Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gDT0Zx-vprTjF6fkuT_Ow-0fpg8.roa
File: gDT0Zx-vprTjF6fkuT_Ow-0fpg8.roa (raw, json)
Hash identifier: dbdrYUFJc8SjGtW3YDBGskGGXdqdLZzRB3WUxE2+vwM=
Subject key identifier: 80:34:F4:67:1F:AF:A6:B4:E3:17:A7:E4:B9:3F:CE:C3:ED:1F:A6:0F
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0193441BC25F13C5875A47D826B6D697CDE4
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gDT0Zx-vprTjF6fkuT_Ow-0fpg8.roa
Signing time: Tue 19 Nov 2024 11:08:10 +0000
ROA not before: Tue 19 Nov 2024 11:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 91.204.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:1b:c2:5f:13:c5:87:5a:47:d8:26:b6:d6:97:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Nov 19 11:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8034f4671fafa6b4e317a7e4b93fcec3ed1fa60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:92:17:dd:ad:c8:50:af:19:21:cd:6b:57:
29:52:f9:43:c3:b6:b2:54:12:cc:88:52:02:fa:3a:
af:5e:19:f3:2f:8e:d7:c2:6c:6a:e2:c1:84:0e:03:
5f:ae:00:5d:c5:fd:50:44:b3:93:37:51:53:51:5c:
54:e6:e4:f5:38:59:0d:a0:e9:c0:cd:a9:cf:32:df:
49:e9:cd:15:17:27:db:0e:ef:08:6d:50:03:a4:90:
7d:3b:4c:8a:16:05:ec:16:2d:e2:37:dc:fc:1d:12:
d7:0d:7f:87:ad:05:68:0c:66:68:86:a4:62:85:2f:
b3:89:63:01:5c:08:fa:5b:b2:19:d5:19:a9:fa:27:
4f:63:14:0b:57:28:d2:8d:54:fd:c9:ed:7b:c8:1d:
fe:90:7a:e9:b1:20:e6:f0:aa:f9:ed:19:03:73:d3:
29:f2:80:e9:3b:a4:f4:ee:94:a2:b9:88:db:3a:90:
7b:65:07:4c:c2:b7:c9:84:a5:bb:32:d7:43:9d:48:
06:2f:23:64:5f:1c:96:3d:ba:99:1e:51:83:42:28:
ee:a2:73:7c:bc:cc:30:cb:0f:9c:c2:d4:6a:3a:27:
ee:99:eb:7f:56:17:83:52:fe:d5:7f:6e:99:47:85:
ee:7a:71:be:bf:91:30:6d:f1:e6:23:28:b5:d3:f6:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:F4:67:1F:AF:A6:B4:E3:17:A7:E4:B9:3F:CE:C3:ED:1F:A6:0F
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gDT0Zx-vprTjF6fkuT_Ow-0fpg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:88:9b:b0:2d:01:80:b2:81:e5:aa:31:9d:1d:12:99:56:97:
4c:c6:50:5b:d2:81:77:5a:54:7a:2a:98:16:d4:0b:f5:87:0b:
f9:dd:ab:ee:60:24:e0:16:0c:b3:7a:3c:6c:12:a7:aa:8d:ad:
e9:1a:55:c7:46:40:c9:e9:b8:12:9c:4e:ba:dc:ea:05:7f:ea:
72:3a:5d:d8:4d:5f:78:0c:a4:88:69:65:bd:ef:eb:a7:06:40:
a6:59:fc:d2:c0:d8:ff:e7:1e:38:e2:b4:b9:fd:3f:00:31:9c:
dd:19:d3:76:e4:bc:22:5f:55:22:5b:27:eb:a3:bf:00:28:98:
1c:4b:a6:df:30:3d:c5:8c:8d:0e:59:2e:6b:6a:d7:e7:2c:fc:
ad:df:c4:a6:3a:0f:ad:42:c8:fd:ad:1e:57:90:9a:8f:67:4c:
04:c6:14:18:ec:ff:f6:36:6f:aa:b8:d1:40:a5:66:c7:fa:97:
aa:78:5e:95:4e:cc:35:88:ea:35:9d:2d:47:3d:75:eb:d8:45:
9d:39:43:97:7a:6e:a0:b6:7f:46:6b:4c:96:ec:2d:53:4b:f7:
02:79:64:d9:42:2c:c8:f0:c6:29:86:3d:6a:ca:b6:48:b3:67:
ce:81:da:de:3d:25:54:f0:ae:18:57:a4:a2:cb:63:9f:e3:fc:
66:f7:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:23 2024 by rpki-client on console-ams.rpki-client.org