Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/gFDwYtNl12zP-JM4U-i-m1jfMSY.roa
File: gFDwYtNl12zP-JM4U-i-m1jfMSY.roa (raw, json)
Hash identifier: FS/Ra1fr6TKk0bh7nkoK4V6bISKqT/ZYhvcJS52rZWs=
Subject key identifier: 80:50:F0:62:D3:65:D7:6C:CF:F8:93:38:53:E8:BE:9B:58:DF:31:26
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 018CC86EFEED5E6E7C66AA87BCB2DAED7324
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/gFDwYtNl12zP-JM4U-i-m1jfMSY.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 91.211.115.0/24 maxlen: 24
2a13:a502::/32 maxlen: 32
2a11:1940::/29 maxlen: 29
2a13:a501::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fe:ed:5e:6e:7c:66:aa:87:bc:b2:da:ed:73:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8050f062d365d76ccff8933853e8be9b58df3126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:75:64:e5:f7:db:9e:95:ed:c1:cd:2b:7f:
50:f1:db:b6:ff:f3:61:c4:2f:ea:fb:6f:85:b2:ed:
59:78:3a:56:e7:38:a6:6f:e2:84:8a:09:83:98:b6:
a7:bf:8b:3e:8a:0f:65:4f:bd:28:a5:be:55:51:54:
8c:31:8c:67:af:1d:ce:16:d3:f3:8d:77:d0:d7:67:
38:07:70:db:05:53:38:64:5f:3a:ab:6f:20:8f:9e:
63:31:ff:76:62:6f:22:a9:65:1d:3c:1c:00:fc:92:
5c:cd:85:40:8b:c9:98:be:19:e6:95:bb:ca:60:e9:
13:30:e4:c3:a2:c4:0a:e8:93:f5:a5:12:c5:b9:0d:
36:f0:fe:90:fb:a6:12:52:e0:a8:dc:da:9b:43:f4:
71:4f:60:dd:1b:fc:be:7f:08:dc:95:6f:3b:ec:93:
0c:1c:89:35:67:9a:51:f9:76:c0:fc:03:b7:b0:3d:
5c:5d:57:a3:e2:41:2f:87:e9:f5:0c:f5:16:a7:00:
79:8f:51:b4:e5:7f:27:41:b1:cf:f4:1f:f0:e6:75:
22:48:2f:19:3f:7d:89:2e:3a:3c:c7:0a:81:c3:1c:
63:a5:73:94:39:cc:7b:fe:f6:f3:4b:53:08:0b:8f:
a3:14:dc:1f:d1:ed:fe:8f:5b:59:eb:b3:c7:18:85:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:F0:62:D3:65:D7:6C:CF:F8:93:38:53:E8:BE:9B:58:DF:31:26
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/gFDwYtNl12zP-JM4U-i-m1jfMSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.115.0/24
IPv6:
2a11:1940::/29
2a13:a501::-2a13:a502:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:28:2e:23:5f:40:31:c2:9d:56:43:a0:34:59:2f:6b:06:62:
c9:f6:32:93:b0:5d:f4:5a:50:8e:5b:8a:71:6d:6a:67:8b:ed:
7e:a8:bc:0c:d3:ce:31:ce:47:b4:80:d3:19:e7:96:60:4b:20:
e1:27:ef:aa:e6:5e:8a:fb:47:bd:51:74:2f:24:3e:07:0c:71:
0d:ed:b4:db:43:e0:5d:65:3c:db:58:21:3b:76:b7:e4:5c:24:
55:03:9c:01:17:80:46:c9:5d:d6:56:86:32:44:aa:8d:9b:96:
c7:33:91:02:9e:cb:50:e0:ae:59:00:36:4d:59:09:2d:b0:73:
99:c8:c7:c7:76:48:40:6a:15:b7:ed:c1:67:40:94:3d:79:34:
67:db:59:00:63:4d:f5:00:e9:e0:ee:2d:07:c0:56:7a:c9:4d:
32:d4:2e:84:b7:ed:8d:05:b8:60:d7:a2:57:22:97:0c:2c:aa:
9f:de:8b:7c:6a:a2:4b:56:98:80:28:99:fb:e2:bf:76:b4:50:
bc:d3:16:8c:72:80:07:a9:a2:34:1d:d5:5d:cf:d9:03:72:a0:
21:6d:77:9e:78:21:c7:4c:3b:5c:53:93:fc:53:ad:db:88:da:
92:30:f0:57:96:5a:2c:57:35:a5:1a:60:ff:a8:8e:29:a6:d6:
a4:cc:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:55:38 2024 by rpki-client on console-ams.rpki-client.org