Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/g6wrRdqVYCKh1NKQu7IouEscf0g.roa
File: g6wrRdqVYCKh1NKQu7IouEscf0g.roa (raw, json)
Hash identifier: wm/yHqyN497IV7eZmw9pVJM4mKZ/knwZq0V7IRPj/tI=
Subject key identifier: 83:AC:2B:45:DA:95:60:22:A1:D4:D2:90:BB:B2:28:B8:4B:1C:7F:48
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 018CC9BB2268011CD7B4BD0C31762A02F04E
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/g6wrRdqVYCKh1NKQu7IouEscf0g.roa
Signing time: Tue 02 Jan 2024 10:32:13 +0000
ROA not before: Tue 02 Jan 2024 10:32:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212944
IP address blocks: 185.163.51.0/24 maxlen: 24
89.35.78.0/23 maxlen: 24
2a07:dfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:22:68:01:1c:d7:b4:bd:0c:31:76:2a:02:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Jan 2 10:32:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83ac2b45da956022a1d4d290bbb228b84b1c7f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:30:38:f1:44:e1:84:a3:53:26:ec:26:b2:
2b:14:8f:28:27:64:33:10:7a:77:60:a6:37:94:b8:
6d:fb:f6:9e:ea:7d:75:a8:36:11:72:83:a5:57:fd:
8d:c2:31:e1:20:ee:09:ee:80:43:85:40:d4:df:c4:
97:70:4b:c7:4e:1e:14:3f:41:79:7a:3b:a0:54:ee:
78:91:3a:c8:73:29:d1:bf:6e:4a:1c:32:8a:bb:c6:
51:ba:1c:82:f4:42:77:b4:90:35:de:6e:1c:78:db:
23:33:12:ca:7e:f5:87:75:23:6a:f0:60:08:43:17:
fd:a6:ca:1a:39:f0:ed:99:5b:51:30:0a:c2:06:d4:
c3:8d:57:69:4f:e6:97:45:d7:88:9f:7e:71:a4:05:
6a:3b:45:3f:f9:89:da:c5:e9:07:d2:e3:43:e1:2d:
ea:a5:35:a5:34:a3:1b:a3:e8:1a:bd:34:3e:84:df:
02:42:5e:5c:39:92:4a:b8:ec:c9:01:a7:bb:a7:ae:
a3:52:09:6e:44:4f:92:9c:c4:fe:51:8a:22:63:7b:
73:c8:86:8b:b3:bc:33:44:5c:d9:31:9a:c7:ce:00:
62:dc:0b:98:07:38:aa:49:46:bf:c0:f3:3c:b8:7e:
49:d6:1c:40:a8:a1:84:48:c5:d1:1b:ad:e6:46:3d:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:2B:45:DA:95:60:22:A1:D4:D2:90:BB:B2:28:B8:4B:1C:7F:48
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/g6wrRdqVYCKh1NKQu7IouEscf0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.78.0/23
185.163.51.0/24
IPv6:
2a07:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
48:09:a2:c1:3c:5f:70:b3:5e:36:96:d2:08:d1:2b:32:1a:f6:
2a:c4:0c:52:c1:c3:9e:87:e8:3b:c3:27:8e:40:b1:24:1e:a0:
8b:90:a6:3a:05:4b:21:7d:5b:c3:03:ae:56:45:82:d9:ef:57:
ce:74:d2:b5:0e:6d:29:f8:41:ca:4a:1f:d9:21:7b:b8:ab:b9:
72:c6:13:06:12:f6:5e:b7:47:35:0a:5a:be:5b:73:b0:7c:e7:
4d:3b:50:9c:b0:5a:db:8f:d7:53:76:c0:84:dd:36:ed:d0:6d:
57:36:24:d2:5f:1c:19:b1:55:1b:e2:cb:cd:3b:b9:81:21:ef:
18:3e:09:df:4b:bd:ac:a7:80:10:9f:0f:bd:b9:d3:4d:8f:bb:
fb:db:0e:2f:4d:18:0e:72:38:77:32:c5:35:4a:52:58:a1:30:
e9:24:a8:24:30:09:03:86:d9:19:d2:0c:6e:b1:9d:44:b2:27:
5e:71:ef:0c:f3:71:8c:36:5c:e3:34:94:ff:f3:89:2f:27:7f:
5d:4e:ce:a4:6d:7a:ad:61:7c:2f:81:08:35:6b:ef:2d:27:38:
04:b3:f5:4e:cf:6b:d6:b8:45:91:08:fe:99:00:aa:47:6f:a1:
61:a1:dd:e3:96:00:fc:12:0f:9b:e6:8f:e0:8d:a9:10:a2:11:
07:e8:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:32:38 2024 by rpki-client on console-ams.rpki-client.org