Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/G-NmzyHWNG9ynxHhLVzLeHDBPPU.roa
File: G-NmzyHWNG9ynxHhLVzLeHDBPPU.roa (raw, json)
Hash identifier: UbFGnmqKvReXZbfiZWmBpWDnhWP8DWUda7Pralo8+Ao=
Subject key identifier: 1B:E3:66:CF:21:D6:34:6F:72:9F:11:E1:2D:5C:CB:78:70:C1:3C:F5
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 018CC26D680974BED1CB53BE1657A4719223
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/G-NmzyHWNG9ynxHhLVzLeHDBPPU.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209377
IP address blocks: 152.89.4.0/24 maxlen: 24
152.89.4.0/22 maxlen: 22
2a09:2c40:b::/48 maxlen: 48
2a09:2c40:e::/48 maxlen: 48
2a09:2c40:c::/48 maxlen: 48
2a09:2c40::/29 maxlen: 29
2a09:2c40:a::/48 maxlen: 48
2a09:2c40:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:68:09:74:be:d1:cb:53:be:16:57:a4:71:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1be366cf21d6346f729f11e12d5ccb7870c13cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:4e:48:f7:e8:9e:e4:63:7c:55:99:2f:c1:
cb:ba:a2:fc:65:bf:96:a9:11:2f:f9:41:bd:0b:0c:
fb:87:86:82:54:bb:d0:c8:de:8c:8e:ef:5f:d5:b1:
e6:13:95:eb:bc:8e:0c:a7:f2:ed:47:ba:4c:2a:26:
4e:5b:9e:1f:10:c2:f2:2f:02:ec:d6:88:1d:5b:34:
e8:de:5a:d1:ef:bb:b6:c3:75:3e:7b:89:62:05:f8:
18:d1:8d:3e:bc:4a:f9:96:f9:59:6d:af:74:75:d4:
1d:86:ed:d4:74:d5:6f:27:d2:2a:a6:22:96:16:f7:
ed:ab:65:5e:10:52:b8:d6:ae:43:c7:c6:22:f0:a0:
8d:8f:1c:5e:10:cc:17:e7:28:d9:6f:a2:05:55:75:
f1:0d:d5:03:9e:c0:2c:38:c1:8a:5c:e8:f0:5b:70:
8e:3b:9b:fe:5e:e8:03:dc:db:c7:d2:bb:7b:87:cf:
cb:14:a6:e6:2a:2c:9a:be:bf:f4:72:f2:07:44:e1:
a2:57:e9:6c:af:47:83:c2:e3:ec:7f:92:9d:72:7d:
a8:af:c4:1e:db:5d:c3:97:97:a0:12:4f:1c:71:c5:
33:86:36:4e:a8:88:11:a6:7c:4d:ca:00:5b:ea:0e:
15:21:39:c6:00:a3:5e:24:81:1e:50:fd:8a:e2:0a:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:66:CF:21:D6:34:6F:72:9F:11:E1:2D:5C:CB:78:70:C1:3C:F5
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/G-NmzyHWNG9ynxHhLVzLeHDBPPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.4.0/22
IPv6:
2a09:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
45:5e:15:7d:54:ee:0a:94:d8:19:c8:e0:5b:e0:ca:93:d9:f7:
0a:03:8d:14:3a:ab:82:5d:08:c2:f1:8e:60:3f:fb:d8:72:41:
e2:70:a0:54:c6:f0:65:3a:ee:6d:9f:ab:16:0e:9c:76:8b:59:
76:dc:23:8f:f5:c3:d1:17:75:6f:c7:5f:4b:2c:7c:e2:8c:2e:
10:e6:a3:6e:b6:ae:35:53:d5:3a:d9:11:30:69:5f:ee:16:65:
8a:7b:95:bf:c0:88:2a:3b:4e:db:11:cc:0c:41:7a:8d:a8:bf:
59:f3:5a:c8:6f:fb:d9:8c:88:5f:df:29:cc:4e:cf:53:4e:22:
f0:3d:e6:44:77:fa:3f:d5:a0:2b:a0:39:39:45:d4:e6:d1:a8:
2f:a6:c9:be:ad:47:7d:e1:9f:cb:51:d3:48:f0:5e:3f:5c:27:
08:e5:e8:0b:62:51:14:4e:d8:3c:23:b7:1f:e8:3d:db:0d:b3:
47:29:fc:31:21:84:48:4b:e1:32:84:4f:97:42:2b:a0:80:b0:
f0:0c:ed:49:43:03:c5:53:c2:bb:70:d8:1d:4f:24:0c:d0:12:
2c:e2:dc:52:81:8c:54:d9:64:dd:52:c2:ed:46:50:ab:8d:08:
b9:0e:20:06:cc:8c:0d:c3:26:f1:5f:13:24:1a:73:86:47:f7:
58:0b:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:05:15 2024 by rpki-client on console-ams.rpki-client.org