Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Gj64beMoRbLwh8_mAi--RC2Mt_A.roa
File: Gj64beMoRbLwh8_mAi--RC2Mt_A.roa (raw, json)
Hash identifier: NHP6GLeqHM5xa5cLFuhciz3ohXgeZ3j6bYhKogSt4Ts=
Subject key identifier: 1A:3E:B8:6D:E3:28:45:B2:F0:87:CF:E6:02:2F:BE:44:2D:8C:B7:F0
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0191CCE012A9029BB579064FAA05D1EF58E8
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Gj64beMoRbLwh8_mAi--RC2Mt_A.roa
Signing time: Sat 07 Sep 2024 14:25:22 +0000
ROA not before: Sat 07 Sep 2024 14:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 46.253.143.0/24 maxlen: 24
91.211.115.0/24 maxlen: 24
193.17.92.0/24 maxlen: 24
2a11:1940::/29 maxlen: 29
2a13:a500::/32 maxlen: 32
2a13:a502::/32 maxlen: 32
2a13:a503::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cc:e0:12:a9:02:9b:b5:79:06:4f:aa:05:d1:ef:58:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Sep 7 14:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a3eb86de32845b2f087cfe6022fbe442d8cb7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:a6:d8:c1:fb:60:37:8f:85:a4:a5:e7:64:
62:00:f0:27:77:87:fd:6a:2c:75:15:f7:31:87:a2:
44:25:6d:ad:8a:0d:9d:ca:cf:64:ee:21:db:6f:25:
04:c8:d9:4f:e1:84:a4:57:2e:03:2e:44:a3:08:03:
6c:d5:20:bd:ec:80:1e:2d:59:64:4f:1f:34:08:f2:
b9:1a:d8:54:38:ac:69:52:1c:39:cc:61:70:05:8a:
c6:ed:a5:c6:6d:e4:f7:b3:6d:d6:74:45:48:49:1f:
fb:15:73:4f:96:e2:d5:1a:61:cd:0e:3c:60:55:f2:
f8:86:de:af:93:2f:67:aa:64:59:0d:e9:f7:79:7e:
7c:a0:8a:f5:5d:c0:4a:b2:cb:2a:af:c7:62:2b:d9:
df:f3:9e:54:eb:ca:a4:65:06:d0:ed:fb:1b:b7:46:
65:c1:2f:02:8b:05:dc:da:ea:2b:9c:a3:d9:a0:1b:
cd:e6:07:9f:ec:03:eb:47:09:63:42:70:2a:07:99:
84:ad:9b:59:83:97:d2:67:0e:94:0c:28:5e:c3:ae:
49:5b:52:21:e2:f2:5e:37:49:cd:22:f3:2c:87:e5:
32:92:22:59:57:12:c4:8c:73:5a:7c:cc:e2:75:51:
e7:ac:b5:3f:47:30:32:a5:3d:b7:c1:51:9f:91:7d:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:B8:6D:E3:28:45:B2:F0:87:CF:E6:02:2F:BE:44:2D:8C:B7:F0
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Gj64beMoRbLwh8_mAi--RC2Mt_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
91.211.115.0/24
193.17.92.0/24
IPv6:
2a11:1940::/29
2a13:a500::/32
2a13:a502::/31
Signature Algorithm: sha256WithRSAEncryption
87:00:aa:cd:b5:90:1f:1e:60:96:aa:1c:a0:bf:3b:f8:6c:f4:
62:17:c5:ae:4e:88:20:04:da:8e:14:d4:b9:0b:cf:4e:cd:a1:
23:97:22:40:43:53:5b:a9:eb:64:e7:5f:cf:05:e3:6c:03:b1:
f4:62:bb:b7:a8:f5:fb:67:90:e9:bb:fb:6e:59:78:e3:2f:07:
d2:58:01:35:bd:06:fa:84:ca:40:d1:17:33:62:35:4b:b1:b4:
b9:11:33:c3:89:1c:f4:fb:66:4a:56:1f:8c:90:a6:35:7e:9a:
d5:c9:2d:23:0c:27:75:00:2a:7e:7f:77:9d:99:2d:93:30:db:
06:d1:73:a3:85:eb:ca:d1:8e:8c:a2:26:03:0b:7c:b4:f8:c2:
1a:45:61:1e:84:a2:ac:d5:ac:22:37:d8:9c:e8:9b:01:aa:32:
bb:a1:ce:b7:39:16:6a:9c:6c:a3:67:db:91:30:c2:ed:4b:0d:
f8:b6:24:b6:84:ff:e7:c0:8d:b6:da:93:b8:25:44:a3:f0:d7:
34:88:c5:e2:16:69:7f:c0:5d:df:a7:ed:35:0a:ff:19:34:32:
15:b3:d7:49:d4:21:29:75:04:49:d3:68:c3:d6:d2:56:d6:3e:
1f:c1:d3:04:67:e1:fb:fa:70:79:2c:09:46:5c:70:24:24:89:
08:0f:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:17 2024 by rpki-client on console-ams.rpki-client.org