Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/G3bhTPBOcnzfDISXw7mqrSo_CTY.roa
File: G3bhTPBOcnzfDISXw7mqrSo_CTY.roa (raw, json)
Hash identifier: TjGRSifc0WjymM2IhBdocNgj7ij4cl3Elp2vX5kS7j4=
Subject key identifier: 1B:76:E1:4C:F0:4E:72:7C:DF:0C:84:97:C3:B9:AA:AD:2A:3F:09:36
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0191DB3D3B9158790696997CA022FF3A0DCB
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/G3bhTPBOcnzfDISXw7mqrSo_CTY.roa
Signing time: Tue 10 Sep 2024 09:21:48 +0000
ROA not before: Tue 10 Sep 2024 09:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 45.151.97.0/24 maxlen: 24
45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:3d:3b:91:58:79:06:96:99:7c:a0:22:ff:3a:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 10 09:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b76e14cf04e727cdf0c8497c3b9aaad2a3f0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:41:24:d9:80:ac:a8:52:9f:86:f9:fd:cb:
0c:88:48:6c:28:79:0c:ff:56:d2:2d:99:99:9a:1f:
22:de:7f:c8:b4:d6:21:cc:12:28:fc:8c:3e:d6:b6:
9e:92:9b:8d:c6:80:1f:62:56:38:3b:4d:07:9e:e0:
38:45:75:1e:30:da:f1:07:4e:e9:19:8f:00:83:ad:
e3:80:9f:b7:bd:6d:86:24:1a:02:9e:10:d6:32:69:
2a:b5:38:66:ff:59:79:d8:d5:34:44:c5:8e:54:76:
76:5c:48:8b:55:fa:88:4c:cb:51:75:83:0d:16:e9:
04:2b:b1:df:a7:46:29:43:15:92:25:2b:2d:99:22:
3b:62:59:93:46:d9:14:e1:85:e1:00:6b:d7:e4:97:
bc:f2:66:bb:18:c2:64:45:96:8e:7d:ef:9b:96:d9:
be:69:8c:c6:aa:d1:b8:71:cb:be:6c:9e:a8:bf:16:
e4:ac:5b:3e:69:67:1a:a4:1b:b5:85:fd:bc:b7:c7:
af:b8:74:b5:5a:85:3a:a1:8f:12:22:00:7e:0d:4a:
15:06:fa:3c:cd:1c:de:d0:60:9d:0c:c1:b5:e4:62:
5a:89:e0:9a:aa:ca:ef:50:c4:bb:e7:3c:de:2b:4b:
6c:4f:cb:38:65:22:22:14:7b:93:31:2b:d2:35:ff:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:76:E1:4C:F0:4E:72:7C:DF:0C:84:97:C3:B9:AA:AD:2A:3F:09:36
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/G3bhTPBOcnzfDISXw7mqrSo_CTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.78.0/23
94.137.90.0/23
Signature Algorithm: sha256WithRSAEncryption
23:dd:1b:a1:fa:e2:73:dd:39:54:f5:64:2a:48:81:f1:5c:fe:
c8:6b:80:a8:e0:79:61:30:b2:96:f2:73:d3:f5:8f:fe:d2:e8:
99:e9:d7:68:af:fb:58:b3:ed:9f:0b:a4:1c:94:a2:0c:e7:29:
b4:fd:9c:7a:fa:4b:b1:a7:7c:4d:74:c4:22:e6:9a:03:19:98:
63:9c:d1:db:52:0a:94:bd:6c:24:73:fd:44:e8:87:1a:ea:f1:
d0:c9:79:1e:bc:9f:db:a5:bc:6d:41:07:bb:f3:38:31:e4:b8:
88:70:2a:ae:a1:e2:39:9f:82:e4:7e:2b:69:c2:b8:3d:ad:8c:
74:e7:16:c5:7d:5f:c3:f4:51:56:40:77:e0:d7:e9:a5:f7:71:
a9:c2:b8:b6:fc:74:ce:29:52:91:7b:9b:d2:e8:d1:9a:32:5e:
bb:74:0c:17:75:47:39:99:48:86:64:6e:3f:56:c1:23:08:4f:
dc:a9:69:1f:da:2c:2a:c1:44:e2:a9:56:48:1c:f9:8b:40:2e:
96:e8:03:c6:60:0f:a3:df:1b:db:86:27:53:4a:21:c2:c6:55:
40:b1:aa:f2:ad:2b:2c:0b:d7:da:34:08:e3:1a:f3:56:22:51:
72:bf:d9:c3:f6:31:29:14:73:17:65:5f:e3:48:c8:83:24:a4:
e1:b3:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:42:54 2024 by rpki-client on console-fra.rpki-client.org