Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa
File: GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa (raw, json)
Hash identifier: i/dq+aF4HEsssAvntSk4PEuypmTWbk+eLnz1a/0kM00=
Subject key identifier: 1A:84:A0:E6:59:99:DD:6C:74:FD:A9:E5:F3:E7:33:BB:C8:B1:7D:33
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 018CC5DD09F2BBA0990302D6B1EFBBA45C3B
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa
Signing time: Mon 01 Jan 2024 16:30:46 +0000
ROA not before: Mon 01 Jan 2024 16:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 156.83.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:09:f2:bb:a0:99:03:02:d6:b1:ef:bb:a4:5c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jan 1 16:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a84a0e65999dd6c74fda9e5f3e733bbc8b17d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:9e:d6:da:4e:36:3f:ff:5a:1a:ac:a3:85:
e9:8e:39:88:18:a8:58:23:d5:11:ec:1c:e3:65:18:
34:60:fc:ba:e7:14:8a:33:b8:42:66:5e:3c:7e:66:
63:24:5b:89:aa:42:85:e3:cc:3f:c1:9c:e9:5e:ea:
20:16:75:b3:2a:86:e1:8d:77:a4:23:e4:e2:6c:2c:
61:ef:0d:5d:82:46:f3:b9:34:03:af:e1:7d:60:39:
b7:dd:82:32:70:c3:e1:0a:9a:4c:98:da:27:8b:3d:
3d:90:1b:2e:76:0b:d7:b3:d2:a0:c7:66:2e:0e:3e:
a5:bd:12:ed:02:79:5c:d6:1c:d6:c5:6e:c5:54:7d:
ef:5b:ac:ae:b5:c2:47:d3:ec:7b:03:0c:72:9f:53:
60:89:0e:45:a1:6f:ff:db:6d:e1:e7:52:2a:5a:71:
23:93:d5:6a:ea:f4:15:d4:3c:42:54:62:10:31:5b:
62:4c:d3:84:07:d3:e0:fc:2a:e9:df:f4:f1:74:e6:
73:2d:d0:38:ab:62:45:32:a6:5f:ab:1a:06:26:3c:
5f:4f:c4:1b:6b:4f:82:a7:74:b7:5d:01:05:f2:f8:
50:f6:f3:e1:1f:50:bf:91:bf:00:4c:9c:24:9b:d3:
82:f2:9f:4d:a7:7c:d4:e7:fb:61:ef:82:55:77:82:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:84:A0:E6:59:99:DD:6C:74:FD:A9:E5:F3:E7:33:BB:C8:B1:7D:33
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:f2:ed:e2:46:25:7b:06:d8:1f:48:7f:ac:0f:1c:d8:a5:93:
bf:1b:54:0d:fc:a8:0a:68:67:bd:88:7e:b3:40:00:e8:16:5f:
0b:b1:78:36:bd:0e:aa:db:10:84:4c:e1:bb:5c:52:b3:8a:f4:
0f:a6:07:72:16:32:9a:77:40:52:4b:c7:5d:1b:31:ce:7f:e2:
4a:a3:5e:27:dc:44:12:8f:a8:18:d7:9c:58:05:7e:65:f5:80:
19:09:c5:0b:e4:be:6b:46:cb:56:70:05:5f:f3:3f:9a:d6:68:
a4:d3:1c:23:ff:4a:b8:a4:41:e7:c2:c9:6f:00:37:49:bc:6e:
6b:d3:8f:63:d8:09:1e:ff:3d:6f:8d:c5:ec:95:dc:6b:a9:7f:
b3:22:40:cd:cb:0f:eb:23:4f:35:5d:4a:81:bc:3b:6d:25:a8:
9c:9d:ab:df:5e:76:a8:76:09:7d:e4:c2:ad:21:a4:bc:2e:bc:
8b:d4:92:d8:0e:59:14:5c:51:13:a7:2f:db:62:36:e1:c6:db:
52:d7:4f:02:2b:a7:7a:24:22:dc:e1:7c:0e:95:77:a3:d9:38:
be:fe:41:c2:ed:d7:45:24:db:12:f8:79:31:dc:38:ec:69:48:
40:a0:2f:7a:21:92:70:31:e5:33:7e:50:51:9a:92:7a:2a:2b:
39:d8:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:16:27 2024 by rpki-client on console-ams.rpki-client.org