Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/G-7d_3x4E5-jjsWKiiV5LZh8fYs.roa
File: G-7d_3x4E5-jjsWKiiV5LZh8fYs.roa (raw, json)
Hash identifier: ddY5lvGIPnP2QqOaG1YEzQ7XudfpFmemFZO2O6PbZXE=
Subject key identifier: 1B:EE:DD:FF:7C:78:13:9F:A3:8E:C5:8A:8A:25:79:2D:98:7C:7D:8B
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB6F05B1DC6B6B4A442F26A07A164
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/G-7d_3x4E5-jjsWKiiV5LZh8fYs.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30725
IP address blocks: 85.232.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b6:f0:5b:1d:c6:b6:b4:a4:42:f2:6a:07:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1beeddff7c78139fa38ec58a8a25792d987c7d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:38:22:18:a7:ae:fb:1f:47:89:3c:c4:22:
2d:4a:dc:88:b2:39:6f:44:78:71:ab:81:a5:63:69:
a7:0b:85:47:6d:6e:fc:19:59:80:3d:34:3e:ce:0d:
f7:38:ce:a0:f0:74:f2:e2:46:76:b6:20:c2:3d:9f:
98:67:97:76:99:30:7e:20:78:c5:aa:dd:fb:a0:cd:
e5:05:0e:5f:10:84:40:af:ca:b8:ed:f7:28:53:7f:
51:12:15:f7:0f:de:de:16:6c:31:c6:66:00:cb:16:
a7:42:c4:84:9e:bb:3d:b6:88:c7:db:fd:83:4d:44:
c9:0e:1c:6d:16:83:1d:d4:3c:69:9e:aa:dc:da:cf:
87:d7:ac:55:c6:f7:64:5f:51:c8:c3:84:d4:d1:10:
2c:3b:2e:dc:43:f7:03:70:67:38:cc:a8:aa:31:2b:
57:c3:f9:03:af:15:16:7e:96:4b:de:38:db:81:cf:
4d:2b:7b:1a:f5:8b:2c:d3:98:78:c8:c1:81:d6:f8:
61:00:d7:e2:0e:86:90:ab:4e:16:61:c1:a2:d7:e4:
09:3d:ff:3c:a6:98:8b:d6:cd:c5:8c:fb:32:d7:b0:
ed:13:f8:6a:c0:24:dd:f8:0c:77:b7:ca:3e:1d:88:
17:c4:f1:36:50:19:4e:d1:d6:84:24:38:29:7d:58:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:DD:FF:7C:78:13:9F:A3:8E:C5:8A:8A:25:79:2D:98:7C:7D:8B
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/G-7d_3x4E5-jjsWKiiV5LZh8fYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:51:f6:18:82:36:7b:28:1e:80:ae:5a:d0:a4:ac:58:9a:e9:
d3:76:74:81:3a:77:00:0c:60:12:f7:3f:3d:b7:e1:a6:4f:49:
81:ee:87:61:64:fc:b0:20:09:9f:07:c3:98:70:75:11:ec:2f:
57:ed:eb:38:67:f0:84:98:3a:c4:87:e4:30:71:6e:79:c6:8c:
4e:d9:65:3c:89:69:07:14:13:9a:2a:ff:99:1d:18:52:3c:eb:
b3:7e:ca:f3:eb:12:03:ff:49:97:7f:2e:f6:81:31:ac:74:44:
6d:98:32:bc:48:6d:bf:4d:ff:54:1c:b5:52:43:05:46:64:6e:
49:06:c0:bc:75:37:fd:67:d8:4f:04:0b:e2:94:93:a0:f4:d0:
0f:b5:9d:00:5f:d2:58:40:f2:72:0f:f5:1b:4f:9e:e0:b0:6f:
d8:47:b2:94:72:44:55:87:8e:0c:89:08:1f:cc:97:96:f9:e4:
5c:ad:4d:87:33:c4:8f:b6:07:72:83:6a:fb:c1:17:e9:93:9e:
bc:ee:03:ce:ea:61:1e:b0:5b:48:74:0a:38:ef:0f:88:a4:01:
e2:a3:40:97:ba:8e:3f:68:30:f2:ad:b5:f8:f6:6b:68:d6:72:
5f:a3:92:ed:fc:0a:d7:15:14:a5:33:1e:3c:c0:ef:1e:5e:53:
40:a9:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:33:59 2024 by rpki-client on console-fra.rpki-client.org