Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/G11jXnP0_aDRW7ldZ6yb3STKhFw.roa
File: G11jXnP0_aDRW7ldZ6yb3STKhFw.roa (raw, json)
Hash identifier: D3ZHDSFyDPNlhcJyW6qM/IWPBNP73ELzpOSbH/APPGI=
Subject key identifier: 1B:5D:63:5E:73:F4:FD:A0:D1:5B:B9:5D:67:AC:9B:DD:24:CA:84:5C
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA66D44E1C9C822B1FD811FF7FEDA
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/G11jXnP0_aDRW7ldZ6yb3STKhFw.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6900
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/24 maxlen: 24
145.61.200.0/23 maxlen: 23
145.61.200.0/22 maxlen: 22
145.61.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a6:6d:44:e1:c9:c8:22:b1:fd:81:1f:f7:fe:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5d635e73f4fda0d15bb95d67ac9bdd24ca845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:1a:f9:f6:2e:2d:63:9f:0c:78:b8:66:d8:
32:08:4d:55:7f:f7:ec:87:33:c9:79:57:19:17:8b:
66:6f:60:d6:07:ea:fc:fc:a7:8b:a5:79:de:e0:46:
24:81:f1:4e:ae:db:21:e3:25:43:48:e2:d9:45:e5:
26:60:43:13:26:5e:70:dd:e5:d3:5f:8a:1d:e9:eb:
3a:59:bd:60:43:f9:bd:bd:9a:ed:0f:dd:53:d2:0d:
7d:b0:e1:b5:76:f1:9b:b3:8e:c4:3c:c0:53:b2:de:
09:4b:c0:89:f0:bf:a9:80:ac:cf:94:0d:bd:bf:76:
60:f9:3a:59:01:a2:55:72:b4:93:93:ed:36:51:d7:
c9:0a:e7:88:30:a3:c0:55:57:18:95:6a:6b:ef:3a:
4c:5b:3f:c8:2e:86:5c:77:c6:68:12:67:39:ed:df:
52:43:a7:ca:cf:42:9f:7c:b9:a5:db:c1:ec:4a:27:
17:55:f8:22:f1:ce:4b:54:c8:8a:54:98:31:98:b7:
7d:39:4d:9c:18:0d:cf:fb:66:8c:03:d7:f2:69:eb:
42:b1:9f:87:91:01:f7:d8:77:1c:5b:1f:51:39:f6:
e6:b3:8c:fa:c3:36:71:f5:e8:f1:60:88:c7:45:45:
66:c8:66:6a:b6:08:cc:68:49:37:f1:04:f8:d9:71:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:63:5E:73:F4:FD:A0:D1:5B:B9:5D:67:AC:9B:DD:24:CA:84:5C
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/G11jXnP0_aDRW7ldZ6yb3STKhFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
22:19:9d:61:93:1e:17:93:a2:b3:ac:0b:b9:67:06:25:aa:82:
f5:37:6e:6d:89:d6:bb:f8:53:84:78:d9:7e:44:de:82:57:21:
6d:96:6b:0e:54:45:9f:f9:4a:db:05:74:65:60:a7:6c:38:99:
e5:ac:53:41:8c:95:9e:7a:61:38:9e:bb:3b:d0:5c:0a:4c:f4:
51:e9:ae:74:5a:17:b8:67:be:7c:87:e0:22:69:2f:cc:c0:bf:
1f:05:9a:ca:ca:7d:d9:0b:9d:b0:2e:5e:cc:77:f1:07:45:22:
7b:da:49:86:1f:d4:54:21:9d:29:69:56:ba:e6:33:51:f0:ff:
a6:cf:49:d0:4c:e5:60:80:a5:b5:f1:c3:30:64:28:d1:73:5d:
bf:61:77:21:0c:fa:6a:99:f0:9a:78:14:3d:2b:08:64:1c:88:
a5:0d:90:05:04:4c:9b:f2:b9:0e:22:81:5d:73:00:c9:53:e7:
f4:b3:08:e8:d1:cf:a5:a4:8f:78:cf:2e:f6:64:86:15:a0:0e:
29:b1:a8:1b:3a:48:78:93:6b:6d:08:e2:e0:7a:cf:3c:65:51:
3c:18:34:83:6e:05:6c:1d:6a:70:a7:41:c8:63:0a:2e:73:0b:
05:a4:aa:79:23:d1:fe:87:5f:09:2d:f5:1a:60:3d:04:db:17:
8c:db:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:53 2024 by rpki-client on console-ams.rpki-client.org