Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/G6GNXtzktlMBfs837k3pHcad0tg.roa
File: G6GNXtzktlMBfs837k3pHcad0tg.roa (raw, json)
Hash identifier: CXBTUo2oQeXY4fhiKTAU8AyphtYwX8dQLrkfhr400L8=
Subject key identifier: 1B:A1:8D:5E:DC:E4:B6:53:01:7E:CF:37:EE:4D:E9:1D:C6:9D:D2:D8
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 018CC4936F73596911E0423F8A786918B7C9
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/G6GNXtzktlMBfs837k3pHcad0tg.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197016
IP address blocks: 194.8.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Nov 2024 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6f:73:59:69:11:e0:42:3f:8a:78:69:18:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba18d5edce4b653017ecf37ee4de91dc69dd2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:66:a5:c3:c7:1d:c1:3e:bc:72:63:bd:17:
38:cc:7e:81:a7:f2:b1:97:58:82:7d:03:57:91:09:
85:24:8d:2f:4b:ce:33:c8:42:f8:fd:c6:92:60:7e:
3e:85:34:c8:ce:eb:69:5f:a0:1a:32:d9:f7:32:61:
21:be:82:21:f4:90:b5:b3:4d:d2:af:d8:d5:e0:ad:
cf:e7:8f:ed:44:9c:53:6e:ff:a1:4f:6b:74:36:e6:
5a:e5:fa:59:13:39:e5:b7:fa:8d:82:af:25:2c:fa:
b7:47:eb:c8:81:b1:6d:41:01:66:5b:60:5c:0b:9b:
89:87:4c:90:53:8f:69:3f:b6:e0:66:95:47:25:7d:
bd:09:57:77:dd:c8:ef:48:72:c5:b1:32:24:48:0d:
b0:e3:c2:86:8c:6b:d4:c3:d2:9c:7a:1b:39:26:82:
ef:fa:c8:87:e4:a7:0b:5a:ab:73:76:80:04:e6:76:
44:ac:98:41:e2:4c:aa:02:ff:f0:3c:70:b8:cd:d5:
89:5c:80:c6:db:0d:6a:e3:df:1e:c2:3e:15:2d:af:
bf:71:34:f7:5c:5c:ae:e8:9e:be:3a:ca:12:43:5b:
68:ee:19:95:5f:be:fd:d0:4e:56:88:0c:2f:af:98:
8e:d1:16:cd:c4:82:a7:3d:22:2b:7e:af:89:19:e5:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:8D:5E:DC:E4:B6:53:01:7E:CF:37:EE:4D:E9:1D:C6:9D:D2:D8
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/G6GNXtzktlMBfs837k3pHcad0tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:e2:a4:97:2a:0d:fa:fa:1b:a6:34:92:23:1d:01:f3:1f:89:
34:db:c4:83:29:1c:2b:7a:85:0f:0b:2f:53:7a:ef:bd:09:4e:
c2:de:a5:ae:43:bd:1a:fc:ac:4b:a3:2d:63:58:d9:be:9d:70:
0a:29:c5:34:15:d0:a9:ce:df:60:a1:6d:ad:a7:9a:af:90:59:
26:c5:f6:0c:c1:ca:28:c2:8f:6e:cd:57:b2:3f:88:1e:18:5a:
a7:01:09:2e:31:93:85:50:dc:7e:39:21:06:41:2a:10:44:3f:
ec:18:d2:d9:83:32:09:29:00:eb:d8:4d:f6:71:30:1a:dc:77:
d2:8b:50:c7:3a:10:6e:53:86:b7:2a:c1:77:23:fe:47:0c:0a:
ce:dd:e6:f2:15:6a:6b:4e:f7:90:55:90:7a:07:98:21:ea:8c:
f3:b9:f0:f0:85:be:e5:a8:e3:d2:15:2a:d3:fb:8f:1b:2b:67:
9b:18:0b:0f:cf:7c:c0:ab:50:5f:eb:4b:78:36:ac:2d:b3:74:
7f:61:03:38:ca:b5:d2:93:ba:b4:8e:fe:3d:1a:1c:4e:28:9c:
61:bb:4c:fb:af:2f:c8:ab:bd:a6:9d:51:2b:8e:2a:1e:19:1c:
52:0f:be:ff:29:bf:76:6f:66:f9:6e:8c:0d:89:c1:74:c9:b7:
91:d3:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 17:41:59 2024 by rpki-client on console-fra.rpki-client.org