Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/G63dqKGORJjOoCTaaVOPI0ic_XA.roa
File: G63dqKGORJjOoCTaaVOPI0ic_XA.roa (raw, json)
Hash identifier: SZMVslfVEQU5kpNbf/3gShkRw7lPcQ+kER2H6T4b+G8=
Subject key identifier: 1B:AD:DD:A8:A1:8E:44:98:CE:A0:24:DA:69:53:8F:23:48:9C:FD:70
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018D6486DD228A929CA77445700C83AB735E
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/G63dqKGORJjOoCTaaVOPI0ic_XA.roa
Signing time: Thu 01 Feb 2024 11:56:16 +0000
ROA not before: Thu 01 Feb 2024 11:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 92.246.134.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:86:dd:22:8a:92:9c:a7:74:45:70:0c:83:ab:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Feb 1 11:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1baddda8a18e4498cea024da69538f23489cfd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:44:cf:14:51:ff:ad:2f:65:30:41:97:da:
59:9b:56:eb:f0:5b:9d:7c:22:87:65:64:42:5a:62:
f6:a9:6f:ae:b0:5e:e7:29:15:3e:5f:cb:a9:db:52:
be:c4:dc:ad:ac:86:75:6d:78:1c:47:d8:fb:c0:c7:
3b:a1:ea:10:d2:52:ce:ce:1c:8b:7d:f0:84:bc:d7:
5b:62:6b:45:1c:74:5b:d5:59:0d:3d:d8:59:b3:1b:
32:d9:4c:ac:1e:ce:3f:48:0c:39:81:a4:67:79:f7:
45:42:63:fa:0c:14:83:a3:2b:b1:e4:e2:77:de:c8:
4c:9d:f9:f4:95:ab:4b:9e:a3:66:57:f0:f5:38:66:
88:64:cd:51:c3:1a:a3:53:02:4b:66:39:b1:f4:9a:
53:c9:1a:a7:bc:71:03:78:96:9c:a2:ae:0e:6a:4c:
07:d2:09:49:dd:2c:1b:cc:a7:c4:49:57:9b:48:35:
1c:6a:c0:c7:fb:ac:25:02:d1:c2:ce:08:d5:77:51:
ca:a0:04:c3:85:80:59:2b:33:6f:92:ba:39:6b:8c:
12:de:fc:5b:2e:2a:3a:f7:f5:0f:2e:79:57:69:97:
2c:94:8f:cf:fd:e9:e0:70:5e:04:e6:cd:ee:88:52:
ab:7b:e9:03:40:df:90:bc:63:d4:4d:27:20:e9:68:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:DD:A8:A1:8E:44:98:CE:A0:24:DA:69:53:8F:23:48:9C:FD:70
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/G63dqKGORJjOoCTaaVOPI0ic_XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.134.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:e7:8e:ec:21:c2:4c:ca:eb:25:b6:79:96:d3:b4:01:b3:45:
f3:72:2c:e7:fd:d1:2f:c4:7c:5c:3f:48:13:ac:c6:00:07:39:
d1:4a:31:b7:ec:da:28:fe:41:36:a3:da:f3:16:03:e1:3c:7a:
02:ee:3e:19:2f:05:e0:01:85:3e:4c:db:a7:94:cd:46:5f:aa:
f3:ed:dd:29:50:e2:7b:a4:6b:fa:ba:5f:b8:a3:44:d5:3b:b7:
3e:4f:23:b0:b4:a0:b0:42:33:0f:54:6a:81:8f:c5:f7:d4:a5:
35:24:68:d5:b8:2d:1d:3c:ea:c4:0f:35:7f:b6:3d:aa:eb:13:
bf:df:39:08:e1:09:9c:c2:6f:d2:58:81:82:de:ae:79:a6:99:
15:56:4c:6d:22:3b:45:45:5f:d3:75:ef:f4:23:66:8e:79:0a:
05:38:3e:89:0f:9e:e9:78:23:a1:f8:e9:45:73:8e:88:d8:2b:
1d:7d:96:91:ac:1d:2d:fc:8e:28:bf:31:72:9c:e1:14:9e:24:
85:2a:fd:70:8f:96:a1:d8:1d:df:1f:d1:26:1d:21:21:73:91:
f0:94:d4:54:1a:9f:84:91:6f:6e:0e:ff:a3:7b:79:22:88:bf:
8e:09:57:b6:8a:b6:62:71:b4:bb:7a:4e:72:fa:73:23:59:a8:
60:c6:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:36:27 2024 by rpki-client on console-ams.rpki-client.org