Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/DIpW62Ot7dFKE18kT6dT5dGWwNE.roa
File: DIpW62Ot7dFKE18kT6dT5dGWwNE.roa (raw, json)
Hash identifier: B2jV722fkcruNHVlT+cGsULF+XgOjB43XGXYRmx4l2E=
Subject key identifier: 0C:8A:56:EB:63:AD:ED:D1:4A:13:5F:24:4F:A7:53:E5:D1:96:C0:D1
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 015F01
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/DIpW62Ot7dFKE18kT6dT5dGWwNE.roa
Signing time: Mon 17 Jun 2024 00:14:14 +0000
ROA not before: Mon 17 Jun 2024 00:14:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3970
IP address blocks: 45.132.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 07:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89857 (0x15f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:14:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0C8A56EB63ADEDD14A135F244FA753E5D196C0D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:e3:6e:89:a5:7e:f1:17:9a:4c:04:82:40:
0f:70:39:17:ac:3e:9c:b0:93:42:1b:7f:08:46:94:
2b:cd:7a:7a:90:a4:97:3a:28:04:d5:5b:a4:8c:c7:
ef:e0:ad:76:01:e1:c5:42:97:a7:3d:d6:3d:5c:50:
6b:7d:59:80:b6:88:7f:2f:01:85:ed:07:58:50:2d:
2b:af:d4:80:1d:9b:da:2e:48:ac:48:43:3f:46:1b:
34:32:ec:c5:26:f0:d5:1f:a8:c3:c5:4c:f3:27:5d:
81:62:c5:f1:dc:8e:41:82:bd:81:ff:fb:70:b8:62:
58:17:53:1c:95:60:af:42:1a:74:79:5c:37:f8:5b:
7e:11:69:86:38:9d:4c:c5:74:41:69:6c:26:9f:5e:
a3:8c:e6:a3:c3:c4:c9:4b:8d:91:2b:18:b1:e4:80:
5a:de:86:43:e2:de:9e:e6:c8:dc:35:0a:4f:f3:8f:
56:0f:52:ba:c7:bc:ff:dc:e6:62:9d:e1:76:24:84:
d4:ac:b5:21:c6:c8:a8:6c:51:88:b0:9f:47:13:9e:
de:05:0f:20:0b:ca:a0:ec:bd:bd:81:27:01:cb:e0:
2d:26:b3:c3:70:18:e2:d3:1b:15:95:41:2c:61:8d:
a6:9b:b7:89:65:66:8a:d6:ec:0e:cb:f2:32:25:8a:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:56:EB:63:AD:ED:D1:4A:13:5F:24:4F:A7:53:E5:D1:96:C0:D1
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/DIpW62Ot7dFKE18kT6dT5dGWwNE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
58:42:fc:db:98:63:2b:c5:cf:91:e1:cc:f6:61:12:4a:3f:ff:
b3:53:e9:76:f2:ae:cd:4d:a4:77:26:79:6c:6d:93:8b:a1:06:
d2:12:17:d4:02:bc:2e:31:af:a2:95:26:a0:f4:d1:b3:7b:ba:
00:b7:2f:e4:f1:78:7a:0d:fb:3a:09:71:f2:ba:9a:58:03:60:
97:ca:f8:e1:0a:38:d6:69:a5:d2:28:b2:21:64:27:e3:28:13:
32:b5:37:ea:08:a2:d6:58:65:21:b9:b1:95:e8:05:58:21:c9:
4f:4c:23:14:67:24:9d:22:6c:96:be:66:0a:98:61:3b:09:b6:
34:38:37:9d:9a:d7:22:99:2a:11:ab:27:9e:42:89:31:e0:77:
cf:95:b6:fd:ba:f6:d3:aa:00:2a:7b:54:64:eb:8d:8b:52:3c:
3f:bf:ab:fb:43:c9:67:9d:16:ff:7a:5a:8d:22:c2:2d:ef:82:
80:c9:8a:13:93:56:47:8d:29:87:4d:6c:79:ab:76:33:82:ce:
b1:3a:2d:ed:18:be:50:7a:c3:eb:d1:ee:a3:3a:26:c7:54:8a:
71:e8:cb:4c:8c:8b:ff:e3:e0:11:46:bd:92:b3:5d:78:d8:0c:
80:23:5e:99:d7:16:c5:13:81:a7:a6:07:26:13:01:f1:54:52:
1a:1b:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:35 2024 by rpki-client on console-ams.rpki-client.org