Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/TjxXK8T4s5t7J-VPjoGGBVYkqRM.roa
File: TjxXK8T4s5t7J-VPjoGGBVYkqRM.roa (raw, json)
Hash identifier: V+YQILAQYEr9bhRmaz3LGegWNi2GJu9qliPMAMg6tYE=
Subject key identifier: 4E:3C:57:2B:C4:F8:B3:9B:7B:27:E5:4F:8E:81:86:05:56:24:A9:13
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 015F05
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/TjxXK8T4s5t7J-VPjoGGBVYkqRM.roa
Signing time: Mon 17 Jun 2024 00:14:15 +0000
ROA not before: Mon 17 Jun 2024 00:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89861 (0x15f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4E3C572BC4F8B39B7B27E54F8E8186055624A913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:8a:94:8f:fb:f9:b8:b7:5c:52:82:a8:4b:
2d:0e:05:4b:59:5b:e2:93:0c:8d:0e:a6:17:51:d1:
59:62:c4:3b:16:e2:e6:27:f6:6c:96:83:b4:cd:9b:
b5:14:56:28:2e:b2:e5:63:0e:a3:9f:c5:01:69:e9:
c4:ca:4e:22:f1:24:f2:85:f6:1c:dc:5c:dc:82:64:
0d:14:1f:e4:42:e3:36:6c:50:01:3d:79:ee:c6:c4:
f2:ad:be:a3:75:9a:42:78:94:96:a6:51:42:e9:ac:
5e:3c:9c:ef:33:c5:d5:db:36:31:88:85:20:e1:4d:
e7:9d:6d:bc:57:07:7a:cb:06:02:1b:50:b8:1b:38:
a3:c0:2d:05:d5:e0:05:a9:2f:16:ae:2e:64:9e:94:
2e:17:0c:48:ad:31:c1:9c:cc:51:5d:6a:68:4b:9a:
0e:61:ac:bc:70:32:f2:84:0c:1d:19:4b:c5:35:49:
01:f7:67:1b:fb:05:e4:02:ee:a1:f2:3e:f3:08:69:
cf:38:7e:6f:f1:9e:2f:37:c7:9b:02:7b:ed:be:32:
34:ce:05:27:be:b2:5f:56:c5:06:87:22:52:b8:ff:
a3:3b:1f:94:02:de:c4:dc:96:b2:aa:3b:e8:82:7f:
35:53:0a:1c:dd:2c:6e:c5:d3:9c:f6:a5:7c:62:fe:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:57:2B:C4:F8:B3:9B:7B:27:E5:4F:8E:81:86:05:56:24:A9:13
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/TjxXK8T4s5t7J-VPjoGGBVYkqRM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.0.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e4:d1:ef:45:88:44:96:2b:ad:45:e2:e4:54:ba:39:13:e1:
2b:32:e6:ef:54:df:c2:29:48:fa:fe:87:4a:6c:54:92:fe:4f:
2f:14:47:f1:a0:54:b5:04:15:96:5a:6a:c2:64:dc:15:fa:ba:
d5:cb:8b:0b:16:a0:9c:cf:af:32:35:10:d1:9c:49:78:7c:f8:
d6:80:70:5e:89:8a:c5:39:2c:03:01:d1:02:fd:18:db:1a:09:
17:55:69:56:16:de:bd:d3:42:d5:fb:44:8e:9a:9d:fe:bc:c0:
dd:96:2f:37:27:9e:5c:13:bf:49:f8:46:92:2d:bd:31:9a:f9:
24:0e:be:ad:60:32:b9:99:b9:50:dc:af:6a:da:d0:a0:7e:4f:
d9:12:56:73:7a:36:5a:98:ba:94:d7:5e:85:27:61:be:88:4b:
03:87:af:68:1c:aa:9a:02:d9:e5:84:f9:cb:af:ad:dc:c6:83:
61:53:3c:9c:12:ca:75:ce:4f:77:e0:85:3e:64:39:59:1b:a1:
bf:ab:9e:67:5b:f8:b9:a5:96:ee:9a:c7:f9:f4:83:79:0b:23:
78:1e:fa:bf:11:50:17:59:d8:ce:64:37:a3:d8:1e:c9:9c:19:
a3:50:dd:4b:0e:c9:11:66:ed:51:44:4d:25:94:97:60:bf:0a:
fe:ba:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:37 2024 by rpki-client on console-ams.rpki-client.org