Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/G4JjP0CH5xMD3hqRvcw1WQttWl8.roa
File: G4JjP0CH5xMD3hqRvcw1WQttWl8.roa (raw, json)
Hash identifier: x+R6hSRmIyD8IRK6VaBUvclctd3gTgin8GgdpKDMvdI=
Subject key identifier: 1B:82:63:3F:40:87:E7:13:03:DE:1A:91:BD:CC:35:59:0B:6D:5A:5F
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 018CC2DB08ADFFD02BBF18450D08A01B4B21
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/G4JjP0CH5xMD3hqRvcw1WQttWl8.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8779
IP address blocks: 78.152.160.0/19 maxlen: 19
185.15.4.0/23 maxlen: 23
94.230.192.0/20 maxlen: 20
46.252.208.0/20 maxlen: 20
2a00:6740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:08:ad:ff:d0:2b:bf:18:45:0d:08:a0:1b:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b82633f4087e71303de1a91bdcc35590b6d5a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:04:42:17:79:29:18:62:0f:53:f8:e6:64:
e8:be:12:5b:b0:56:15:19:8d:e7:84:ee:b3:e5:f7:
38:f0:fe:e6:d6:44:f4:fe:fc:73:b6:89:5c:a5:76:
a3:98:33:14:bd:9e:94:66:4b:8c:85:02:7c:e6:b0:
53:46:48:fd:65:a2:49:11:be:77:3c:58:1b:df:66:
69:94:27:e7:ad:10:07:0a:3e:ef:b5:a1:41:5b:55:
26:f0:e5:7b:24:44:f6:e2:c6:92:78:08:73:e2:76:
9f:60:9a:ea:f7:60:56:57:60:7a:b9:3b:53:75:9d:
57:b3:30:f4:c5:eb:92:a4:a3:12:90:10:3d:67:c9:
83:cd:1f:0d:b3:83:1b:f6:b9:07:ed:6d:85:05:d5:
27:fc:56:2d:b8:f8:19:66:6b:62:61:cc:c9:b3:d3:
b3:5b:21:c7:a0:5c:f9:6c:dc:41:83:6c:c6:c8:4b:
2f:4b:f7:91:6a:5c:e2:e1:70:0d:56:0a:1c:c2:01:
74:57:1e:1a:a8:8a:3e:d9:8c:06:eb:c3:b3:8f:4b:
e1:9a:e6:d5:c8:89:38:d7:e3:1b:f4:d9:2e:73:f6:
2a:33:1a:19:0d:84:9b:42:c1:14:d0:d3:43:ef:9f:
7e:2a:04:cc:3a:31:31:fc:46:fd:98:91:64:19:7e:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:63:3F:40:87:E7:13:03:DE:1A:91:BD:CC:35:59:0B:6D:5A:5F
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/G4JjP0CH5xMD3hqRvcw1WQttWl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.208.0/20
78.152.160.0/19
94.230.192.0/20
185.15.4.0/23
IPv6:
2a00:6740::/32
Signature Algorithm: sha256WithRSAEncryption
64:64:b0:8e:2d:ca:09:3a:6d:0b:7d:4b:de:ef:58:41:32:33:
18:fa:67:a1:de:aa:2b:84:23:24:f2:03:a6:cc:b8:39:59:05:
59:a7:e1:0f:e4:9a:e2:06:f7:80:d6:c7:fb:cb:eb:90:b4:96:
f2:da:a8:d2:7c:7f:46:ff:dc:7e:73:5e:ab:3b:2c:72:fb:57:
7e:02:1f:ad:fa:08:54:50:51:99:e2:02:1c:c2:9f:31:43:71:
7b:88:d8:01:c1:7b:5a:39:d8:03:a0:4c:ae:bc:8d:c9:6c:65:
d8:47:28:ba:ae:38:94:bc:13:11:6a:91:ea:04:b4:35:1b:21:
a2:69:f5:a7:ad:71:4c:5a:44:eb:64:2f:78:b5:99:bf:1d:7c:
22:ce:3d:1a:86:bb:e2:4d:9a:58:c7:37:23:36:f1:ed:fb:06:
23:f8:e1:a6:da:dd:e0:b6:8a:27:02:e7:ef:5f:6c:25:1b:e4:
bf:ec:41:cc:58:6c:23:22:b7:74:7d:99:aa:1a:ff:e6:42:10:
fb:08:9d:1d:8b:9f:b0:97:f4:6d:6c:02:c3:21:0b:c5:37:a2:
71:26:df:31:5f:ae:ba:39:3c:a9:74:fc:91:6a:6d:4e:98:81:
0b:d1:ec:ea:28:c5:64:af:36:77:f8:c7:99:f2:e2:ec:a5:c7:
e9:2b:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:38:07 2024 by rpki-client on console-fra.rpki-client.org