Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/IrcDN_7m6t4d6eX-0Lwl942jFbw.roa
File: IrcDN_7m6t4d6eX-0Lwl942jFbw.roa (raw, json)
Hash identifier: 2hFkyP9fj2LSfM/EqdJXEP4H4x2DB4x+/3lt7w+Glu8=
Subject key identifier: 22:B7:03:37:FE:E6:EA:DE:1D:E9:E5:FE:D0:BC:25:F7:8D:A3:15:BC
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 011A66
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/IrcDN_7m6t4d6eX-0Lwl942jFbw.roa
Signing time: Sat 17 Jun 2023 00:27:07 +0000
ROA not before: Sat 17 Jun 2023 00:27:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 03:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72294 (0x11a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:27:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22B70337FEE6EADE1DE9E5FED0BC25F78DA315BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:7b:90:cd:d1:8d:e4:d6:35:46:8a:6c:b9:
65:d8:8f:41:51:80:d1:52:59:e0:25:36:31:09:40:
79:48:a5:a6:77:11:c8:aa:5d:f4:78:9b:d9:52:a9:
4e:94:b8:1f:95:8a:98:81:3c:de:48:9f:80:ba:50:
7c:c6:61:cd:28:8e:93:c2:bb:ff:8a:27:b4:67:a8:
21:bf:1a:9c:3d:48:c3:68:61:83:51:f7:58:67:3e:
2f:ac:8b:3a:ef:97:df:5f:fd:9b:a9:ae:cd:2f:dd:
fc:9e:f0:e2:2e:fb:82:1e:a5:f5:c4:d2:ed:17:f5:
98:59:9c:32:61:db:73:64:e3:1d:af:41:7d:87:33:
9c:ef:ef:36:9a:6c:d7:39:88:ae:95:c7:c3:67:07:
a6:02:4b:05:46:7f:28:d1:64:f4:b8:7e:00:db:e9:
f7:ef:e4:27:4b:3b:bc:8d:1b:e7:63:b1:ac:c8:94:
89:a8:ee:bb:1b:c0:a3:e9:8f:8a:1d:5c:f7:46:e2:
58:5c:66:3f:d0:e9:a5:6f:b2:13:95:cc:d9:1f:7b:
af:79:45:88:50:83:bc:f3:05:e9:b2:68:02:b8:c6:
59:8e:43:96:0d:fa:32:94:68:9c:94:7f:55:86:14:
05:d7:16:ab:d4:11:2d:ef:bf:00:f0:fc:0f:2d:0d:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B7:03:37:FE:E6:EA:DE:1D:E9:E5:FE:D0:BC:25:F7:8D:A3:15:BC
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/IrcDN_7m6t4d6eX-0Lwl942jFbw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:9d:30:15:89:dc:99:84:6a:e8:fe:2e:32:49:a1:36:15:6d:
27:f0:22:59:0a:e5:95:10:77:69:10:70:01:5b:73:5b:96:83:
09:e3:56:74:8a:8f:7a:79:36:2f:0e:79:c9:bd:0b:fd:f8:8c:
63:4a:b8:86:29:58:f9:56:90:c0:fa:16:71:76:af:8d:ea:6d:
b8:7b:7b:a8:70:a9:4b:25:da:76:89:2a:fd:74:ab:ac:38:41:
30:0f:6a:5f:be:a5:80:43:40:b2:f9:69:9c:a3:7c:4d:ec:f8:
0f:ff:20:10:26:10:75:84:b3:c3:44:7f:86:36:0c:2c:1b:60:
be:95:d3:b8:1e:e0:e6:0d:4c:e2:17:16:27:5d:d4:e6:51:54:
15:52:d7:6b:6a:30:2c:ff:27:5d:09:f2:b8:0f:1b:1b:9d:57:
d8:92:cf:1f:44:8f:d1:b9:a4:e8:d3:61:83:2b:1b:ed:e9:92:
e3:1a:dc:45:8d:ec:6f:b7:e7:8f:76:89:d1:fb:79:73:8c:58:
2d:c5:e4:65:a1:17:88:7e:9c:e7:c7:8b:97:5f:db:45:a6:93:
58:36:76:8e:67:53:05:b9:1c:67:b8:2c:00:f7:37:9c:80:0a:
f3:41:65:c1:b6:7b:c9:4d:21:42:ca:87:ac:38:09:7e:26:cb:
23:96:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:48 2024 by rpki-client on console-fra.rpki-client.org