Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Gx99qvq8A1pSqjdMXlA7evnNy2s.roa
File: Gx99qvq8A1pSqjdMXlA7evnNy2s.roa (raw, json)
Hash identifier: vTFo+4fB1bsDWWwrK02ATjUtMiFoZ4iOw09bWHn64sU=
Subject key identifier: 1B:1F:7D:AA:FA:BC:03:5A:52:AA:37:4C:5E:50:3B:7A:F9:CD:CB:6B
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 01930C0E926168E169155FFDAE4105708BE3
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Gx99qvq8A1pSqjdMXlA7evnNy2s.roa
Signing time: Fri 08 Nov 2024 13:55:01 +0000
ROA not before: Fri 08 Nov 2024 13:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202520
IP address blocks: 83.168.68.0/23 maxlen: 24
83.168.94.0/24 maxlen: 24
83.168.95.0/24 maxlen: 24
83.168.105.0/24 maxlen: 24
83.168.106.0/24 maxlen: 24
83.168.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:0e:92:61:68:e1:69:15:5f:fd:ae:41:05:70:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Nov 8 13:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b1f7daafabc035a52aa374c5e503b7af9cdcb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:87:11:ed:ce:e1:fd:4d:f6:a7:bb:bc:e5:
d4:89:ff:4b:3b:5e:1f:29:68:ce:c6:6d:6b:db:0d:
8e:49:42:b3:32:cc:f5:be:e3:00:7c:c7:b9:3b:d5:
ea:da:92:70:d8:10:7e:55:91:58:a2:d3:ba:f0:47:
af:42:0a:5b:bc:ee:97:5e:ea:f8:d1:1a:5e:fa:f8:
de:75:53:9e:a1:a5:53:c0:c2:d2:9b:a0:2a:2a:32:
37:a0:47:32:57:24:fb:99:d3:dc:46:71:f2:1e:9d:
7d:9a:0a:36:ad:6f:c2:f2:42:40:1d:5a:ca:64:fa:
f5:c3:b8:c1:e7:a8:e3:80:f5:07:a8:10:91:2a:83:
a0:f0:11:15:7f:f7:d8:b1:6a:ad:d9:c4:2f:ee:cf:
70:eb:57:1e:d0:53:cb:0d:61:4b:5f:46:eb:ba:ce:
03:cf:78:22:15:71:87:98:19:f8:52:97:58:81:33:
f4:c5:8a:52:cf:86:16:00:8b:52:41:bf:71:2a:44:
fd:47:c9:39:aa:41:fa:a2:23:1b:4a:31:52:2e:e9:
69:ea:b7:fb:8d:b8:fd:79:4b:83:18:17:4a:77:49:
40:46:8e:d8:03:c0:af:e6:5d:c1:14:d6:86:72:cf:
f4:39:46:a1:77:4a:6c:c8:8c:68:76:a6:f2:8c:7e:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1F:7D:AA:FA:BC:03:5A:52:AA:37:4C:5E:50:3B:7A:F9:CD:CB:6B
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Gx99qvq8A1pSqjdMXlA7evnNy2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.68.0/23
83.168.94.0/23
83.168.105.0-83.168.107.255
Signature Algorithm: sha256WithRSAEncryption
ac:f2:aa:24:01:a3:cf:1a:a2:a8:99:20:f6:18:b2:61:19:59:
75:4c:74:c2:b3:00:61:01:9f:0c:b1:ea:e1:52:e5:7f:0e:a3:
f6:1d:fe:ae:a3:b4:99:c7:49:f3:f6:76:2a:7f:ea:0c:c6:8d:
de:1c:95:2d:1f:95:ac:66:9d:87:20:37:1e:41:64:0c:55:79:
a8:c8:45:e8:9f:27:20:03:4f:8e:fb:ac:13:7b:b7:5f:ad:29:
60:12:82:7b:27:70:02:57:b0:75:e5:b4:3f:99:14:b0:4d:37:
c5:67:e0:78:62:35:b4:f6:d5:f6:f1:8c:7d:8f:7d:ed:df:2b:
75:e5:c8:6b:79:02:7c:94:41:df:3a:30:d2:0f:35:c0:2d:61:
57:14:ad:36:d6:a7:80:10:b4:44:12:a3:87:4e:8d:78:eb:2c:
b0:82:b8:61:ff:92:c2:03:e0:32:a5:a5:a1:4b:ae:e3:9b:8a:
56:10:36:63:97:b0:a5:1b:92:f1:ea:42:29:5a:2f:23:52:9a:
77:a2:ad:e4:69:dd:b5:d2:fb:54:a0:0d:a4:09:8e:a5:d7:68:
19:ea:2f:5e:37:1f:63:e8:a9:11:96:f0:3d:46:79:5a:8f:07:
5e:fd:8c:83:66:2d:87:fe:14:f8:07:a0:18:0b:2b:f4:1a:ed:
fd:c0:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:13:22 2024 by rpki-client on console-ams.rpki-client.org