Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6g4zfYojepq9FxjigNoDHfVpjU.roa
File: F6g4zfYojepq9FxjigNoDHfVpjU.roa (raw, json)
Hash identifier: BTS+QBWxanj4dFCmmv1Bkueq+qWbwhdtg0Lls98ro5M=
Subject key identifier: 17:A8:38:CD:F6:28:8D:EA:6A:F4:5C:63:8A:03:68:0C:77:D5:A6:35
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019266D06E560435B83319DBF1472B2578CC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6g4zfYojepq9FxjigNoDHfVpjU.roa
Signing time: Mon 07 Oct 2024 11:49:48 +0000
ROA not before: Mon 07 Oct 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 87.237.167.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:d0:6e:56:04:35:b8:33:19:db:f1:47:2b:25:78:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 7 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17a838cdf6288dea6af45c638a03680c77d5a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:68:a7:3a:57:2a:8c:ef:19:45:22:4f:50:
7f:90:d9:3e:c9:84:07:c2:27:a5:3c:b3:8e:47:0f:
f9:2a:88:cd:1b:c4:f9:2a:4f:bf:50:5c:d7:95:8c:
dc:c4:61:97:55:61:bf:dc:7f:22:56:cb:23:53:9e:
d8:da:08:d1:48:64:d3:86:98:09:f3:e2:db:ad:25:
f0:a8:c5:41:f6:2b:03:0a:38:09:0b:53:d4:21:04:
f0:bb:3e:84:1b:04:96:f6:23:82:99:f1:48:7d:4c:
78:e8:c5:2e:c1:f6:aa:5a:8f:aa:91:e8:3d:16:66:
c4:02:d6:b8:00:de:61:70:b3:8a:36:84:89:ea:31:
82:32:11:31:2b:d9:77:c8:05:9e:67:54:26:84:54:
5a:37:e7:25:4d:79:d5:ac:ee:d9:67:15:d2:2b:f0:
32:d0:03:26:78:3a:80:35:a4:83:6e:43:d4:c4:23:
83:54:4a:3e:ca:30:f1:b2:81:69:95:07:ad:ff:48:
69:aa:9a:d1:fc:0a:8d:c9:fc:77:10:b9:6e:5e:dd:
3c:8b:c6:50:e1:89:2f:48:15:2f:75:44:08:f6:4f:
21:31:4d:53:c3:f0:23:5b:07:b5:b8:06:26:e8:bb:
66:d0:c8:a4:98:d3:8a:79:e6:dc:d4:02:18:59:e1:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:38:CD:F6:28:8D:EA:6A:F4:5C:63:8A:03:68:0C:77:D5:A6:35
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F6g4zfYojepq9FxjigNoDHfVpjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
89.251.30.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5b:47:a0:32:a0:34:dd:53:cb:38:da:da:0c:5d:d9:06:7d:
8f:8e:c2:ca:8d:0d:35:34:e5:3f:be:c7:48:d5:8e:04:98:7f:
7d:e4:38:16:96:a9:55:de:f4:8e:10:d3:8b:34:8b:9e:55:c3:
bb:f4:8b:9b:4f:dc:12:29:9a:85:76:9b:eb:8b:c0:b7:3b:90:
b0:15:37:59:79:38:c1:4d:da:d4:5d:15:d8:d0:d4:1c:35:8a:
ad:14:5f:0d:a8:32:16:2d:58:45:42:0c:7f:8d:13:b6:ad:c2:
3e:8a:40:c7:8a:32:1a:22:f1:2e:f8:ad:55:7c:92:b3:97:33:
4a:0e:50:9a:c3:37:80:02:08:b0:34:92:dc:ff:9c:d5:3a:96:
fe:6c:c9:2f:d5:20:ee:b3:76:52:1a:fb:0c:13:5a:af:c8:7a:
e7:07:f5:8a:79:87:9c:73:1b:70:98:c2:1e:20:a5:36:da:5f:
f1:ee:c8:3c:f6:95:f0:7b:77:b4:cb:62:9d:39:2b:58:bd:d6:
a7:a3:ed:f4:5b:06:05:ac:11:79:bf:ee:31:8c:46:f6:aa:ba:
17:34:54:78:2b:18:79:29:6e:a1:88:9e:18:e2:df:92:45:56:
5a:4c:9f:a5:24:69:5e:df:78:fd:27:ed:3d:1a:4f:d5:c3:9c:
43:ce:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:18 2024 by rpki-client on console-ams.rpki-client.org