Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-gppERqxc7RG9AnlK0q4X1svNWE.roa
File: 1-gppERqxc7RG9AnlK0q4X1svNWE.roa (raw, json)
Hash identifier: /Q2CRTquhQfdmw4BeQUTL868NwpjT1MEWuay1pcEFlM=
Subject key identifier: FA:0A:69:11:1A:B1:73:B4:46:F4:09:E5:2B:4A:B8:5F:5B:2F:35:61
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F6E6B4DFEB8595CDDF2BD598093E9AB9E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-gppERqxc7RG9AnlK0q4X1svNWE.roa
Signing time: Sun 12 May 2024 20:07:56 +0000
ROA not before: Sun 12 May 2024 20:07:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 109.111.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:6b:4d:fe:b8:59:5c:dd:f2:bd:59:80:93:e9:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 12 20:07:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa0a69111ab173b446f409e52b4ab85f5b2f3561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:c0:03:e3:a6:29:14:12:e4:57:19:0e:5c:
c1:7f:d0:2c:77:ef:93:b9:38:f3:22:da:3c:06:11:
6f:d8:47:73:2a:c2:e3:13:40:2d:92:52:03:ef:1c:
75:49:fc:35:86:85:a8:1b:3d:b2:9a:84:86:36:41:
99:51:78:b1:2a:3e:30:af:a1:51:46:86:32:3d:d6:
43:51:b4:08:e1:31:fd:19:69:67:0b:f0:40:98:9e:
07:37:17:d3:ec:4c:c3:46:72:46:67:c8:29:37:80:
4e:33:bf:91:20:61:f0:9b:3e:3f:12:0c:9a:e2:5a:
20:a9:c5:11:93:c1:71:e2:ab:fb:24:5a:9b:fc:7f:
2a:23:f5:ca:f7:10:fb:6b:6c:5c:5e:ca:a1:f9:57:
d4:96:18:db:82:e9:a2:39:4e:22:e2:43:aa:dc:1f:
a6:c2:41:53:ed:54:ae:15:33:f3:ae:14:dc:1f:68:
5a:42:ed:fd:93:92:2b:50:1d:1f:e3:1a:6a:bf:99:
ff:aa:46:5b:ba:a2:bd:23:67:ee:e4:1a:54:2c:2d:
f5:8c:3e:ec:55:fa:e7:ef:7d:1f:2f:84:bb:61:a5:
62:70:e7:27:33:ca:94:32:69:47:db:d2:f2:d6:b4:
f0:28:cf:b2:da:58:9d:42:4b:ae:4f:ba:40:cd:31:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:69:11:1A:B1:73:B4:46:F4:09:E5:2B:4A:B8:5F:5B:2F:35:61
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-gppERqxc7RG9AnlK0q4X1svNWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ac:1f:e6:c5:d6:cf:5f:8b:b2:03:dc:c3:15:e0:0f:86:a8:
f5:6f:02:d7:2c:2e:9a:2e:20:30:0b:7e:09:cf:ce:26:44:16:
ee:f9:5d:a5:31:05:87:cb:68:6a:bf:9f:48:eb:eb:55:9d:0d:
71:d4:1e:50:f6:7d:d2:19:56:4c:7c:86:3c:f6:d7:d8:b3:02:
de:3c:dd:da:3b:2d:29:5a:46:b5:44:06:25:c2:27:e1:99:c0:
33:84:38:c2:f7:0a:11:65:41:ec:fc:eb:c3:68:2e:12:07:5f:
c6:fa:9a:91:62:22:be:15:25:57:f5:47:f1:0e:4e:a8:68:8e:
90:8a:69:13:ef:da:c0:48:6c:e7:3e:e5:26:2e:c2:46:5e:f9:
dc:ac:14:ab:bc:b5:1f:eb:2f:da:76:5d:f9:f7:29:f5:eb:a6:
ea:00:04:42:7f:6b:ab:29:82:ae:70:ad:e4:95:6b:2a:45:d2:
29:88:2f:80:8e:70:b3:dd:00:51:68:39:d3:dc:de:75:27:53:
3e:2b:98:38:2e:a8:1c:3a:49:84:73:6a:46:9a:91:cf:5e:f9:
01:36:08:ad:54:9f:23:fe:8b:63:f1:bc:3b:17:29:05:67:b7:
22:20:30:77:b5:a6:11:65:f2:fa:f3:63:0f:9e:32:2f:d8:e2:
00:62:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:33:14 2024 by rpki-client on console-fra.rpki-client.org