Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/j4ln5e_lXw3tx_epTAGV0lMg-S0.roa
File: j4ln5e_lXw3tx_epTAGV0lMg-S0.roa (raw, json)
Hash identifier: lxOhc8qRk/ABlqlUEzpR5I8u+QPrE6n1gDp9oz26lWc=
Subject key identifier: 8F:89:67:E5:EF:E5:5F:0D:ED:C7:F7:A9:4C:01:95:D2:53:20:F9:2D
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 011A65
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/j4ln5e_lXw3tx_epTAGV0lMg-S0.roa
Signing time: Sat 17 Jun 2023 00:27:06 +0000
ROA not before: Sat 17 Jun 2023 00:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 03:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72293 (0x11a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8F8967E5EFE55F0DEDC7F7A94C0195D25320F92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:42:ed:64:a8:39:d7:42:69:42:9e:53:3a:
87:e2:7d:96:d8:99:d1:eb:75:b4:54:d9:79:05:6c:
f9:73:11:b5:29:08:3d:18:23:73:33:7d:b0:e0:b0:
c2:9d:d9:65:39:6b:6b:1b:49:2e:de:94:19:f7:a2:
e1:0f:04:e6:6e:90:f8:8e:dc:89:ae:a2:77:12:27:
01:73:28:51:6b:18:b9:ea:31:9b:52:b1:51:67:e9:
5a:cd:f9:a9:7e:1e:39:82:32:9c:94:b0:88:6c:2e:
a4:32:05:74:f1:1f:cf:16:42:a8:71:5f:35:87:48:
eb:fe:35:96:26:99:e0:cf:f8:50:84:89:77:46:14:
16:67:46:03:96:ed:b5:20:db:3d:37:18:ce:e4:c2:
eb:e6:ad:f4:26:18:d6:f3:f9:6b:75:0f:e0:fc:86:
d4:9c:bf:a4:36:d6:37:71:79:3c:a3:de:fd:c8:69:
62:c2:bb:8d:72:3a:e1:2e:4f:4c:8b:b8:be:a4:ff:
05:7b:69:9a:3c:05:25:c5:72:e9:55:66:12:75:0b:
90:46:5c:50:ee:e2:49:ae:cc:58:14:06:71:6e:3c:
e7:e6:83:14:9e:8c:d7:86:01:4a:46:49:f6:0d:62:
0f:92:65:24:5b:11:d8:cc:64:51:31:d3:7a:18:3e:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:67:E5:EF:E5:5F:0D:ED:C7:F7:A9:4C:01:95:D2:53:20:F9:2D
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/j4ln5e_lXw3tx_epTAGV0lMg-S0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:54:b5:2a:05:d0:43:63:c0:ea:0e:9a:ab:c8:92:06:32:26:
79:8a:26:57:ad:89:4e:64:d8:56:48:e2:05:9c:82:4e:f3:20:
e6:02:1d:89:fa:c7:b0:30:5e:4a:24:50:3f:b6:45:2c:2c:8b:
c7:af:95:6c:cb:15:e6:30:96:59:4e:bd:ff:95:02:75:43:be:
1b:94:76:6e:ab:0c:4f:bd:40:34:54:a1:f7:b6:43:08:43:02:
2e:8b:c8:0c:c7:3d:6b:58:8c:3d:57:82:bf:37:b6:63:9e:0b:
23:fa:20:43:e2:30:52:79:bd:e1:c9:5f:50:2b:00:31:e6:e0:
92:99:37:d3:04:b6:02:0c:4a:a4:4b:e7:3d:bc:a5:b8:cd:b8:
b0:44:16:89:29:e2:4b:58:d0:2e:67:00:e9:ab:bc:4e:c2:78:
fc:23:46:34:12:59:80:11:b4:89:4b:2c:be:21:38:19:dc:fe:
30:3b:11:85:81:e5:11:e3:ae:63:8d:90:a3:96:4f:93:43:1b:
dc:9f:a2:ac:3f:90:bf:39:44:29:e9:67:07:f5:72:24:1b:f0:
bd:de:98:9d:21:d3:04:75:3f:6c:26:c6:44:92:6d:26:78:27:
a4:63:e6:f4:aa:00:9c:ee:0e:c5:22:4b:2d:e4:39:06:fd:2e:
fb:8a:c9:03
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDARplMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjMwNjE3
MDAyNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4Rjg5NjdFNUVGRTU1
RjBERURDN0Y3QTk0QzAxOTVEMjUzMjBGOTJEMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsX5C7WSoOddCaUKeUzqH4n2W2JnR63W0VNl5BWz5cxG1KQg9
GCNzM32w4LDCndllOWtrG0ku3pQZ96LhDwTmbpD4jtyJrqJ3EicBcyhRaxi56jGb
UrFRZ+lazfmpfh45gjKclLCIbC6kMgV08R/PFkKocV81h0jr/jWWJpngz/hQhIl3
RhQWZ0YDlu21INs9NxjO5MLr5q30JhjW8/lrdQ/g/IbUnL+kNtY3cXk8o979yGli
wruNcjrhLk9Mi7i+pP8Fe2maPAUlxXLpVWYSdQuQRlxQ7uJJrsxYFAZxbjzn5oMU
nozXhgFKRkn2DWIPkmUkWxHYzGRRMdN6GD7c6QIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFI+JZ+Xv5V8N7cf3qUwBldJTIPktMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL2o0bG41ZV9sWHczdHhfZXBUQUdWMGxNZy1TMC5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAJMcBzANBgkqhkiG9w0BAQsFAAOCAQEAq1S1
KgXQQ2PA6g6aq8iSBjImeYomV62JTmTYVkjiBZyCTvMg5gIdifrHsDBeSiRQP7ZF
LCyLx6+VbMsV5jCWWU69/5UCdUO+G5R2bqsMT71ANFSh97ZDCEMCLovIDMc9a1iM
PVeCvze2Y54LI/ogQ+IwUnm94clfUCsAMebgkpk30wS2AgxKpEvnPbyluM24sEQW
iSniS1jQLmcA6au8TsJ4/CNGNBJZgBG0iUssviE4Gdz+MDsRhYHlEeOuY42Qo5ZP
k0Mb3J+irD+QvzlEKelnB/VyJBvwvd6YnSHTBHU/bCbGRJJtJngnpGPm9KoAnO4O
xSJLLeQ5Bv0u+4rJAw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:48 2024 by rpki-client on console-fra.rpki-client.org