Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/lG4OGyBZKr2ZSx8QIh-jTwVe2UE.roa
File: lG4OGyBZKr2ZSx8QIh-jTwVe2UE.roa (raw, json)
Hash identifier: 0A6EjJNL+TCEZidFw1j8YvI2nnzzoKaVZ/goKf49eZA=
Subject key identifier: 94:6E:0E:1B:20:59:2A:BD:99:4B:1F:10:22:1F:A3:4F:05:5E:D9:41
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB69B12355C22D7BBF04F6E9601C12
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/lG4OGyBZKr2ZSx8QIh-jTwVe2UE.roa
Signing time: Mon 01 Jan 2024 02:30:08 +0000
ROA not before: Mon 01 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 87.248.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:69:b1:23:55:c2:2d:7b:bf:04:f6:e9:60:1c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946e0e1b20592abd994b1f10221fa34f055ed941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:7e:13:2b:69:d2:c1:8e:a7:27:07:34:8b:
ab:71:9f:d2:63:07:34:71:ee:f8:22:cd:84:c6:79:
6f:5a:cc:94:08:d5:05:b7:a2:37:5f:54:79:42:0d:
16:a0:17:b5:a8:b4:50:93:f7:43:de:00:b9:d9:6b:
86:c7:51:83:58:a6:a2:22:bd:bb:6b:49:91:49:e1:
d7:1a:d9:bc:71:3e:bd:35:ab:10:e9:52:90:78:da:
f8:20:b1:e4:49:4e:74:cf:8b:1c:d5:53:23:b5:ce:
a0:c5:81:14:e4:fe:4e:12:ca:45:c2:f2:50:ae:24:
ac:e9:50:fd:72:46:2f:53:90:1e:2e:2f:1a:60:73:
e8:15:ad:f2:9b:69:69:be:9d:d1:d2:36:ec:d8:b6:
1a:58:7c:2f:f2:5a:b1:95:ae:c7:b8:70:e9:b2:d9:
c7:1b:f6:d4:8d:a0:44:25:9c:3b:7f:66:7f:41:8c:
71:03:43:61:05:ec:bb:cb:26:ae:49:87:8a:72:76:
22:39:d1:cc:15:bc:f5:0c:32:0c:09:67:85:e6:ee:
47:a9:60:11:37:e2:38:ec:44:26:b5:90:58:e8:47:
b4:da:2d:12:07:12:8e:bd:56:53:f2:81:51:cd:bf:
10:ef:9c:a4:c6:f7:c4:a7:03:23:4d:e5:27:cb:29:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:0E:1B:20:59:2A:BD:99:4B:1F:10:22:1F:A3:4F:05:5E:D9:41
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/lG4OGyBZKr2ZSx8QIh-jTwVe2UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b7:7c:bc:d1:2a:68:5c:d3:1e:fc:88:52:6c:f4:40:1e:61:
50:70:60:b4:fd:28:53:d4:b4:34:97:0a:9d:c4:f8:fa:87:7a:
7b:b4:58:1e:04:39:1c:e3:8a:7d:16:03:71:21:1b:74:cf:61:
9e:89:e7:b6:f7:2b:d0:28:62:67:9b:f9:a1:e5:e2:50:33:c9:
1e:5d:74:52:19:b9:6d:f8:d2:05:94:f0:9e:9d:36:9e:ae:66:
be:65:c1:fc:e6:be:44:94:7e:f4:c1:bb:14:cf:29:1c:d8:0b:
33:97:ff:c1:61:f7:8e:56:14:16:ca:cb:d3:61:c9:c8:39:80:
f3:64:23:a8:0c:a7:18:59:97:41:6e:5a:04:d8:3f:c9:4b:7c:
45:33:e0:7e:b0:70:dd:40:d2:8c:bd:d3:69:23:64:f6:b5:7f:
74:57:89:a8:2d:1e:09:da:2a:ad:d4:c4:7b:8a:be:43:a8:0d:
f6:11:18:46:f1:00:97:a4:55:2a:c1:f6:ab:22:08:99:c6:ba:
c2:e6:df:83:5a:90:b0:21:96:f4:53:24:f0:71:bc:a3:dc:6c:
05:96:27:74:4a:59:2d:cd:38:fc:58:1d:df:35:eb:ed:92:a8:
a0:55:31:f5:08:95:0b:3a:53:0e:75:d6:0b:a8:c5:c0:bd:97:
10:24:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:34:53 2024 by rpki-client on console-ams.rpki-client.org