Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/G4GPf9Z4nFaIinZAOL-C2xN4Bzk.roa
File: G4GPf9Z4nFaIinZAOL-C2xN4Bzk.roa (raw, json)
Hash identifier: MBao2QW9i+MamBUpN4CAlqHvCw7PU5aujLHteopnpQg=
Subject key identifier: 1B:81:8F:7F:D6:78:9C:56:88:8A:76:40:38:BF:82:DB:13:78:07:39
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 018CC801FEAF96E8AC3DB1C706C0465C99F4
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/G4GPf9Z4nFaIinZAOL-C2xN4Bzk.roa
Signing time: Tue 02 Jan 2024 02:30:23 +0000
ROA not before: Tue 02 Jan 2024 02:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209848
IP address blocks: 213.190.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:fe:af:96:e8:ac:3d:b1:c7:06:c0:46:5c:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Jan 2 02:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b818f7fd6789c56888a764038bf82db13780739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:04:6e:e1:51:da:d4:9c:a7:68:f3:47:02:
bd:5e:3d:d3:17:39:85:38:ce:36:85:ea:2e:ec:a2:
6a:e6:14:eb:98:7b:b0:d4:68:0e:4c:f8:ec:a1:68:
3f:05:e3:8e:93:ab:cf:e3:47:d6:ef:69:cf:c3:0b:
f1:c9:3f:cc:5b:ee:ed:2a:df:b1:79:ac:77:f7:b6:
af:e1:d6:ee:ea:d4:19:a8:06:ed:05:8c:b7:cc:97:
70:9f:27:3b:7b:3d:9f:18:b2:a9:4c:62:8b:ad:2c:
aa:e7:30:bc:66:b6:05:92:e3:82:84:34:6e:42:05:
be:ee:44:19:21:07:96:d0:5f:12:6e:3b:a8:0d:fd:
e0:3d:63:01:12:16:5c:1c:db:c9:c6:71:52:9d:c5:
2a:12:7b:00:29:f6:63:2f:69:f3:7d:df:ea:df:a8:
dd:33:f8:96:fb:a4:b2:13:a7:1d:8b:39:95:29:07:
ca:23:2e:83:f1:03:37:6b:e8:b4:9d:d3:99:e9:4f:
78:d2:4c:33:8e:b8:62:f8:83:fe:04:82:5b:fd:e3:
67:db:8c:48:ba:c9:c1:d4:30:90:8e:37:83:fe:56:
40:9b:4a:9c:75:a8:b2:37:6a:00:d8:f8:f6:ad:85:
b7:70:bd:b4:29:d5:e4:bf:54:3c:29:56:2d:55:dd:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:81:8F:7F:D6:78:9C:56:88:8A:76:40:38:BF:82:DB:13:78:07:39
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/G4GPf9Z4nFaIinZAOL-C2xN4Bzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
53:1f:8a:7d:8a:ce:c0:29:7c:1f:e0:95:11:46:51:d5:3f:27:
28:52:a7:63:09:3f:56:db:89:03:96:ae:2d:10:57:5f:68:80:
14:f2:1c:89:f9:69:aa:5d:bb:8a:f3:c3:6b:96:ab:e1:e0:69:
58:ea:3c:14:3e:9e:a0:da:4c:b9:a7:ae:68:2c:ca:73:97:73:
bf:13:2f:d6:b5:23:3e:1f:9d:00:f1:b1:20:3b:20:3f:b8:43:
83:b1:11:ba:3d:9c:ba:f6:97:3f:21:79:41:20:12:c0:ea:15:
2b:d1:08:ac:42:98:43:64:ea:c6:f2:c9:4f:ac:2c:22:55:47:
cc:fc:58:d3:fd:37:9e:f7:6a:63:ec:7e:a0:69:b2:4d:85:c9:
11:a9:1e:e1:10:85:40:6b:62:23:c9:5a:7a:12:da:eb:ab:e0:
ec:d5:e6:47:c6:c6:f6:cd:c5:9c:55:81:60:65:e5:1f:08:d7:
c9:0b:39:eb:0b:dd:11:22:41:86:45:0d:46:18:5f:3a:3a:51:
d1:ab:41:29:5f:3f:9c:d5:21:58:ef:13:a1:40:3c:42:15:24:
08:a0:08:b6:32:e8:7e:53:90:a8:b1:08:c9:58:d8:9c:a6:ca:
15:e7:af:7c:d8:1d:fc:77:34:c0:7b:fd:78:5b:a7:f0:4b:ab:
b9:54:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:06 2024 by rpki-client on console-ams.rpki-client.org