Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0a5bG24TZBfN32PzPx_FZtzYvc.roa
File: G0a5bG24TZBfN32PzPx_FZtzYvc.roa (raw, json)
Hash identifier: PSnDm+j9f4WXIp6I+J0tyUvWdjocdlpIGGiR4LeFxGU=
Subject key identifier: 1B:46:B9:6C:6D:B8:4D:90:5F:37:7D:8F:CC:FC:7F:15:9B:73:62:F7
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D50D3071D109C05F4F0095E50754
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0a5bG24TZBfN32PzPx_FZtzYvc.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21190
IP address blocks: 194.209.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d5:0d:30:71:d1:09:c0:5f:4f:00:95:e5:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b46b96c6db84d905f377d8fccfc7f159b7362f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:eb:d1:74:97:f6:f5:e4:ce:cb:4a:0a:93:
1d:19:ed:e7:1b:25:1f:7b:5f:41:14:3e:50:18:ec:
0c:a9:8e:89:5a:45:59:72:84:2a:5b:5a:53:cb:87:
44:1e:cc:82:1b:20:ba:eb:17:c4:d9:22:3f:13:06:
41:06:db:94:c7:e3:a6:40:f4:0e:7c:ae:64:37:66:
42:47:71:09:a1:4c:52:d5:0e:89:73:26:a8:7b:10:
fc:12:78:8c:74:1f:38:ea:08:80:a4:a6:b8:6c:14:
22:40:4e:20:8d:fb:56:a3:d9:61:91:02:b2:22:17:
82:79:91:34:fe:c7:fc:8a:10:05:d4:18:8f:c3:a1:
93:c0:23:17:c8:0c:02:fe:e3:8c:93:09:63:e7:9b:
52:fa:16:ff:16:81:05:5f:89:c2:be:e8:f5:a4:2b:
93:93:37:67:d9:fe:00:b2:bb:c8:bb:5d:cd:ec:3b:
1a:e0:cc:04:bf:2d:72:ae:26:83:4a:62:37:d6:31:
93:db:c5:43:d6:d3:46:dc:2b:af:92:9c:9a:ac:1c:
e2:42:33:b7:e1:cd:fe:90:08:eb:15:f4:d8:24:ff:
99:a6:34:fc:e5:48:12:06:6c:00:9b:f8:39:4d:93:
73:47:95:3a:3f:cf:47:b5:f3:8a:05:de:43:91:29:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:B9:6C:6D:B8:4D:90:5F:37:7D:8F:CC:FC:7F:15:9B:73:62:F7
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G0a5bG24TZBfN32PzPx_FZtzYvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6f:63:c1:0d:2c:79:77:34:ed:ac:cb:6c:0d:1d:84:d2:86:
db:3b:0e:77:a9:a1:da:03:a5:5f:5f:b9:28:db:85:1a:40:f7:
ce:fa:1d:78:b0:68:e7:6f:3e:4b:f7:85:92:5b:87:29:42:04:
20:e3:14:6b:cc:b8:71:fc:cf:33:b3:34:02:2d:d9:02:dc:a6:
ee:5f:c9:b2:46:f8:8a:b4:5b:cb:34:2e:ba:74:e7:9d:84:45:
b1:0d:d7:11:42:eb:8a:75:22:f3:02:b2:d4:fd:90:20:8c:f6:
85:32:5c:b2:01:c8:f5:d2:53:9c:d5:cf:a7:39:bf:40:e7:66:
68:f2:c2:6d:4a:7b:98:91:cf:f8:f8:a1:ef:78:b8:93:a9:d3:
ef:59:60:3b:eb:bc:05:fc:20:8c:c0:77:45:42:af:b8:32:5a:
eb:a2:8e:2e:b6:5e:bd:b2:e7:d7:b8:5b:0e:ad:b0:fb:d6:e0:
ec:4b:5b:cc:5a:df:6d:98:03:d7:6d:ca:0f:44:ad:36:c4:45:
e8:1b:77:76:df:16:ac:c5:81:87:c3:61:fe:51:7b:9a:4b:db:
d7:a9:ff:c4:78:78:51:1a:9b:41:62:08:43:be:fc:c1:85:e6:
25:84:5a:b9:7a:a8:2d:60:17:07:61:a8:b6:dc:3d:02:41:13:
29:fb:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:00:52 2024 by rpki-client on console-ams.rpki-client.org