Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hGd9ewxm8ssQOWKq_2LRyn_-C5E.roa
File: hGd9ewxm8ssQOWKq_2LRyn_-C5E.roa (raw, json)
Hash identifier: FJ4TB8e3Q+e29/Wdc4bLGcrgZmyLvJAzOISINr4mGPM=
Subject key identifier: 84:67:7D:7B:0C:66:F2:CB:10:39:62:AA:FF:62:D1:CA:7F:FE:0B:91
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B6852B64752351064D9BDC44E32A1C
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hGd9ewxm8ssQOWKq_2LRyn_-C5E.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38971
IP address blocks: 109.196.132.0/24 maxlen: 24
178.57.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:85:2b:64:75:23:51:06:4d:9b:dc:44:e3:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84677d7b0c66f2cb103962aaff62d1ca7ffe0b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:87:1b:6a:ef:39:e2:83:c7:88:b9:27:31:
77:f2:42:26:0a:b5:68:0c:aa:17:58:72:b3:fc:18:
d4:ca:91:77:af:ad:fc:b1:17:f8:2d:bd:16:fa:50:
70:4e:e0:76:38:ab:62:1f:a4:fd:2d:a5:0e:20:5f:
19:04:2d:e4:f6:b5:d4:cc:12:1c:7a:1a:9f:0e:18:
74:50:c3:68:e7:a5:73:7e:17:cb:03:f6:4e:18:ec:
73:32:f0:28:a9:f0:a5:80:df:e5:97:ce:3b:5c:26:
f8:1a:fb:3a:de:e3:46:ed:e7:22:75:91:ee:fb:00:
b6:4e:5e:33:5e:5b:07:21:c1:e5:df:3e:7d:14:98:
e8:1b:9c:08:65:9c:5e:1c:92:6d:f2:91:3f:71:f8:
c2:bb:17:ab:23:8c:d1:90:2d:bf:fb:e5:85:ff:53:
3b:2e:2e:d9:b9:af:63:d5:8a:11:87:1a:18:c5:5d:
8a:de:de:3b:f0:c7:61:8e:c0:2f:08:5e:63:84:5f:
3e:c6:e2:28:ff:ce:85:cd:dd:ea:27:21:4e:a0:03:
0e:36:25:d4:c8:51:f9:56:cb:cf:f9:d3:f7:fc:c6:
d4:6c:50:ad:be:4d:b7:73:be:04:f8:e0:92:16:f0:
54:06:3d:26:4c:d1:43:aa:eb:75:31:bb:85:d0:ee:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:7D:7B:0C:66:F2:CB:10:39:62:AA:FF:62:D1:CA:7F:FE:0B:91
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hGd9ewxm8ssQOWKq_2LRyn_-C5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.132.0/24
178.57.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:43:8a:09:4a:1a:dd:d1:30:16:c5:11:64:be:53:45:71:1d:
d9:e2:79:74:8b:1a:6b:1b:d9:d3:16:74:25:94:8d:a8:3c:06:
1d:79:38:95:63:72:29:81:27:7d:07:ba:de:14:26:f9:a3:fb:
2b:00:61:04:d3:1c:14:7b:3a:5f:0d:84:53:60:93:bb:aa:ba:
3a:06:88:2e:9b:92:18:e2:ff:df:27:da:cd:06:0c:3f:16:84:
dc:0a:4e:f3:75:32:f0:ee:66:bd:80:57:89:d6:1d:8d:eb:f6:
9e:31:9b:71:ca:46:66:eb:d1:03:5d:de:78:6d:8d:61:98:92:
fb:2c:32:cf:bb:ee:a0:5c:ce:63:32:84:2c:8a:17:8d:ff:40:
03:61:02:99:b7:c4:33:69:a8:1d:aa:95:69:b0:b2:4a:88:e2:
ad:f3:73:61:e4:d9:13:b0:7b:0e:08:fa:95:9c:dc:98:93:e6:
ee:31:58:68:73:9c:8e:fe:a5:48:1b:7b:23:72:9a:35:30:6f:
b7:39:ac:b1:9c:dd:0e:28:2b:44:e1:76:de:e5:ec:8f:1c:1c:
04:43:72:80:07:6d:1e:8a:4b:64:59:36:7f:07:7b:18:73:d4:
e8:15:97:d7:bd:9a:b3:9c:80:bf:4f:c0:ad:39:d5:92:66:be:
59:a7:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:37:21 2024 by rpki-client on console-ams.rpki-client.org