Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNzDov2WXqvdWZ2vyofrIXpSFcY.roa
File: gNzDov2WXqvdWZ2vyofrIXpSFcY.roa (raw, json)
Hash identifier: mjzev7alKssXQb17oRqS6chPCwHEK5dUJlUUkG0rpKQ=
Subject key identifier: 80:DC:C3:A2:FD:96:5E:AB:DD:59:9D:AF:CA:87:EB:21:7A:52:15:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD099A19E16D3E31014DE72D6FA209
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNzDov2WXqvdWZ2vyofrIXpSFcY.roa
Signing time: Tue 02 Jan 2024 06:29:38 +0000
ROA not before: Tue 02 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209524
IP address blocks: 87.120.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:09:9a:19:e1:6d:3e:31:01:4d:e7:2d:6f:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80dcc3a2fd965eabdd599dafca87eb217a5215c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:02:4e:d5:e3:57:70:04:3f:31:6d:1d:a8:
be:68:7e:1b:8a:50:ae:1b:06:a1:a0:0a:93:07:5b:
97:30:b0:98:df:08:2f:07:4a:88:f6:dc:e3:5e:60:
1b:f7:c6:eb:db:c2:87:4a:d1:8e:71:3b:19:95:12:
09:9f:5f:d8:8f:7d:db:69:49:da:df:53:08:1c:7b:
92:6f:c2:fd:57:ab:2c:06:f1:1d:9d:2f:00:e5:6f:
a1:21:ae:a2:ae:5d:d5:13:33:27:21:64:84:63:a3:
f5:b6:9f:33:54:31:aa:5a:0a:2b:c6:5e:3d:cb:e3:
3e:9f:a3:cb:63:c4:69:82:88:6f:37:42:a7:03:42:
7e:a5:68:2b:7f:ce:1e:c2:b8:6a:7c:59:3c:6f:7b:
a8:9d:4b:9e:ba:8e:87:68:88:09:26:6c:6a:75:f9:
c6:0e:09:fd:e7:49:c7:f1:7b:eb:dd:35:71:1c:15:
fb:2f:11:f6:70:9c:1e:cb:30:0e:d6:b2:5d:ab:3f:
26:fc:e3:ab:94:75:63:cf:ac:16:83:55:93:97:98:
69:0c:b9:3a:94:d2:ca:36:75:a4:38:6f:2e:00:7c:
fb:52:fc:65:f3:bb:17:86:95:ab:66:a9:57:03:48:
d0:fa:eb:9f:49:64:3d:eb:1b:22:b4:c3:ed:14:53:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:C3:A2:FD:96:5E:AB:DD:59:9D:AF:CA:87:EB:21:7A:52:15:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNzDov2WXqvdWZ2vyofrIXpSFcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:98:1e:2f:fa:c5:d2:fb:69:5a:c3:c7:5d:5d:f4:62:85:5e:
5b:34:4a:50:0e:53:eb:e7:67:bb:61:6d:7a:92:dc:1b:c3:4c:
85:b2:de:2a:74:fe:fd:13:d6:5e:15:71:8d:d7:78:31:48:58:
1f:ad:68:1b:53:4a:0c:38:23:af:66:53:12:75:08:86:56:e7:
3b:58:ba:e1:5b:fc:2b:bd:dc:58:54:9c:b0:31:08:a9:fa:52:
fe:a7:e3:76:8e:5a:7c:f3:22:7d:8e:71:dd:90:4f:98:b8:8c:
fb:6e:35:d2:6e:14:73:9b:57:35:76:54:17:a8:d3:00:4a:6c:
f8:84:9e:1d:fe:0f:b5:bb:6b:00:41:f8:d8:d5:5c:0b:88:4f:
02:81:6b:10:e9:8c:32:f3:cb:66:d6:60:70:6a:dc:17:09:c7:
b9:61:1c:dc:9b:ac:69:48:74:aa:ce:73:bc:47:54:9c:c0:e6:
51:14:32:d2:02:bf:37:1e:07:95:08:66:83:4b:4b:4e:84:06:
72:a6:37:d6:77:7e:f5:9e:14:81:b3:57:4b:f0:d2:b4:b8:37:
8e:74:74:e5:61:e4:a7:8e:77:24:31:87:73:e2:1f:3e:33:9a:
d4:3f:7d:a8:24:52:7a:c5:91:fb:b7:8a:1c:58:d7:c2:df:cf:
c2:5b:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:48 2024 by rpki-client on console-fra.rpki-client.org