Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GrRTpPGSrNX1n5buF4jDIsY9v_U.roa
File: GrRTpPGSrNX1n5buF4jDIsY9v_U.roa (raw, json)
Hash identifier: 4is0a/T3hJhqUz9abou0yPYM++0OM70kVUSAS6HTQIY=
Subject key identifier: 1A:B4:53:A4:F1:92:AC:D5:F5:9F:96:EE:17:88:C3:22:C6:3D:BF:F5
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 018CC3B6A35CCA39213B18AC79C2DD12461E
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GrRTpPGSrNX1n5buF4jDIsY9v_U.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.253.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a3:5c:ca:39:21:3b:18:ac:79:c2:dd:12:46:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab453a4f192acd5f59f96ee1788c322c63dbff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:00:1c:f0:c5:a4:81:d2:65:02:44:af:44:
2e:43:e8:c4:46:45:26:1f:d5:b5:d2:e1:dd:c0:0f:
2c:0f:a8:86:aa:ec:21:fa:bb:24:52:65:f8:bf:8a:
82:12:49:73:68:a5:82:91:e2:94:11:26:b1:cf:66:
28:b8:d3:20:bf:83:f2:68:1e:51:27:87:9e:f5:7b:
f7:74:47:bd:5e:dc:99:ff:1a:ed:d6:cf:19:48:b1:
cf:54:de:d7:d1:01:3d:09:7e:16:7e:d5:68:e5:ea:
0b:b6:f5:ae:41:c3:9d:66:66:8b:62:c6:dc:77:c2:
15:5c:3d:9f:25:9b:a4:f8:5a:03:c0:90:65:06:66:
67:6f:26:57:0e:3d:87:1a:25:e4:ec:8f:3b:28:5d:
09:01:fe:9d:4e:59:3a:3d:77:f1:71:5e:5c:7d:b6:
78:b6:59:30:c7:b1:34:29:46:98:f0:a5:87:22:44:
78:09:75:37:d0:27:7e:4d:7c:95:30:a6:8a:f6:df:
de:33:2d:23:0a:64:47:0c:8a:49:25:d1:78:19:2e:
7b:29:03:c8:d6:7a:f2:c6:92:18:47:81:8b:1e:b8:
e3:82:db:0f:77:b3:83:08:74:46:b9:29:4d:45:76:
be:7f:3e:a6:5a:55:c2:e2:2b:b7:3a:54:b4:a5:73:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:53:A4:F1:92:AC:D5:F5:9F:96:EE:17:88:C3:22:C6:3D:BF:F5
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GrRTpPGSrNX1n5buF4jDIsY9v_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:db:d2:28:b5:2d:67:8f:41:4a:de:62:8f:c8:d3:5f:04:80:
e5:56:a3:0b:ff:61:5a:d6:32:ec:14:42:03:0d:c8:7f:9e:03:
cd:fc:bb:0d:85:66:48:48:dc:83:21:23:6f:88:cb:e8:8a:cd:
21:45:a4:8c:b0:44:7b:89:0e:a3:50:46:ee:5d:eb:7b:6c:1c:
be:c1:c8:14:c4:d9:6f:3a:f5:15:81:07:6a:7a:69:d0:c0:12:
88:64:89:e7:26:02:54:11:16:7d:5c:cb:65:38:f9:85:c4:33:
6b:93:72:41:16:23:14:0e:0d:b5:a3:13:8c:30:6a:b1:de:08:
71:84:c5:22:76:fd:a8:c6:e1:80:d2:70:e2:0d:a0:d4:0c:89:
b3:7b:88:2e:a4:0d:25:94:47:9e:b3:ce:fb:f3:e1:fe:37:f1:
c5:99:41:82:d4:77:e7:c8:40:35:33:ab:f8:fd:a5:7e:cf:f1:
15:8c:97:2e:39:22:dc:2a:1f:58:4b:8b:c1:ee:5e:a4:f5:17:
8e:2d:c2:2c:60:d6:46:95:62:80:f7:71:f8:50:a5:49:68:15:
b6:e5:da:be:4c:c8:16:70:f7:a1:fa:1d:86:24:f6:79:74:83:
b9:cc:d7:10:2a:ac:35:65:d1:1f:f1:3f:12:f2:4c:8c:5c:a7:
5a:c8:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:36:03 2024 by rpki-client on console-ams.rpki-client.org