Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g9DFx9dP-EXFGc_EY9BnByL2lP4.roa
File: g9DFx9dP-EXFGc_EY9BnByL2lP4.roa (raw, json)
Hash identifier: pvvNVGVtxjzgfsBywxhOH+sT8WUY317LXnTlB7oI1I8=
Subject key identifier: 83:D0:C5:C7:D7:4F:F8:45:C5:19:CF:C4:63:D0:67:07:22:F6:94:FE
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72F143D730DE755076B4CE5AE7FA1
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g9DFx9dP-EXFGc_EY9BnByL2lP4.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12601
IP address blocks: 195.101.164.0/23 maxlen: 23
195.101.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2f:14:3d:73:0d:e7:55:07:6b:4c:e5:ae:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83d0c5c7d74ff845c519cfc463d0670722f694fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:63:ab:6c:07:62:0a:3e:32:91:2d:e9:0e:
d5:2b:ea:b6:87:1f:80:e4:79:b9:f8:8f:de:f4:02:
6d:88:c3:e0:db:82:cd:b5:fb:e4:15:05:98:3c:53:
41:71:de:90:af:d6:fb:71:a0:08:61:ea:ac:b1:e6:
99:9a:aa:20:3e:b7:4d:c0:c7:33:5e:bd:17:9d:3e:
95:b7:09:0f:db:ad:7a:65:bd:61:b1:a9:53:24:39:
3d:54:cd:ed:57:e9:ca:29:9b:3c:04:a4:30:7b:fb:
e0:31:93:db:15:bb:28:34:a5:16:ae:8f:90:44:e1:
e7:c9:df:19:22:29:68:06:f7:a3:54:56:b4:ec:1d:
b5:85:98:d1:aa:34:5e:58:60:b1:19:90:2c:d4:c4:
8a:02:e8:a9:d5:99:1f:78:d3:eb:dd:bd:5f:e5:6e:
01:33:fa:f6:91:ee:b8:a2:4c:bb:45:c2:d5:1a:b6:
6c:05:cb:0d:93:1d:64:d0:3a:90:f1:f5:ed:88:46:
ef:34:49:d9:4c:5c:6f:ae:59:74:aa:9d:0e:6d:c0:
73:a1:18:c1:7c:32:08:7d:1f:47:f7:4f:43:ae:50:
3c:e5:30:c5:f6:34:40:2d:43:ed:11:36:78:1b:fc:
39:8d:c8:51:3e:56:25:46:37:1a:e8:82:39:b6:69:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:C5:C7:D7:4F:F8:45:C5:19:CF:C4:63:D0:67:07:22:F6:94:FE
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/g9DFx9dP-EXFGc_EY9BnByL2lP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.101.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:9b:fd:85:0e:be:99:62:29:bf:06:96:df:db:f5:e0:cf:77:
2a:5e:c9:49:0e:0f:ce:53:f5:22:00:10:fe:4a:f4:3f:9c:cc:
61:1e:b3:3f:4e:38:d4:3e:af:96:1f:00:ce:34:e7:82:59:d3:
19:95:21:86:db:97:3c:b8:d1:bc:f5:fa:94:57:58:43:b8:df:
23:ab:97:e7:12:4d:d4:e2:d5:b4:3c:bc:42:3b:ba:f3:17:ca:
3b:11:68:47:55:37:52:06:3b:8c:fa:31:77:7a:d1:b1:16:56:
e3:24:2a:98:f7:f3:97:c0:b3:a0:57:99:49:f0:e5:6c:15:48:
08:68:ee:56:49:aa:f0:31:5c:1c:66:80:82:48:20:18:2b:69:
03:5c:c5:87:a4:95:e9:ff:97:7f:cb:79:db:e4:2a:d2:4e:7f:
eb:70:28:ea:1c:77:15:d4:33:41:1e:cb:63:49:fb:ed:44:0a:
b9:01:dd:b4:12:b8:25:c0:5d:ba:11:80:e5:63:a6:34:e3:95:
d1:64:d7:7a:47:6e:01:a5:2d:62:9c:86:e5:18:86:b1:af:05:
25:15:64:7e:09:8b:24:d0:d5:80:dd:0f:2e:b9:34:5f:0d:b7:
f3:a0:a8:09:33:14:c8:04:83:cc:c4:d8:a4:46:8c:eb:b9:d4:
38:96:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:00:42 2024 by rpki-client on console-fra.rpki-client.org