Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/G5tiMisiucMvrlOE406x9wQA43Q.roa
File: G5tiMisiucMvrlOE406x9wQA43Q.roa (raw, json)
Hash identifier: 4AARr3MjAAosI6bUEiCAp3LU8blGQX2glSjitWNaxiI=
Subject key identifier: 1B:9B:62:32:2B:22:B9:C3:2F:AE:53:84:E3:4E:B1:F7:04:00:E3:74
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 018EA272EEEFF2742EAFF8BCA553F654899B
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/G5tiMisiucMvrlOE406x9wQA43Q.roa
Signing time: Wed 03 Apr 2024 05:33:45 +0000
ROA not before: Wed 03 Apr 2024 05:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3300
IP address blocks: 195.206.69.0/24 maxlen: 24
195.206.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:72:ee:ef:f2:74:2e:af:f8:bc:a5:53:f6:54:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Apr 3 05:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b9b62322b22b9c32fae5384e34eb1f70400e374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:ea:8a:74:2d:c2:0f:97:bd:b9:b6:e0:17:
ec:99:1f:f7:75:9a:06:b2:9c:3c:47:1a:95:3b:5d:
b9:a8:65:be:31:4f:7a:78:a6:27:46:4c:04:3a:ef:
e3:c2:d1:66:04:4b:43:48:2d:fc:11:b4:ad:2c:9b:
80:e0:86:1e:45:2d:28:cb:f2:07:4d:7e:6f:50:ef:
14:fc:fd:c2:02:a8:7b:63:a9:50:a8:51:ec:26:ef:
ef:4f:e5:76:c8:ff:b5:6e:60:8c:e2:82:1d:60:c2:
94:77:20:c2:9c:1b:0b:db:d1:0d:64:fc:88:41:06:
02:3f:fc:85:f3:35:48:da:af:04:19:b8:80:ef:72:
45:d2:61:9a:86:8f:97:91:f6:a3:66:ac:fd:d7:c3:
41:43:26:a7:40:a1:cf:59:14:1a:80:3b:4a:1d:28:
35:f0:e3:01:c5:bf:da:3c:13:e7:8c:f8:3a:cc:a8:
e6:d1:59:3e:fa:7e:92:fb:24:52:fa:3e:db:5e:8b:
0c:82:cc:65:76:4d:44:a4:17:aa:35:ef:ae:ae:d5:
24:da:4b:c0:1e:bd:96:f1:81:2d:c5:46:3e:d2:9c:
1b:86:88:79:78:0e:a1:71:ec:fc:ef:ed:a2:fd:3e:
2c:59:22:b3:ff:b2:ce:e2:2c:73:df:73:c8:87:6e:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:62:32:2B:22:B9:C3:2F:AE:53:84:E3:4E:B1:F7:04:00:E3:74
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/G5tiMisiucMvrlOE406x9wQA43Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.69.0-195.206.70.255
Signature Algorithm: sha256WithRSAEncryption
bb:0b:bf:bc:40:ab:07:26:5d:9a:23:81:fc:8d:fe:a8:23:b4:
e6:6a:24:8f:c0:56:0d:25:62:4d:ff:85:cd:3f:5b:61:62:b6:
8e:59:74:37:9c:60:d8:35:16:4f:93:dd:57:92:28:97:84:a2:
ce:e6:08:03:b2:8a:40:03:85:b8:da:0d:10:47:5e:52:db:e8:
2d:90:09:92:9d:30:59:38:e8:f1:89:f0:cd:fa:fb:7f:4a:39:
e3:58:07:bc:bf:26:14:c7:c7:86:f7:c3:60:ef:b0:b9:df:d3:
17:4b:7f:6b:b5:44:b4:95:e2:00:04:3a:67:a5:97:a2:ea:47:
3d:cd:7e:00:e0:be:b3:b1:a7:6d:ac:7b:28:81:e8:21:1d:1a:
fa:33:ae:98:e4:31:0d:e4:f5:69:dd:71:09:dc:61:43:5f:72:
93:b2:e9:88:89:fa:1d:0c:24:56:25:2b:59:f2:1d:d4:3c:6e:
60:c0:d4:01:4e:7c:15:cf:6e:a0:7e:ea:bb:de:e8:1e:22:07:
61:5b:43:ca:1b:81:3c:0f:5a:66:c0:33:9f:f2:01:62:02:7e:
7b:fb:75:e9:9c:cd:78:4a:29:35:11:66:8f:b6:93:13:d8:c9:
7e:84:c3:a2:bc:2f:40:df:cb:d8:1f:2c:7a:ac:92:09:11:6a:
c1:fa:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:54:17 2024 by rpki-client on console-ams.rpki-client.org