Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/G7xxueSlrTqKk6nd0q18RZgQOLs.roa
File: G7xxueSlrTqKk6nd0q18RZgQOLs.roa (raw, json)
Hash identifier: NYMfQazwVqcCqk4/G7auyKeQ6GzqhUfG6a4cRU1hyNw=
Subject key identifier: 1B:BC:71:B9:E4:A5:AD:3A:8A:93:A9:DD:D2:AD:7C:45:98:10:38:BB
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 018CC5DC0A998073CBB8B65BFF60BA70D885
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/G7xxueSlrTqKk6nd0q18RZgQOLs.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50799
IP address blocks: 145.43.249.0/24 maxlen: 24
145.43.248.0/24 maxlen: 24
145.43.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0a:99:80:73:cb:b8:b6:5b:ff:60:ba:70:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bbc71b9e4a5ad3a8a93a9ddd2ad7c45981038bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:95:43:fe:fc:42:c4:41:6e:ea:19:30:11:
a1:76:22:55:2b:02:71:a1:94:2f:e1:81:76:73:73:
e0:a2:53:af:be:c7:24:f0:7e:5e:a4:83:1e:11:f3:
62:8b:d7:2e:34:af:1d:db:5d:ad:90:8b:cc:13:de:
ff:f8:21:39:1d:77:97:cb:66:f4:2e:bb:1d:b2:a9:
98:0a:3e:95:6d:c6:56:2b:99:cd:8f:23:69:a0:d9:
3b:6c:76:46:c1:cf:1d:8f:46:05:94:df:61:9e:c8:
ff:08:6b:d4:2c:fe:90:7b:ba:40:14:61:62:1d:66:
75:0c:b5:a3:aa:2b:a0:45:b6:a4:ea:2f:3d:6a:39:
1a:c1:8e:32:08:6d:ea:fb:58:d1:c3:39:1e:9f:cf:
e8:db:42:a9:e9:03:6c:35:f9:c7:2c:af:e0:71:b1:
fa:cc:d9:af:41:6f:8c:66:47:78:84:13:dd:f5:ce:
7c:12:bb:64:b7:f4:68:1b:34:66:44:f2:94:c2:68:
4d:4a:87:0a:56:6d:be:91:b9:17:6a:b4:e4:9e:f6:
4c:e3:5d:2f:82:ca:d3:2a:b4:28:f0:68:9d:94:9c:
79:ad:4f:4b:03:17:bc:89:4c:3a:e6:3b:fc:f2:e2:
b8:e0:a0:18:a9:ab:72:86:d9:c7:b7:a2:75:8c:49:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:71:B9:E4:A5:AD:3A:8A:93:A9:DD:D2:AD:7C:45:98:10:38:BB
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/G7xxueSlrTqKk6nd0q18RZgQOLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.248.0/22
Signature Algorithm: sha256WithRSAEncryption
59:c8:4d:f0:d9:2a:46:ef:64:7a:d8:de:9f:04:45:ed:74:4e:
e5:5f:ac:dd:84:fa:6d:03:ec:6a:57:40:66:85:a8:c8:0f:a2:
9b:aa:ac:ce:27:4b:4f:a9:e0:12:dd:ea:35:de:8e:49:ae:0c:
2d:c8:9c:d8:25:62:b5:45:fb:e9:81:bc:10:4d:78:47:52:9f:
49:63:bf:8a:b7:4b:82:a3:e5:86:2b:bf:2e:db:79:4e:99:71:
24:1b:81:bf:11:17:f0:e6:c7:7a:8e:9b:18:6e:ed:85:b0:85:
05:e9:16:24:91:fa:00:3b:ff:b6:09:c6:42:56:28:ea:75:27:
d2:87:1a:95:8b:42:72:5a:ff:27:76:79:f6:2b:2a:04:88:b3:
8c:af:b4:66:81:8e:3a:6b:44:85:8d:bb:58:2e:95:fd:fc:6d:
8e:49:01:22:f2:4d:fb:bc:36:2f:2a:3d:02:66:5c:b9:b0:6c:
e9:da:8f:c4:5c:1a:24:45:9a:c3:67:06:61:81:df:85:9d:9a:
eb:61:20:95:4e:ea:25:e7:8c:2c:47:2d:28:c7:28:5f:2c:37:
f8:82:ec:c6:1b:10:e7:b5:c0:22:4b:a4:4b:98:e2:7e:04:89:
d9:ac:49:68:2c:1e:ac:63:75:25:6e:d6:3c:b1:65:b1:d8:b3:
46:23:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:22:08 2024 by rpki-client on console-fra.rpki-client.org