Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa
File: G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa (raw, json)
Hash identifier: 27ThFvHk5JZTfqzk05BswlgrcgDHlW8rQUsGE2mFT14=
Subject key identifier: 1B:DB:B6:28:5E:7D:13:3D:D3:93:EE:8C:02:06:5D:7F:2B:D5:1C:BE
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794CC0DCBCCC770F7A5D5A71325BC9E
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13768
IP address blocks: 104.249.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cc:0d:cb:cc:c7:70:f7:a5:d5:a7:13:25:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bdbb6285e7d133dd393ee8c02065d7f2bd51cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:43:05:9a:b2:73:aa:af:03:10:8b:16:9c:
4a:85:96:b7:e7:bb:81:ba:62:15:06:3d:7d:79:c7:
83:07:dc:49:f4:96:ca:ad:43:b5:33:67:1a:88:15:
d5:8d:24:97:02:a0:7d:eb:2e:84:10:54:14:7f:c3:
2d:32:48:5d:31:a7:ee:b5:9c:a2:f0:72:18:f9:3a:
ad:b4:cd:b8:1a:a2:89:df:db:15:a7:d8:82:d5:c1:
a2:b0:0f:b2:91:04:cc:9b:69:5c:3f:2c:c9:78:95:
5a:e7:27:55:50:5b:d1:75:16:1a:be:7f:62:60:a9:
1d:16:ce:47:5f:7c:91:70:5d:45:d5:08:75:91:f0:
a1:86:e1:6a:e1:98:86:30:8c:1f:21:ba:04:17:c0:
0c:b1:e2:00:de:06:65:54:ec:8a:0f:84:51:a3:20:
10:f2:6d:32:6f:aa:82:8a:37:ad:26:2c:2e:6d:72:
3a:e7:c8:cf:20:64:e8:63:3b:84:95:86:05:05:4a:
2c:4f:58:8f:4a:2d:ab:91:1e:20:ff:bc:e0:61:d2:
85:a0:90:13:4b:c6:80:3e:40:a2:49:98:83:ee:17:
0f:63:37:ac:58:9f:0a:44:2d:0d:a1:21:03:59:c8:
fd:32:88:e2:f2:0c:9c:b4:d6:2d:2e:0b:39:bb:70:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DB:B6:28:5E:7D:13:3D:D3:93:EE:8C:02:06:5D:7F:2B:D5:1C:BE
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c0:e9:99:8b:46:a5:45:24:b5:19:77:14:c1:50:09:1f:6b:
2a:9f:24:01:7b:9c:37:d9:59:68:d5:73:48:5c:2d:67:ee:f7:
b0:76:99:3e:2c:a7:5f:2f:3e:dc:9a:3f:97:be:d0:34:1e:ea:
bd:49:e3:2f:98:17:c2:5f:d4:b5:f8:07:57:f5:85:84:2a:cd:
51:c2:4d:dc:13:ae:0b:60:e4:80:2a:64:4a:f2:6e:8f:6f:8a:
a0:ce:7f:99:2e:8d:53:9e:00:4c:a8:9f:59:6c:39:47:4d:6c:
5c:ff:2e:f2:c9:cf:7d:b3:e3:66:2e:73:8c:0c:3d:ef:b3:65:
2a:53:6f:4e:d7:e6:71:51:8d:37:d2:75:c9:0b:0e:75:de:ab:
7c:06:f0:b4:cb:21:ad:be:a0:52:dc:eb:05:44:f2:ab:71:35:
99:d8:33:a1:19:0c:73:6a:3f:95:60:6f:f1:2d:7c:8a:4e:be:
a8:c1:36:3d:c5:f6:01:ea:c2:26:1f:fd:19:e5:0b:fe:3a:f5:
8a:60:a0:76:7b:a1:50:bb:0e:70:b9:42:98:ee:ba:a0:6f:f2:
89:96:8e:d5:58:44:6b:2c:64:4d:b9:d6:97:b8:ee:31:8d:25:
e3:bc:cb:27:c6:7a:7a:12:c2:f6:f6:6a:bc:da:23:f8:88:bc:
28:57:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:45:14 2024 by rpki-client on console-ams.rpki-client.org