Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gAqUjUl9KoFBDifZsZWrsO_0u1c.roa
File: gAqUjUl9KoFBDifZsZWrsO_0u1c.roa (raw, json)
Hash identifier: IVUbpwQpK1d9MMfJSQ5506y2HenhLAKEH8w1NlYZYUU=
Subject key identifier: 80:0A:94:8D:49:7D:2A:81:41:0E:27:D9:B1:95:AB:B0:EF:F4:BB:57
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA16394F957A00723A1F6CBE018C0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gAqUjUl9KoFBDifZsZWrsO_0u1c.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1145
IP address blocks: 145.97.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a1:63:94:f9:57:a0:07:23:a1:f6:cb:e0:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800a948d497d2a81410e27d9b195abb0eff4bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b8:5c:b6:35:20:7c:2d:86:9f:5d:e5:c3:ed:
14:b6:82:ca:22:ad:ff:e6:90:30:5b:ab:f8:62:59:
c6:e1:4a:4b:cf:61:51:db:96:d7:3e:a6:b0:50:d7:
78:72:e5:af:4c:c3:e2:09:f7:ff:c6:a5:57:10:91:
16:5e:f4:cf:42:01:ed:7d:3f:3f:4c:b9:0c:6e:d5:
01:0f:3d:b8:53:28:ca:f5:73:12:4b:c5:ce:c5:92:
2c:9c:b7:e4:e8:4c:85:5a:d4:27:9f:34:2c:9e:92:
98:de:e5:4d:ad:03:b0:86:ff:cc:4f:ef:16:95:2c:
e6:14:dd:1a:a5:87:51:37:dd:58:88:a9:64:5c:57:
06:59:69:fa:a1:0a:18:b0:9a:73:ad:d6:25:f8:4c:
c8:ba:7f:71:2b:2f:fb:df:d2:bd:e4:7e:95:70:cb:
be:c5:99:55:70:8a:7b:b1:2d:c1:9d:84:50:65:3c:
76:06:5b:94:38:22:b3:76:ab:e9:53:06:c9:50:eb:
06:5a:44:54:71:cf:76:69:96:5c:13:db:dd:87:67:
4c:e5:3d:26:0a:94:3e:29:60:0a:76:6d:ad:54:82:
8f:6d:44:cc:55:64:7e:0c:c3:e8:57:33:ce:70:c3:
5d:85:25:75:ea:dd:e2:b8:bd:1e:fd:12:69:c9:23:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:94:8D:49:7D:2A:81:41:0E:27:D9:B1:95:AB:B0:EF:F4:BB:57
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gAqUjUl9KoFBDifZsZWrsO_0u1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.97.32.0/20
Signature Algorithm: sha256WithRSAEncryption
45:c4:19:b3:e1:53:81:82:b8:56:d9:71:b8:4e:d6:40:f5:c1:
d2:b0:9b:a8:49:6c:47:85:72:5e:54:c6:fc:64:f1:20:f5:d7:
49:f1:f7:f9:d2:e3:1f:d7:1e:ca:1c:73:90:66:7f:14:97:b0:
a7:1a:63:08:ff:50:44:d2:24:a2:3a:36:45:02:e2:26:a0:49:
3a:5f:10:01:5a:d9:eb:9f:92:66:e5:23:79:c5:e3:4a:ac:97:
59:b0:01:72:00:0c:91:69:f4:70:33:5e:d1:0f:69:ca:c1:d1:
75:df:f8:75:ab:2d:09:61:03:6b:7e:d4:81:0e:12:8e:9a:cc:
a1:50:4d:d1:7b:6c:65:ce:3f:86:88:40:cc:5b:07:94:c3:48:
14:ec:8c:ad:07:ef:50:90:55:72:9e:24:84:a3:6d:58:2a:97:
51:5b:4c:c6:c6:57:5f:9a:52:1e:97:a9:93:09:a2:58:fc:95:
74:fb:27:70:ac:fe:57:79:46:a1:b3:df:5a:69:90:2a:0d:bc:
7d:eb:52:34:70:8d:f3:85:d6:52:d0:e0:a6:2b:d5:ea:16:52:
82:47:54:18:ae:f2:26:4d:ff:80:dd:56:5f:bd:5a:6e:c9:64:
05:08:ed:0c:cd:8f:06:af:0c:5a:a9:90:c8:b3:ac:99:e0:65:
99:95:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:33:09 2024 by rpki-client on console-ams.rpki-client.org