Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gE_LYwlNF58otFndfgN6dTfmM4Y.roa
File: gE_LYwlNF58otFndfgN6dTfmM4Y.roa (raw, json)
Hash identifier: gtqnIq182dgn/dpsZB5kt257hE34QAqJ6v6dksHPuHo=
Subject key identifier: 80:4F:CB:63:09:4D:17:9F:28:B4:59:DD:7E:03:7A:75:37:E6:33:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF5D82D5D95863316BFE8EB6EE1C2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gE_LYwlNF58otFndfgN6dTfmM4Y.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60949
IP address blocks: 87.120.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f5:d8:2d:5d:95:86:33:16:bf:e8:eb:6e:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804fcb63094d179f28b459dd7e037a7537e63386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:89:40:f6:83:20:4e:e2:c5:7b:97:c2:2b:
8d:73:fa:82:aa:9d:b8:ac:d9:7d:43:19:7e:87:93:
d6:e8:ec:2a:35:2a:fe:80:c2:4a:70:70:d5:8e:39:
14:03:79:31:ea:74:ce:69:3d:82:20:32:48:38:76:
c2:ec:03:52:e0:03:ce:6a:f5:3d:1e:f1:0f:72:6d:
ea:f8:bc:f3:44:fb:f4:4e:af:fb:b3:1f:ce:7b:b4:
85:2b:ce:9d:fc:c2:c9:ae:b3:b2:c8:ac:e4:b9:fa:
ae:16:5a:22:e4:b0:ad:0e:07:72:ba:af:85:db:0f:
58:05:54:28:1d:65:e7:f1:ec:f5:39:3e:39:5b:4d:
65:c3:4c:b2:17:63:db:80:29:09:bd:4c:11:4d:62:
2f:82:4e:68:d5:76:e0:30:71:0c:af:bd:32:17:26:
1b:42:1b:b7:87:e8:51:29:02:50:4a:1c:d6:82:93:
47:1e:3d:53:a0:a3:99:7b:6e:e7:29:3b:af:e1:c6:
79:72:d8:26:3e:88:f7:87:59:9f:f0:e6:f2:af:8d:
6b:8a:3c:44:0b:9c:38:a7:91:64:76:c7:d2:ae:a5:
3f:06:8e:02:c7:a0:9c:56:75:e0:5b:f7:3d:32:9a:
3a:19:e0:0c:ce:ca:a7:21:f6:07:45:1b:d8:d6:5d:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:CB:63:09:4D:17:9F:28:B4:59:DD:7E:03:7A:75:37:E6:33:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gE_LYwlNF58otFndfgN6dTfmM4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bc:7c:e0:34:1d:6b:24:fe:c5:c4:a1:6d:fe:cf:fd:81:fd:
ea:c3:72:68:d5:97:11:50:1e:10:d2:8b:d0:5d:7f:c4:65:97:
33:3b:9d:02:e9:8b:87:a5:e9:fb:72:fb:cb:1f:ab:f1:b0:c6:
1d:4c:d0:5d:a6:c5:92:45:31:e6:83:7f:e4:5e:a2:06:c1:0e:
fe:d3:ed:00:ec:aa:a3:23:26:73:20:52:61:f6:85:89:aa:47:
a3:94:da:44:54:da:98:c5:46:33:0a:76:d9:07:69:7f:e3:d6:
eb:92:e6:f4:a9:98:cf:c7:0b:9c:75:a8:90:20:3c:ae:c6:8d:
bb:93:c5:5a:d9:5f:ff:2c:bf:11:1a:b9:cf:9a:ea:2a:84:97:
d3:c7:58:e9:99:91:bd:91:62:c4:ad:6a:d8:60:ef:40:b0:eb:
a1:28:fc:bc:10:43:e4:64:0b:6e:ad:91:40:4d:72:21:c5:0b:
df:73:7a:67:73:b7:1d:ec:28:c6:41:3c:51:77:ae:17:f1:7b:
9c:f1:70:43:d7:64:6d:e8:5b:cb:ca:e9:65:03:94:70:ca:11:
c7:2f:69:af:79:34:9a:7d:33:4d:a2:02:26:d0:1a:c1:f8:2b:
45:74:28:c4:b6:93:d4:62:19:22:5b:8c:76:ae:7a:32:08:6d:
63:55:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:20 2024 by rpki-client on console-ams.rpki-client.org