Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa
File: G1KtCem18xNVnjqg_i4gYFFnH08.roa (raw, json)
Hash identifier: or489x/aFiy9otvfjwnsIAdgsCfe9WYAKyIX4ntgn0o=
Subject key identifier: 1B:52:AD:09:E9:B5:F3:13:55:9E:3A:A0:FE:2E:20:60:51:67:1F:4F
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018D47B0678A9637F5000E0CE41A9571F771
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa
Signing time: Fri 26 Jan 2024 21:32:39 +0000
ROA not before: Fri 26 Jan 2024 21:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 45.136.140.0/24 maxlen: 24
2a10:5a80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:b0:67:8a:96:37:f5:00:0e:0c:e4:1a:95:71:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 26 21:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b52ad09e9b5f313559e3aa0fe2e206051671f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:05:c1:0a:ff:16:83:01:7e:ef:bc:d6:bf:
ee:b0:c8:6b:16:1d:87:c9:5e:1f:a9:28:ed:6a:ea:
a0:af:0a:c2:b4:ca:56:1c:2f:90:77:68:ac:a6:be:
c2:c0:8d:54:75:73:5f:01:4b:17:cf:11:8f:9d:39:
0e:cc:44:fa:01:f6:40:60:67:34:06:87:ab:12:d1:
0e:47:6c:e3:4f:f3:11:60:d0:a3:3d:54:1a:9a:9f:
43:86:90:eb:47:50:78:7d:3e:70:6d:1d:42:72:98:
2a:09:a1:0c:c4:72:52:81:c8:e5:73:83:e2:9b:61:
da:c5:bf:a5:60:03:b0:6f:0c:b5:15:ba:c3:5e:c9:
20:d4:6e:3d:f2:8f:4c:8e:8e:64:39:0c:0e:1a:93:
b4:5f:8b:3b:cf:16:c3:46:30:4d:25:b2:82:9c:22:
ad:cb:b2:06:91:28:1b:05:8f:15:50:cb:9f:96:0d:
bb:3b:4a:0e:bb:09:68:00:7f:2b:b3:5c:c2:6f:1c:
5f:a5:32:3a:39:6a:31:ff:2b:2c:60:76:34:48:28:
f3:ce:10:14:e8:aa:73:9a:ae:68:59:7e:43:db:2d:
b7:5f:ad:8a:ae:e6:5e:7f:a7:6d:7d:9e:81:eb:9e:
f5:26:d3:68:76:69:61:56:35:56:bd:e6:f6:a2:0b:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:AD:09:E9:B5:F3:13:55:9E:3A:A0:FE:2E:20:60:51:67:1F:4F
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.140.0/24
IPv6:
2a10:5a80::/32
Signature Algorithm: sha256WithRSAEncryption
5c:a1:81:8c:8c:50:7e:07:6c:9c:40:99:6f:7d:b8:03:54:23:
85:ed:62:5a:ff:fd:0e:1d:53:c0:c3:a9:b7:ad:f8:35:a7:c8:
8d:f2:18:74:6c:88:b1:0c:de:d4:6f:c7:a9:a5:d2:6b:ea:2c:
95:a1:e6:c7:e9:3a:b4:db:f8:f4:14:9f:29:00:3a:f2:0a:94:
f6:fa:5c:b0:2b:b6:53:32:82:ac:bc:9f:18:cc:b4:5b:95:03:
61:ce:1b:7f:b5:74:3a:75:3b:78:a2:7c:06:7a:e3:a7:8c:8b:
ee:09:d4:57:a6:22:63:22:df:bc:d3:6a:04:e4:ea:6e:79:dc:
bb:e8:57:f7:c0:b9:56:f5:54:95:84:08:42:3e:79:e5:e6:05:
6a:83:87:66:73:9d:f9:10:85:88:c3:75:c3:bb:d4:28:54:27:
68:27:5e:ee:f2:a1:90:3f:a5:f8:ea:57:65:2d:aa:67:2a:84:
6c:0f:55:44:05:73:ec:6d:19:d8:66:cc:ed:15:cb:1b:1b:1d:
44:7a:6c:ce:17:4e:67:ef:87:03:3a:d6:7f:8b:10:2e:73:31:
a5:0d:d4:77:b8:78:fe:ed:70:1c:82:47:f1:b7:64:f4:5d:65:
ca:f7:05:cd:94:f3:7d:de:73:5f:a6:2c:00:4d:82:af:fd:04:
88:1a:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:48:19 2024 by rpki-client on console-fra.rpki-client.org