60:35:e2:26:68:40:7d:46:9e:
fb:de:3c:d3:60:e2:fc:8b:9a:2b:a1:86:12:e1:2b:
e8:12:4c:82:c8:46:3a:a7:55:2a:15:03:31:3f:d5:
df:b3:44:30:92:85:54:09:9b:03:68:a0:62:c6:74:
df:9b:68:3f:07:8f:3f:48:dc:8c:ca:c2:5b:27:aa:
c3:bc:09:2a:d3:c0:6d:df:00:5d:ef:71:83:70:c4:
3b:eb:74:d4:14:c8:6c:20:64:2d:a1:14:f0:ec:1c:
00:b2:2c:3b:ed:57:7a:2f:74:60:b1:5c:7b:e2:46:
63:2f:7d:53:d7:36:18:49:f8:03:df:0e:36:2e:26:
e9:fb:5a:f0:e1:2c:cd:7e:7e:5d:69:ff:99:b4:7a:
94:30:f5:9d:b9:37:ff:14:23:75:6c:6a:0b:ba:bb:
39:48:5d:62:60:26:f2:0d:fe:eb:2d:33:26:97:f9:
a4:e4:e0:cc:e7:78:2a:bd:20:32:47:62:6d:de:38:
85:00:53:e6:0f:6e:4b:ba:f7:f5:83:66:30:64:22:
e1:ef:94:c2:2c:99:a0:89:b1:11:bf:c1:b2:65:89:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:FF:7E:AC:47:DB:0A:4D:5A:86:71:82:12:FD:F5:65:8B:47:4F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G7H_fqxH2wpNWoZxghL99WWLR08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5a8:8::/48
Signature Algorithm: sha256WithRSAEncryption
81:21:ee:bd:a9:9e:35:08:f8:10:43:c8:bb:7b:f2:5e:56:81:
53:26:d9:b6:a5:df:2d:40:7c:fb:7d:c1:e8:b0:5b:7c:27:9a:
cb:d0:78:5b:34:48:aa:b4:82:fa:1c:fa:80:fa:e7:ba:2f:80:
d8:14:0a:ad:63:76:18:d2:ff:20:1a:9d:d9:af:00:d5:80:5e:
8a:01:75:ba:49:8d:73:7c:d4:ac:1f:23:1f:f4:7d:6b:f8:fe:
3a:87:8e:59:52:1c:07:5d:ff:d1:9b:c7:c2:3e:a6:4a:a7:6d:
c4:cb:2a:44:a5:c4:d3:b9:eb:fc:a8:a2:d6:a2:29:5f:fe:71:
83:26:65:1c:a4:78:c5:a6:64:ac:c2:f2:98:c5:f6:77:cd:0d:
b9:2f:cb:e1:ba:64:ff:25:89:17:80:27:63:15:fc:f1:19:a7:
2d:86:0b:07:13:be:db:4f:53:74:22:fc:bc:6b:a4:86:ad:ca:
c6:3f:3a:43:f7:5d:e7:67:87:01:9b:ff:59:56:c5:fc:f3:7d:
29:c2:5a:5e:e2:61:70:0e:4a:64:13:1f:ce:cd:f6:42:a9:6d:
45:2b:6f:2e:22:8f:d9:6f:21:70:66:ad:32:b8:46:bf:a7:c1:
5c:85:4c:85:40:83:b4:af:be:60:5f:cb:ba:d2:18:b5:3f:b7:
96:c1:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org