Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/GhDzOTYVmKWY8iZ6pCz78o-66Gw.roa
File: GhDzOTYVmKWY8iZ6pCz78o-66Gw.roa (raw, json)
Hash identifier: kWJGN9dwh8L4OTPEy5GAP4dLxK5dUOwhLRcVTTtT+5g=
Subject key identifier: 1A:10:F3:39:36:15:98:A5:98:F2:26:7A:A4:2C:FB:F2:8F:BA:E8:6C
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0193638216079B50FDEA4ACA0264ABF04FAF
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/GhDzOTYVmKWY8iZ6pCz78o-66Gw.roa
Signing time: Mon 25 Nov 2024 13:28:09 +0000
ROA not before: Mon 25 Nov 2024 13:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49821
IP address blocks: 46.175.12.0/24 maxlen: 24
91.215.204.0/22 maxlen: 22
185.236.64.0/21 maxlen: 21
185.236.64.0/22 maxlen: 22
185.236.68.0/22 maxlen: 22
2a0d:9f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:82:16:07:9b:50:fd:ea:4a:ca:02:64:ab:f0:4f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Nov 25 13:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a10f339361598a598f2267aa42cfbf28fbae86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:e0:71:53:a1:07:fd:8b:c9:ea:6f:13:ef:
fe:1c:56:b7:db:dd:fe:99:28:a6:08:bb:07:53:db:
3a:e2:bb:f2:0c:7a:29:76:8f:86:9a:c7:46:63:10:
74:9c:17:1a:e8:a6:61:08:33:6b:c2:3f:0e:15:c2:
11:b4:4f:39:31:c8:01:a8:d1:41:6d:d0:41:a7:4a:
4a:71:98:87:5e:c4:f5:da:c1:4b:82:7b:0b:6a:48:
be:0a:e8:ba:1d:97:45:a0:18:68:b9:b0:3a:6e:40:
81:89:d6:72:d2:79:64:67:02:1a:55:85:3e:ad:b3:
c6:fe:96:c4:03:62:8c:c7:36:50:65:c4:f9:2a:da:
16:af:6d:7c:9d:a6:74:13:55:58:10:5c:ea:b4:17:
ff:5c:a2:82:e5:6d:29:f8:ea:f7:c0:79:d8:e4:77:
c6:23:aa:0d:21:20:7b:42:1e:53:81:02:ff:80:7c:
23:77:39:70:64:3b:84:84:71:df:23:70:0f:82:9e:
00:60:0e:a1:60:4d:0c:69:78:dd:a2:90:16:a4:ba:
c8:f1:a7:e2:c3:21:10:c4:39:97:bf:ce:30:f9:0d:
e5:80:0f:2b:66:aa:57:05:0a:16:ac:c7:64:4a:8d:
ef:31:1b:bc:9a:50:31:41:36:d0:49:47:da:0d:be:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:10:F3:39:36:15:98:A5:98:F2:26:7A:A4:2C:FB:F2:8F:BA:E8:6C
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/GhDzOTYVmKWY8iZ6pCz78o-66Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.12.0/24
91.215.204.0/22
185.236.64.0/21
IPv6:
2a0d:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
03:5b:e8:9f:2e:70:43:8d:81:b3:74:25:07:4c:d2:99:2f:09:
df:bd:47:7c:fa:ac:c4:d4:3b:cb:48:5f:73:3f:4e:cd:a2:45:
4d:a4:6a:b8:c7:3e:be:25:3d:d0:54:0d:b4:f6:b6:71:98:90:
12:1b:e4:b3:84:05:b2:5d:5a:49:b1:e1:e3:9d:97:ba:74:27:
12:34:ae:71:f8:9e:7c:cc:8f:8d:3a:65:68:18:f0:7b:07:b4:
40:99:7d:ce:b4:39:50:0a:cf:91:41:39:4f:99:b3:82:34:2b:
c3:b0:84:52:d1:a1:34:88:04:f6:d9:f2:80:10:09:6e:00:a0:
4a:20:1c:c3:13:64:1b:78:f9:9a:6d:c7:01:6b:a1:dd:82:fc:
1c:93:2d:07:89:88:92:1a:e8:aa:c0:70:7f:e0:d5:98:53:82:
83:62:eb:11:62:bb:ab:bb:5e:93:dd:ec:1b:33:17:71:14:54:
1e:66:a1:36:92:39:3f:f7:76:f0:35:68:ee:69:a1:2e:57:d6:
ce:41:02:66:c0:45:1f:d5:df:aa:b9:0e:ca:34:77:fb:db:c4:
3b:eb:6c:c3:08:b1:54:7f:fe:f9:23:7f:f7:ec:be:23:d5:83:
6d:81:1d:9d:4a:93:5a:80:15:73:22:3d:da:77:14:f4:af:4a:
89:a8:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:56 2024 by rpki-client on console-fra.rpki-client.org