Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/gd0g39XahxTMmbuqxeIeOzKT-rg.roa
File: gd0g39XahxTMmbuqxeIeOzKT-rg.roa (raw, json)
Hash identifier: 7S7XZ1jSbJOUpE4DbfzNLsQTdKKjJiUW9b3nt2a92Js=
Subject key identifier: 81:DD:20:DF:D5:DA:87:14:CC:99:BB:AA:C5:E2:1E:3B:32:93:FA:B8
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 0191224F8D90DC1097AAE013035115AB452D
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/gd0g39XahxTMmbuqxeIeOzKT-rg.roa
Signing time: Mon 05 Aug 2024 11:32:04 +0000
ROA not before: Mon 05 Aug 2024 11:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203640
IP address blocks: 185.29.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:4f:8d:90:dc:10:97:aa:e0:13:03:51:15:ab:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Aug 5 11:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81dd20dfd5da8714cc99bbaac5e21e3b3293fab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:a5:6e:2e:f0:48:d0:e2:e5:84:9f:bc:be:
9a:2c:31:1b:44:db:8e:9a:98:74:3b:41:4b:e9:a6:
b3:ba:b9:7d:95:30:c7:32:76:2f:a9:c6:90:b5:97:
19:05:50:ea:e5:63:8a:d0:87:bf:ef:63:61:f1:1c:
09:90:c2:58:58:f1:e9:42:0d:c4:c9:5c:df:cc:48:
35:8b:72:69:4c:3a:fc:b2:9c:16:40:52:8a:ff:7e:
1e:8e:67:68:de:34:cb:36:d2:b1:f8:9e:f8:41:be:
f1:2e:1e:6f:b5:7a:62:9a:30:1e:aa:4b:2b:7b:fc:
7f:e5:a2:2b:41:69:8a:57:af:f3:ba:1b:bc:da:cd:
cb:df:5d:15:61:45:58:80:fc:6b:30:f1:22:51:7b:
60:05:14:01:40:8c:75:a2:6f:0b:15:0e:20:2e:43:
4b:0e:ed:01:53:f4:71:ed:bf:d9:e3:c8:cb:48:3f:
b0:74:95:82:b1:e3:df:f8:8b:4d:df:2c:6c:14:8b:
f9:1f:34:c3:58:8f:dd:eb:a9:06:a9:25:33:03:27:
a6:7a:27:0d:02:2f:e9:17:68:f9:f1:e1:ac:f5:91:
7a:46:d2:b9:c5:cc:c0:8a:b6:cb:3a:af:4d:1b:2d:
58:aa:6c:b7:62:20:0e:37:fa:fe:f4:ad:e4:eb:42:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:20:DF:D5:DA:87:14:CC:99:BB:AA:C5:E2:1E:3B:32:93:FA:B8
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/gd0g39XahxTMmbuqxeIeOzKT-rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.108.0/22
Signature Algorithm: sha256WithRSAEncryption
14:e9:82:fe:47:1a:87:7e:8a:df:09:82:2a:cc:0d:9f:e2:cf:
e5:18:b2:21:63:d5:f1:67:f6:3f:e5:03:cc:0c:07:5c:03:bc:
71:3d:ef:61:f5:67:46:20:6a:7f:96:b4:59:dc:4b:7d:3e:f5:
79:61:c1:9d:ba:f2:8d:ed:a7:00:fa:f5:0e:9b:78:26:e7:b9:
46:3e:e2:0f:9c:e9:13:23:62:f8:27:b6:91:a6:db:45:bc:48:
2d:ad:ca:9c:8a:63:51:1f:fd:c0:c5:2f:92:bc:dc:09:85:0d:
da:dc:48:6b:16:93:66:e9:2c:9b:20:97:da:08:6b:7a:ea:ad:
91:87:47:cb:29:2a:06:5b:f6:4b:30:97:1c:57:d2:50:50:24:
f1:f0:51:b3:9f:54:81:b9:62:8d:79:5b:fc:ef:ff:5d:27:ab:
eb:4a:5c:fb:79:96:23:03:48:e8:7c:6f:01:56:9e:b7:01:8e:
1f:c8:ce:8d:da:20:4d:0c:5c:1c:ef:31:09:55:81:d6:58:bf:
02:8e:20:9b:a8:8b:73:14:4c:75:66:85:0e:96:fe:fb:99:11:
36:48:79:6b:25:d5:ee:8b:77:59:39:18:54:02:67:48:52:c1:
86:5a:29:8e:64:96:e5:64:c7:34:68:1d:3d:be:f9:52:a6:77:
c8:db:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:16:19 2024 by rpki-client on console-ams.rpki-client.org