Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/g6pV_pEhme532gwNX2mBqelnOWM.roa
File: g6pV_pEhme532gwNX2mBqelnOWM.roa (raw, json)
Hash identifier: ZnHZvZqalsz6Ti7HFocFCnKiDYLBOUVzakp5jA/JYCU=
Subject key identifier: 83:AA:55:FE:91:21:99:EE:77:DA:0C:0D:5F:69:81:A9:E9:67:39:63
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 018CC56EB57694B762AEEDF74140A8AADDBB
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/g6pV_pEhme532gwNX2mBqelnOWM.roa
Signing time: Mon 01 Jan 2024 14:30:16 +0000
ROA not before: Mon 01 Jan 2024 14:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35671
IP address blocks: 212.180.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b5:76:94:b7:62:ae:ed:f7:41:40:a8:aa:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83aa55fe912199ee77da0c0d5f6981a9e9673963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:f9:da:a7:c1:23:3f:6b:5b:e6:e0:8b:1d:
48:c3:c7:33:b8:7a:e3:79:47:07:96:e4:04:a7:42:
11:cf:f6:e6:aa:3a:02:cb:47:ec:57:44:ea:42:2b:
5e:5d:a5:6a:8f:12:3a:eb:ee:7b:a8:d6:b6:2a:cb:
6d:ca:86:ff:54:4a:2d:67:d4:25:1b:27:bf:90:58:
5b:bd:1e:72:61:32:6c:d7:63:6f:e3:49:10:28:52:
0f:03:9a:3b:06:3f:89:9f:af:86:11:d5:6a:e1:17:
44:0a:9a:a5:43:e5:9c:6b:68:24:22:80:fc:9a:67:
5f:ea:21:24:b4:02:89:80:06:ac:d2:b4:b1:17:1b:
76:fe:00:2b:c5:76:96:5c:bd:7d:ad:e7:20:18:91:
26:d7:2b:be:9e:db:69:6e:0a:d7:57:8b:88:36:a4:
a7:92:2c:1d:ac:a0:8c:81:bb:47:78:d5:36:8f:e4:
a4:ff:93:e8:ba:2d:76:dc:86:f4:8f:2c:97:94:8a:
17:6f:a7:f5:2f:7d:68:05:18:46:61:ee:27:98:18:
3e:8c:33:0d:78:11:9e:ea:6a:d8:9e:12:d5:5c:94:
89:f7:72:ad:e0:39:1a:37:a9:86:81:ac:1d:1d:5d:
bc:f2:c7:71:75:f9:47:03:2e:f6:e7:01:2e:14:2b:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:55:FE:91:21:99:EE:77:DA:0C:0D:5F:69:81:A9:E9:67:39:63
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/g6pV_pEhme532gwNX2mBqelnOWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1d:f4:28:a4:d8:45:4c:26:ff:92:33:49:86:b9:fb:9d:52:
bf:97:29:1b:aa:2b:6a:9d:70:b5:dc:a8:4a:ae:52:e7:49:5c:
b6:ec:4f:17:65:80:0b:2d:b4:ff:ba:a4:ee:34:8d:c1:80:d1:
50:f8:90:46:ed:38:2f:6e:02:96:02:87:7b:03:62:73:e1:4d:
61:e5:8c:c1:0f:c4:d4:ca:db:7f:7e:6e:15:28:1b:2d:13:6a:
64:ce:94:2e:06:24:fd:cc:79:68:3b:90:89:fe:ba:56:e4:72:
4b:25:b3:b1:dc:f4:e0:b5:bd:ab:2c:01:bc:36:02:57:e1:cf:
72:3d:16:88:29:14:1a:be:70:ce:30:1a:42:c4:6f:ba:a3:46:
bc:ae:e0:5b:01:36:3b:81:30:14:57:fc:59:ab:71:32:9d:24:
df:94:ea:e4:ce:92:34:8b:24:55:87:63:21:e0:08:ef:81:bb:
ee:08:16:9f:7f:a9:a4:23:e0:6e:df:f5:a2:7e:0a:df:48:fd:
82:2e:23:40:e9:8f:df:d5:71:29:2f:49:ba:74:af:bc:83:56:
46:ac:05:b8:da:6a:ae:e5:1b:7d:89:c8:26:ee:6f:d3:66:31:
44:db:f4:41:15:87:db:bf:87:35:c7:2a:2c:20:e9:a3:f2:1c:
39:1e:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:13 2024 by rpki-client on console-fra.rpki-client.org