Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/gJ_ZkDQ3aGFDN86KeVxecLQqTgk.roa
File: gJ_ZkDQ3aGFDN86KeVxecLQqTgk.roa (raw, json)
Hash identifier: KN9o5mtJlAdgFvuyenWQN55k1ggKP1akd5V8c0NJ71c=
Subject key identifier: 80:9F:D9:90:34:37:68:61:43:37:CE:8A:79:5C:5E:70:B4:2A:4E:09
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 018CC9BCB3FCE73A13967BD99EEDFFA13D44
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/gJ_ZkDQ3aGFDN86KeVxecLQqTgk.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 91.217.253.0/24 maxlen: 24
91.220.28.0/24 maxlen: 24
91.220.35.0/24 maxlen: 24
164.138.248.0/21 maxlen: 24
164.138.254.0/24 maxlen: 24
91.220.71.0/24 maxlen: 24
2a0a:7d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b3:fc:e7:3a:13:96:7b:d9:9e:ed:ff:a1:3d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=809fd990343768614337ce8a795c5e70b42a4e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:39:2b:0e:f3:9a:81:4d:b0:b3:0f:fb:d0:
42:92:ac:4e:75:5e:28:e3:d4:12:62:8e:4f:8f:97:
f1:41:9d:33:4a:b0:6b:0c:53:22:ad:84:3d:73:8a:
57:4f:36:e9:83:64:08:53:dd:7d:5d:55:f0:68:fa:
76:a8:0b:ba:b2:6a:8e:64:c0:ef:16:e4:51:07:a2:
3a:08:be:e3:16:2f:c4:d3:69:fd:37:f5:f2:b7:57:
9a:cb:06:f3:8b:d9:26:fd:ab:5a:f2:70:c6:5c:1a:
54:20:02:29:75:74:b4:80:37:7f:b8:61:9e:e3:dd:
02:79:46:6e:42:5d:ac:c2:e9:cb:72:ca:27:f0:d2:
a7:e9:19:e0:c0:32:3d:0a:7c:05:1f:c5:39:79:fc:
a3:4e:a0:65:0e:b2:22:55:8b:e5:93:85:25:11:a5:
10:d2:aa:3e:4a:35:10:0a:d6:50:65:da:7f:09:d5:
fc:c6:33:44:94:63:05:1d:4b:08:0f:1b:8a:5c:10:
89:d5:7c:11:3d:c5:72:b7:1a:40:ab:34:c1:c2:cd:
68:ee:57:eb:77:29:c2:c0:31:b2:7a:d4:36:82:41:
fe:94:6b:41:84:51:08:49:03:66:ba:73:7f:4e:9e:
cd:57:74:c0:16:f2:0a:0c:b5:72:3a:be:18:15:b8:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:D9:90:34:37:68:61:43:37:CE:8A:79:5C:5E:70:B4:2A:4E:09
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/gJ_ZkDQ3aGFDN86KeVxecLQqTgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.253.0/24
91.220.28.0/24
91.220.35.0/24
91.220.71.0/24
164.138.248.0/21
IPv6:
2a0a:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:83:d6:05:47:6d:0e:38:f6:8a:2d:6f:e6:9d:2b:1d:fc:5d:
6d:be:81:37:ad:0c:7d:51:77:ba:91:35:03:a5:32:39:85:4b:
6c:5d:26:1c:20:e9:38:1a:e1:57:f8:6f:8c:df:52:a8:20:eb:
78:b3:7b:96:81:7a:f3:ef:8e:fb:9d:b4:83:7f:d6:a4:5e:18:
fc:11:c7:d1:4d:91:96:6c:34:82:28:4a:5b:52:1a:e5:1d:73:
f4:50:2e:8c:51:6d:6f:91:08:bd:bc:4f:65:24:db:cf:80:37:
b6:20:41:03:c7:79:04:38:da:80:29:01:80:a6:36:fe:f8:48:
c5:58:0d:c7:d2:e5:0f:04:bc:80:59:c9:51:c4:a0:7b:5b:20:
6e:cb:0b:3f:c8:37:90:aa:74:0c:c1:8b:ca:9b:47:1d:56:67:
3c:69:39:84:9f:f6:5f:f7:15:87:2e:c2:94:3e:e4:29:04:5e:
42:99:bb:4f:2d:bf:22:19:3e:31:d7:a1:90:13:86:f2:5a:03:
af:79:3e:54:27:c9:10:ad:79:29:fb:ed:0c:04:a0:d4:42:7c:
44:15:5d:0a:f9:0e:75:5d:2f:a8:ff:69:dc:94:e1:24:e6:5d:
c1:78:e9:3a:7f:80:f6:c2:d3:5a:bb:a4:97:ed:8b:dc:f8:31:
a8:c4:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:29:24 2024 by rpki-client on console-fra.rpki-client.org