Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/git-4B2FrD6nJPCSjFNtOZt7grc.roa
File: git-4B2FrD6nJPCSjFNtOZt7grc.roa (raw, json)
Hash identifier: b3KZs82H/grV89LOr9W1J0aBmSCNX1NwaiBRgF6Jijc=
Subject key identifier: 82:2B:7E:E0:1D:85:AC:3E:A7:24:F0:92:8C:53:6D:39:9B:7B:82:B7
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC727557CC37C44E7D1CB49AE83B6A0D7
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/git-4B2FrD6nJPCSjFNtOZt7grc.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209371
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:55:7c:c3:7c:44:e7:d1:cb:49:ae:83:b6:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=822b7ee01d85ac3ea724f0928c536d399b7b82b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:d8:c5:c9:0d:31:6e:3d:14:be:5a:77:17:
5d:59:78:cf:a9:f1:ff:cd:31:e4:25:4f:ba:5d:70:
2b:d0:12:40:9f:ba:5d:03:ea:ac:87:04:3d:46:84:
ba:91:a0:72:4c:da:24:e4:be:30:fe:b6:c3:b1:11:
2a:4d:27:53:93:87:d5:91:7a:64:ec:76:ff:64:0d:
f6:d5:db:32:ff:9e:4a:c3:00:3d:2a:c4:b2:eb:96:
81:89:ad:98:71:5c:22:d8:1f:b9:a8:bb:8e:4d:b1:
5f:f9:8b:55:09:93:e9:aa:d1:09:90:4e:a3:d9:7a:
2e:53:5a:59:71:e3:b5:d8:f2:fd:23:93:60:58:ee:
9a:04:1e:82:da:ba:4b:8c:08:60:f2:3b:06:d1:93:
86:7e:9f:fb:9d:50:ae:1c:ea:55:49:28:3f:6f:e3:
e9:07:6f:70:95:28:5a:bd:8d:0f:7a:8c:54:d5:87:
d6:c3:00:cc:47:24:27:24:60:90:2d:c1:5d:33:95:
48:92:c5:16:a6:fc:b7:07:28:f5:38:0c:f9:7c:42:
33:69:42:1f:1f:23:8b:a8:38:71:c8:5e:6b:0a:27:
59:12:ae:e9:91:35:f1:05:81:d2:fb:3d:4e:5d:45:
07:ac:90:ad:a3:a7:ec:b9:a4:02:bf:29:77:e8:ed:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:7E:E0:1D:85:AC:3E:A7:24:F0:92:8C:53:6D:39:9B:7B:82:B7
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/git-4B2FrD6nJPCSjFNtOZt7grc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:00:07:6c:70:9a:b0:01:76:8e:fc:a3:75:a5:6f:b7:2d:68:
bc:6a:0f:85:60:c9:f9:e1:44:e8:4a:c1:50:63:9c:0f:54:4e:
04:fb:37:e6:9b:4c:c8:f2:62:70:b3:00:f5:b5:aa:d0:c1:96:
f2:f1:3e:3d:86:a3:9b:a0:14:86:3b:b3:7a:e3:6b:19:4d:e3:
d4:39:87:8d:02:c2:3f:84:21:30:ff:13:49:ba:2e:bf:c4:47:
4a:66:b0:b5:90:3b:2d:dc:c2:e9:08:31:94:a3:ed:94:78:82:
f3:48:3c:df:bc:cf:b4:d3:63:bf:e5:8f:8b:e3:57:e8:7d:e6:
09:f6:92:b1:32:ea:78:10:b1:ce:f2:e1:c8:81:bf:de:ea:83:
d6:13:3f:d7:56:42:3b:d2:fe:77:73:96:f9:a7:58:22:8a:f1:
cb:1f:c0:2e:dd:5e:a4:ad:16:14:79:07:c6:68:96:73:e8:40:
5d:eb:c8:94:11:fe:6d:33:ae:1b:bd:9b:9e:de:3b:e1:14:39:
99:2f:c7:61:bc:d0:ff:e7:02:65:eb:58:9e:3a:66:73:a9:8f:
7f:6c:ff:ab:aa:b3:9d:55:8c:18:02:1d:ec:ff:95:79:54:b5:
48:fc:8c:1b:0c:75:ae:57:3b:51:c6:58:81:00:18:58:50:76:
33:55:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-ams.rpki-client.org