Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Giy_cY2hXWoR8XU-3QjXqf7bXyo.roa
File: Giy_cY2hXWoR8XU-3QjXqf7bXyo.roa (raw, json)
Hash identifier: XTzavBunpdxIwWmbQaMAMkp9XmRvbelG15+fogTlbYM=
Subject key identifier: 1A:2C:BF:71:8D:A1:5D:6A:11:F1:75:3E:DD:08:D7:A9:FE:DB:5F:2A
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE611E9059B45126CCEEA1D1C9BE4
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Giy_cY2hXWoR8XU-3QjXqf7bXyo.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 87.118.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e6:11:e9:05:9b:45:12:6c:ce:ea:1d:1c:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a2cbf718da15d6a11f1753edd08d7a9fedb5f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:8c:aa:61:cf:36:e8:46:92:6a:a8:b4:71:
5c:72:d2:86:e4:60:e0:90:fd:de:d3:52:68:52:c7:
8c:c3:23:89:51:3b:1b:ee:f4:68:a1:cf:9a:ce:65:
40:74:83:85:9c:f3:05:8a:e2:ab:e4:4b:c4:5d:1c:
9b:69:c5:10:e3:4e:b2:f2:49:b9:fe:1b:b7:29:70:
3f:f2:0e:e6:eb:ac:cf:bf:80:5b:45:14:1e:dd:d0:
a0:23:1f:6a:f2:0c:ee:27:2c:65:24:d2:d9:c7:70:
dd:20:27:d0:63:c5:e0:d0:0c:9d:ba:e5:75:a6:39:
89:4c:4f:5c:5a:ac:5d:f6:d0:86:d5:dc:47:19:59:
d8:b2:f2:a7:ab:25:33:16:82:0f:dd:a0:fe:cf:40:
4f:88:5b:cd:13:f2:41:4a:6d:dc:06:50:fe:8f:12:
ba:b6:70:10:43:af:08:f3:a0:59:84:e8:eb:88:6e:
6e:50:09:4b:44:d0:90:d6:57:1d:dc:02:0c:2f:a1:
0e:71:bb:80:1c:f6:c3:87:06:df:53:98:c9:d3:3f:
cb:8c:5d:18:ef:1c:92:0a:a1:bf:ff:92:25:d8:1c:
3a:f6:81:54:f6:ce:2e:b2:ef:0d:bc:a6:3b:f2:1b:
c8:59:30:8d:f5:c2:c1:57:85:d9:06:6f:09:9e:b4:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:BF:71:8D:A1:5D:6A:11:F1:75:3E:DD:08:D7:A9:FE:DB:5F:2A
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Giy_cY2hXWoR8XU-3QjXqf7bXyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:54:b8:c6:1e:be:2c:00:41:97:0e:d7:3f:d6:22:76:b3:91:
a3:8f:02:bc:38:4e:ff:b5:60:ad:0b:fc:42:1a:87:7a:01:30:
33:b9:ec:40:97:4c:c8:40:24:50:de:42:19:ae:63:1b:3e:ae:
53:92:a7:a4:db:30:b3:5b:f6:16:fe:d2:ea:6e:81:98:c1:de:
6a:d5:e9:fe:72:87:9f:b3:f9:6f:6a:f7:c0:ed:3a:f2:10:dd:
4a:b8:bd:76:45:3e:7b:d4:d1:a6:f3:a3:86:2a:b7:3d:ee:ff:
c1:28:22:92:6b:7e:cc:8e:2d:fa:8f:3c:8b:91:a0:17:63:fa:
33:a7:64:7b:ce:05:25:0b:1d:78:80:9e:63:13:e2:c3:70:a1:
1e:02:8d:f4:a8:a0:63:59:71:ac:05:5d:b3:a8:a4:17:56:a8:
b6:60:e1:07:ec:5f:a5:62:fe:2f:04:e3:e5:2f:17:8a:4e:d5:
f7:84:ef:6c:ea:a6:c5:fe:f7:aa:93:7b:a8:b0:8e:04:9a:63:
1c:3c:1d:4a:6e:89:ff:d0:99:09:66:77:15:dd:1f:b1:96:93:
84:fb:60:23:56:e1:a9:ea:88:26:c4:7e:8d:cb:f0:6f:dd:91:
01:8e:51:3b:61:f8:e0:7f:e2:7c:6c:1f:53:92:4d:65:12:79:
d0:82:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:07:09 2024 by rpki-client on console-ams.rpki-client.org