Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/R1_gmd5ShNwW31owt0jmArfdBe0.roa
File: R1_gmd5ShNwW31owt0jmArfdBe0.roa (raw, json)
Hash identifier: 4qeyrqWj10vWIElLetQV3GT7a2C/0dPgHEUZydVAkIE=
Subject key identifier: 47:5F:E0:99:DE:52:84:DC:16:DF:5A:30:B7:48:E6:02:B7:DD:05:ED
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 018CC26D24BABF14CCDDA848CE76FEF7B641
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/R1_gmd5ShNwW31owt0jmArfdBe0.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8758
IP address blocks: 212.6.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 13:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:24:ba:bf:14:cc:dd:a8:48:ce:76:fe:f7:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=475fe099de5284dc16df5a30b748e602b7dd05ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:b9:e4:94:81:5a:0f:85:d8:45:20:8a:39:
af:22:9c:e7:d5:cd:b2:e5:3e:60:36:63:42:8b:e3:
a5:68:e8:84:22:8f:20:d8:2c:51:26:c7:d5:9f:ca:
d8:91:c1:1b:ac:9b:a0:cc:b1:d0:dc:4a:13:8a:ba:
f5:7f:77:72:29:96:f6:9d:3f:69:e0:8c:64:60:02:
cd:ef:dd:70:ba:04:6c:0b:b0:f6:4b:cb:51:d7:7a:
4d:a8:f2:8e:b6:ef:b8:f0:b5:da:c5:67:0f:7c:31:
7b:6c:99:16:e1:f0:0b:f9:1d:fd:46:19:09:7d:c3:
c3:7e:18:63:f1:94:69:b5:d8:fe:40:5f:39:47:b2:
26:90:e7:ac:4a:26:8f:7b:a5:f2:36:9a:ac:49:fa:
b1:da:5e:e2:18:25:22:87:60:41:28:9b:e2:4f:4a:
48:73:f9:06:00:29:fe:22:90:6c:69:e3:70:78:e8:
34:9b:3c:21:ab:27:24:5e:4f:3e:97:2d:fd:05:50:
47:b5:cd:a4:0f:47:e2:4e:ab:8d:22:74:40:11:f8:
89:4e:6d:a5:ef:d9:f4:e1:2b:ae:c6:c7:01:31:ae:
fe:41:28:87:ea:c0:be:6a:1b:68:0e:f1:11:6b:48:
e1:5b:25:b3:72:f6:06:4b:3c:a7:d0:58:c1:c2:d3:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:E0:99:DE:52:84:DC:16:DF:5A:30:B7:48:E6:02:B7:DD:05:ED
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/R1_gmd5ShNwW31owt0jmArfdBe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:00:4c:3d:f6:ac:e2:d6:c8:41:14:7c:bb:c8:11:96:40:11:
38:e0:2e:fd:4c:53:c3:58:cd:d9:8c:4e:db:7f:91:bd:7b:d9:
db:86:d4:ed:c5:45:30:3c:c2:3d:b0:79:59:d6:d9:50:2e:04:
9d:b7:d7:0a:ab:67:0c:0a:24:1e:b7:12:67:e9:a8:ff:ec:6f:
72:61:5c:b1:70:f5:7c:87:50:98:18:17:7a:e2:3e:82:70:78:
fe:a9:c7:d1:1b:45:3d:48:4d:5f:c0:03:a1:35:5d:e4:30:8b:
29:73:04:56:c9:53:75:2b:ec:21:ba:ff:67:16:c5:de:0f:ad:
26:ad:8a:38:9a:0c:fe:a8:3d:10:12:0d:a9:89:15:93:92:14:
34:b7:e0:e8:ee:f3:c4:42:e4:46:11:22:02:2b:42:0d:62:a5:
a4:63:e2:8f:5d:d8:e8:fa:e3:34:00:6e:68:a1:63:36:7a:24:
27:f8:f2:08:33:56:3d:27:71:50:5c:9b:e5:22:ad:92:df:9d:
d5:be:0d:fb:29:6f:f9:9f:b9:08:ff:a7:e9:aa:e3:bc:94:17:
89:5d:c1:62:65:38:b5:e7:3b:38:50:8e:38:4c:0f:5a:67:88:
08:9b:17:b4:7d:07:bf:5f:33:7a:68:cc:57:9d:f8:fa:2f:b5:
87:8c:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 18:33:03 2024 by rpki-client on console-ams.rpki-client.org