Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/GivQx88eSql4d-erzZBsCVrCpF4.roa
File: GivQx88eSql4d-erzZBsCVrCpF4.roa (raw, json)
Hash identifier: hVe63yjWNRGJemvxQFqwjC1LKhf9nmMsqeW1YQFrC1o=
Subject key identifier: 1A:2B:D0:C7:CF:1E:4A:A9:78:77:E7:AB:CD:90:6C:09:5A:C2:A4:5E
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0191057E3D37DFB422784387EFAD13AF5A96
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/GivQx88eSql4d-erzZBsCVrCpF4.roa
Signing time: Tue 30 Jul 2024 21:14:04 +0000
ROA not before: Tue 30 Jul 2024 21:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61437
IP address blocks: 185.200.156.0/22 maxlen: 24
2a09:a940::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:05:7e:3d:37:df:b4:22:78:43:87:ef:ad:13:af:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jul 30 21:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a2bd0c7cf1e4aa97877e7abcd906c095ac2a45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:41:4e:4a:d6:a7:43:01:d8:5d:7a:44:b7:
e4:07:18:c8:03:8d:17:98:32:29:06:a5:50:56:9e:
39:f4:f5:04:f5:2b:fb:66:08:29:ef:da:02:7d:7d:
61:7b:6d:3a:bf:3a:48:44:26:3b:fe:0a:2f:cd:ae:
3b:57:3e:e1:52:5f:0a:df:02:fd:d6:c3:23:46:b1:
37:a3:9e:e4:fe:f7:15:a9:5a:4c:78:a6:00:8c:8e:
6f:37:63:cd:09:f0:b3:64:22:a9:77:8b:74:4e:79:
f7:7f:63:e5:82:40:f7:00:43:c2:39:3e:c5:0a:07:
7b:9a:89:14:2a:43:29:5c:cc:89:9a:72:12:6f:38:
3d:2d:00:ae:a2:47:44:8b:b5:34:93:d2:50:99:92:
95:58:fe:5e:34:f4:06:08:92:6d:06:96:a0:ae:4a:
12:ec:78:93:af:ab:6d:26:3d:92:05:f9:37:2c:ec:
41:21:04:e2:77:7a:7a:e9:f6:0f:51:1f:5b:ff:5c:
cf:bc:b2:0d:46:ec:5e:6a:b4:71:8a:d2:12:bd:39:
e9:13:91:af:4e:9a:f9:0d:9a:87:34:a8:57:29:9a:
33:b0:07:13:4d:12:65:f8:44:f8:c4:2b:0a:f5:df:
8e:1a:d2:d3:2e:76:37:af:1e:ab:ac:75:bf:3b:a6:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:D0:C7:CF:1E:4A:A9:78:77:E7:AB:CD:90:6C:09:5A:C2:A4:5E
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/GivQx88eSql4d-erzZBsCVrCpF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.156.0/22
IPv6:
2a09:a940::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ea:c3:3c:84:ab:94:c6:fe:53:4b:61:70:bf:fe:0f:1e:bd:
d7:f8:e4:df:84:fc:2f:23:e4:1e:49:5c:77:4c:1b:11:06:c9:
a2:f2:01:7d:97:04:bd:b1:15:3c:97:df:35:aa:d1:eb:23:c8:
ee:0f:63:f0:3e:7c:25:fb:45:bb:86:e5:ae:b3:6f:73:19:b8:
11:7a:cf:95:bb:0e:3e:98:1d:ac:6b:f5:90:af:af:d6:3b:5e:
13:6f:31:68:68:2b:e8:08:86:e5:06:97:99:f9:0f:16:7b:01:
28:f5:95:59:8c:df:de:d8:33:15:17:38:47:47:70:1c:b1:5a:
17:d4:d3:f7:e3:d7:db:02:1d:a8:44:18:89:ee:d9:91:6b:d9:
ad:69:a6:85:f4:14:41:76:62:af:a8:e5:2f:ee:67:49:bd:02:
b7:8b:ec:59:30:0c:40:46:20:14:60:3d:73:45:e5:33:e3:33:
d3:3c:f4:fa:96:35:e6:4f:14:67:56:ab:df:86:40:38:99:bb:
e7:df:59:1e:81:8f:f2:70:57:ff:a4:32:85:9c:76:b3:b6:3a:
81:c7:f4:96:27:f2:33:b2:39:71:a9:54:29:28:29:b0:78:2a:
66:46:e3:51:59:9d:a1:04:ca:b7:57:6a:a9:41:1a:87:db:5e:
65:96:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:35 2024 by rpki-client on console-ams.rpki-client.org