Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2r9PJlseHd8Rk9lBkYUgOG6K5g.roa
File: G2r9PJlseHd8Rk9lBkYUgOG6K5g.roa (raw, json)
Hash identifier: e8D5QZdBzamp7yj1X9galakqWlaFAuQmydhJIpI9HcE=
Subject key identifier: 1B:6A:FD:3C:99:6C:78:77:7C:46:4F:65:06:46:14:80:E1:BA:2B:98
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3D1230611F739E5389FCEE9FBEE5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2r9PJlseHd8Rk9lBkYUgOG6K5g.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200303
IP address blocks: 45.67.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3d:12:30:61:1f:73:9e:53:89:fc:ee:9f:be:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6afd3c996c78777c464f6506461480e1ba2b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:7c:7b:1d:62:dc:11:38:61:87:2c:20:1f:
66:3d:e8:cf:b4:75:ea:58:18:22:4a:56:30:27:7a:
3a:f8:f4:98:34:a4:27:b4:34:71:c4:5e:24:9c:23:
f4:8d:09:28:5e:91:36:81:04:a0:2c:ab:b2:4c:de:
77:fb:44:cb:b8:4b:00:3c:6b:57:9a:f0:2d:30:ca:
61:32:ac:88:6c:5d:3b:46:c7:c5:49:a3:0a:10:9a:
ef:7b:14:d1:03:84:16:5b:ce:58:af:85:0a:2f:eb:
a5:26:05:e8:62:6c:64:86:99:8f:b8:98:bd:98:ed:
d4:51:9e:e8:63:a7:a4:81:c5:04:ef:81:a9:67:1a:
d9:c9:88:3c:93:df:81:4f:00:eb:2b:d4:c5:4f:ff:
4b:4f:a4:22:d2:f4:1c:6d:f5:07:bd:88:b6:9a:b8:
2e:90:a4:9b:59:7b:b9:57:74:98:17:6d:1f:40:8f:
00:35:ed:bb:17:b6:64:1c:97:6f:5c:7a:26:6d:48:
14:9b:c6:28:67:fb:26:11:8e:b6:cc:6c:8c:ce:3c:
77:ac:fc:c6:fb:cf:e3:33:55:68:76:17:44:b3:f8:
1a:58:2e:7c:b8:ff:dc:e2:36:01:ff:54:19:58:47:
05:ab:db:73:9c:f6:7d:ad:fc:74:c0:0a:4f:23:aa:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:FD:3C:99:6C:78:77:7C:46:4F:65:06:46:14:80:E1:BA:2B:98
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G2r9PJlseHd8Rk9lBkYUgOG6K5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d5:43:15:8d:88:6a:81:a1:54:a4:93:fb:f5:2f:f5:f7:51:
4e:b2:c6:b0:61:d0:7b:c9:99:34:81:9f:08:ae:02:06:62:20:
8f:45:b3:2c:cb:9a:90:d4:34:83:b7:61:96:9a:40:4a:53:a9:
cd:65:69:9a:bf:9d:cd:eb:58:74:cd:e4:7c:3c:37:c2:62:2b:
8a:99:da:c0:67:40:62:ca:12:42:19:5d:9f:eb:53:57:9a:d7:
21:6d:89:96:0e:b1:6d:70:ef:8d:03:98:24:47:e0:d4:e0:9c:
d0:64:8a:22:f3:67:ef:62:4c:1b:36:eb:0e:0b:57:87:c8:4a:
9f:4c:3e:b8:95:92:e8:90:ec:4a:7d:df:89:2f:84:71:b6:0b:
19:b1:5a:f0:5c:cd:49:2b:1e:c8:6e:ee:42:aa:da:e6:c3:42:
e5:90:f5:bc:72:7f:67:3d:c4:40:59:80:a4:42:83:82:93:7d:
b4:d1:87:11:fb:10:7e:53:85:ce:c7:7c:0a:d7:6f:42:68:28:
f0:62:86:70:5c:49:09:9a:8b:f3:9b:45:12:db:e0:a9:4d:15:
e2:ae:6d:3e:65:c0:f5:cc:fc:be:ba:7d:c4:b7:75:68:4c:97:
19:30:e7:16:bf:5e:7e:c4:8c:4f:6d:82:c8:9d:be:bd:ac:06:
4a:e9:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:01:45 2024 by rpki-client on console-ams.rpki-client.org