Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gNt6JUnthqqa6lSoplobpd0cTlI.roa
File: gNt6JUnthqqa6lSoplobpd0cTlI.roa (raw, json)
Hash identifier: bVqW1L5gwcevFgXYZJQ4xnOvubSUV42f2VMusEQ4IMw=
Subject key identifier: 80:DB:7A:25:49:ED:86:AA:9A:EA:54:A8:A6:5A:1B:A5:DD:1C:4E:52
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018DC75FCA2DBC3B70BE5768DE05DCB761AC
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gNt6JUnthqqa6lSoplobpd0cTlI.roa
Signing time: Tue 20 Feb 2024 16:36:00 +0000
ROA not before: Tue 20 Feb 2024 16:36:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205007
IP address blocks: 217.196.104.0/24 maxlen: 24
217.196.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:5f:ca:2d:bc:3b:70:be:57:68:de:05:dc:b7:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Feb 20 16:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80db7a2549ed86aa9aea54a8a65a1ba5dd1c4e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:a2:17:56:ba:a9:88:c9:dd:d7:64:de:ab:
c8:0b:92:c8:d4:13:52:72:c9:20:dd:25:f1:f5:d1:
1a:24:a0:1c:bd:6c:43:fe:b2:d9:49:4d:f9:02:59:
e2:a4:94:93:bd:0e:90:11:3b:cf:73:c6:dc:fc:2a:
d3:a8:bc:18:4f:77:c8:8d:96:28:44:cf:21:16:29:
ac:e3:56:60:ff:ab:c5:52:21:e9:97:ad:c8:51:c8:
b0:84:1d:9b:26:7b:8d:c5:f8:b7:be:39:9a:8d:04:
82:53:93:61:d9:30:51:79:33:4c:c2:c6:39:ce:8d:
c3:02:47:c8:bf:b5:44:42:81:49:e0:86:42:24:64:
09:e6:d8:21:87:ed:b5:5e:62:50:eb:44:07:6f:d2:
d1:58:f5:ff:00:a8:b1:45:2f:0d:a2:00:9d:11:2a:
21:83:f9:be:20:ca:62:09:b9:7f:e4:8c:d1:d5:44:
33:6b:df:e8:35:10:f2:34:6a:a8:73:72:c0:04:ae:
61:95:bd:20:61:0d:34:9a:52:65:a7:fa:26:ad:69:
cd:61:e3:03:ef:0f:10:80:d9:36:c8:8b:00:95:8a:
c7:7f:64:de:ac:5d:a8:18:68:0c:a3:d1:4c:ff:73:
b0:ef:50:45:42:45:f5:c6:e1:36:00:63:0b:16:2d:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:7A:25:49:ED:86:AA:9A:EA:54:A8:A6:5A:1B:A5:DD:1C:4E:52
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gNt6JUnthqqa6lSoplobpd0cTlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.104.0/23
Signature Algorithm: sha256WithRSAEncryption
34:bf:e0:59:c7:3e:b8:3d:9b:e3:34:a2:84:69:27:1e:f2:c0:
b6:8e:24:16:8b:86:2e:9d:7f:5c:29:5a:ad:d0:77:54:6a:84:
ba:12:e2:0a:09:23:ca:e7:a5:61:c4:7a:ef:b0:dd:bf:d7:d1:
ce:50:3e:fd:d1:ce:32:94:7f:10:5d:c1:8b:57:7d:6e:5b:b7:
9d:8d:e0:d7:a7:52:bf:04:a9:89:e4:bd:29:e6:74:31:ca:7e:
83:6f:d9:bb:5c:75:0e:35:58:5c:09:04:dd:06:b2:eb:67:ce:
63:85:db:bb:28:3a:a4:e5:3c:c0:d9:d1:bf:70:53:0c:f9:07:
9e:0d:86:18:30:44:de:d5:3e:0e:93:1a:0b:14:82:af:4a:39:
70:ad:6e:32:5f:35:76:b9:e9:ce:df:b5:da:bb:bf:24:5a:e6:
55:22:d0:ac:ec:5e:07:ba:31:e4:00:3a:51:46:08:fc:ba:e7:
8c:57:e8:6a:26:bb:3f:c7:1c:9b:7b:f7:7d:2c:84:cb:7d:61:
d1:fd:5c:56:a5:63:5e:1c:59:b6:b8:78:be:c2:cc:d0:18:e7:
c7:93:2e:4a:9a:28:39:00:e3:49:67:ac:5c:c4:17:28:dc:b7:
2e:1f:f5:35:61:09:0d:6b:a3:67:64:b7:63:3f:dc:fd:3f:f2:
52:0b:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:41:37 2024 by rpki-client on console-fra.rpki-client.org