Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/g827BmWC707s2NYUaWXSBsOxQMo.roa
File: g827BmWC707s2NYUaWXSBsOxQMo.roa (raw, json)
Hash identifier: d7L5Z7WyuKfNt0F8KVXXpGrWqEMPTIFqtY+T3pnwfa8=
Subject key identifier: 83:CD:BB:06:65:82:EF:4E:EC:D8:D6:14:69:65:D2:06:C3:B1:40:CA
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 018CC802D92A5CF3862FA20ECB614C5E3E60
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/g827BmWC707s2NYUaWXSBsOxQMo.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 128.127.169.0/24 maxlen: 24
128.127.170.0/24 maxlen: 24
128.127.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d9:2a:5c:f3:86:2f:a2:0e:cb:61:4c:5e:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83cdbb066582ef4eecd8d6146965d206c3b140ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:1e:43:15:f2:b3:94:da:03:66:53:e8:a0:
00:d5:91:09:9d:e3:cc:a2:19:d0:cc:47:95:39:f1:
82:9b:50:88:6b:fa:c9:9e:46:85:f0:63:06:70:86:
44:a9:4e:a0:27:42:d5:df:fe:d4:cd:cb:a0:e2:a4:
93:7a:74:65:f0:09:f7:63:05:61:0b:b6:76:2e:c9:
ab:63:f6:48:f2:ab:78:69:56:a5:87:c9:03:44:71:
4a:bc:3f:aa:50:f4:0b:7e:11:e1:9d:ad:fe:90:1c:
a5:8c:ca:0c:86:12:be:45:5d:5a:f0:71:73:8b:b9:
21:6c:96:48:1f:df:b4:06:81:32:fb:47:9f:1e:d6:
60:30:3f:03:ff:f6:c5:09:ee:c5:c9:a2:8e:b0:81:
7e:a0:41:7c:df:98:c7:f2:f1:46:4f:d6:0c:4b:65:
07:c3:f5:32:47:f8:79:2c:aa:96:f4:ab:20:a9:e7:
e4:18:fa:78:ca:8d:66:1d:b8:43:69:ea:86:5d:2e:
3c:6a:a7:45:dc:2b:f7:47:6f:4e:ab:ce:30:7b:99:
af:7c:22:77:07:f6:0d:a4:4a:b5:29:24:73:e0:5e:
85:64:9b:39:18:1d:39:95:d3:3c:2c:18:70:de:dd:
90:a1:eb:28:95:72:f9:af:3f:36:62:d7:e6:22:a2:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:BB:06:65:82:EF:4E:EC:D8:D6:14:69:65:D2:06:C3:B1:40:CA
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/g827BmWC707s2NYUaWXSBsOxQMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.168.0-128.127.170.255
Signature Algorithm: sha256WithRSAEncryption
3c:0d:30:55:c8:eb:70:f4:87:5f:df:af:e6:3b:72:d5:9a:a6:
da:6b:87:93:3d:ac:29:92:6b:69:bc:77:7f:98:8f:b5:48:8e:
66:0f:59:0b:a3:0e:c1:c8:17:41:4e:46:00:c7:6a:87:fa:9c:
f9:ae:fc:8d:18:06:a2:b8:f3:6e:ae:8d:f7:1b:0d:ab:dc:39:
01:c0:2a:d0:bc:d3:7d:1b:21:9b:a3:27:28:30:58:3b:a3:55:
4c:c9:e3:24:07:89:99:90:24:ca:41:72:57:cd:43:96:36:74:
7f:7c:0a:d2:e2:dd:0b:82:75:6d:5e:12:61:7d:f7:10:94:29:
cb:42:87:5d:df:dc:45:27:dd:42:72:c6:5f:41:54:bd:81:89:
cc:8b:d1:65:0d:30:8e:60:11:88:34:14:16:73:6b:dd:9b:0f:
48:9f:b5:18:3e:a2:c9:d0:67:af:38:bf:ba:15:99:ef:b6:94:
89:3b:fe:9b:a4:fa:11:73:58:1b:9d:4e:3e:a9:4d:76:f1:38:
2f:70:b0:20:d3:a4:92:b3:3b:31:f1:3a:48:c4:eb:2c:8b:07:
26:14:52:e4:14:ec:0b:44:89:db:67:74:cf:82:d3:fe:7b:86:
1d:f7:0d:5e:72:2a:02:d5:58:3a:84:a6:71:48:3d:ff:d1:d4:
3b:f3:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:52 2024 by rpki-client on console-fra.rpki-client.org