Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Gy-dZbPqJMPoLku8DtINIxNcqOI.roa
File: Gy-dZbPqJMPoLku8DtINIxNcqOI.roa (raw, json)
Hash identifier: zOtFTQhFRBUcwhr6o3tzf8Qk+RQcIBGZcizpbTOReik=
Subject key identifier: 1B:2F:9D:65:B3:EA:24:C3:E8:2E:4B:BC:0E:D2:0D:23:13:5C:A8:E2
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CC5DD12581F4D0D9A8E9AEA96FF268E99
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Gy-dZbPqJMPoLku8DtINIxNcqOI.roa
Signing time: Mon 01 Jan 2024 16:30:48 +0000
ROA not before: Mon 01 Jan 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31244
IP address blocks: 45.131.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:12:58:1f:4d:0d:9a:8e:9a:ea:96:ff:26:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b2f9d65b3ea24c3e82e4bbc0ed20d23135ca8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:79:59:ac:35:4e:ad:4c:bb:54:6e:e2:22:
ad:04:4f:3d:19:a0:ff:66:21:c7:4f:61:01:1c:20:
d8:0f:4d:8e:d0:2c:19:cf:7c:6c:e8:10:ea:8f:c5:
4e:18:39:b7:61:fb:d3:40:30:e2:f0:36:c4:0f:c3:
f8:44:12:48:57:e7:e1:84:03:0d:a3:9b:49:4c:ae:
5f:a3:9d:af:c1:1d:d5:30:6e:91:c9:7c:87:01:23:
a4:59:ba:0d:2c:b7:57:32:84:db:d6:72:de:70:ac:
51:f9:f9:8c:ab:ec:b4:83:81:fb:5a:08:d5:42:92:
7c:00:04:7a:5a:aa:1e:5c:e2:38:ad:1d:40:15:7e:
1b:9a:22:2c:68:8d:bf:7c:a4:36:6f:70:ca:f5:b1:
f3:bb:bd:43:3e:bd:7d:61:7b:f2:81:29:9c:f8:5a:
4a:5c:8a:f3:78:4c:a4:b4:91:e4:fe:bb:6b:ee:44:
85:46:a8:3d:db:2d:f7:03:d7:16:75:1a:7b:1a:e6:
68:2d:4e:f9:6c:a8:94:ab:f4:d1:91:31:f3:22:c5:
23:26:70:23:7a:cf:3a:07:53:4d:20:f9:dc:b6:cf:
7f:2b:db:4a:f3:75:82:95:dc:22:aa:e0:99:24:5e:
9b:15:fc:95:54:69:3d:3e:de:96:00:38:56:a6:71:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:9D:65:B3:EA:24:C3:E8:2E:4B:BC:0E:D2:0D:23:13:5C:A8:E2
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Gy-dZbPqJMPoLku8DtINIxNcqOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dd:6e:0e:de:5f:5d:12:e0:88:44:ce:ab:b7:b8:5e:81:d9:
6c:a7:3d:06:a5:5e:48:02:94:d5:01:6e:02:2e:48:68:ba:4d:
08:4d:d2:af:64:64:4b:f2:47:9f:97:d5:97:97:e6:89:55:75:
d0:f2:a7:bd:44:be:dd:92:ee:db:5c:33:30:34:27:a8:e0:2d:
11:40:75:e7:ce:f1:38:b0:c7:49:e7:c3:8b:67:75:45:cf:4e:
19:46:ab:a6:07:1e:59:5c:cc:8f:2b:b1:16:26:05:c6:a9:a8:
ef:14:5c:80:74:4f:4b:99:bb:a4:92:97:ad:fb:2f:8e:25:d3:
61:37:86:4d:5c:ac:4e:26:5e:29:db:75:d9:56:a5:1c:b5:6e:
a3:50:1a:a4:37:a5:77:e7:08:7f:3d:ec:32:65:ad:bd:e0:8f:
b5:15:64:3f:76:5a:bb:81:30:1b:75:9f:87:1b:60:19:db:14:
3a:30:d4:31:54:b8:e6:e9:a5:6e:fa:71:7c:57:af:df:1e:0e:
4f:e4:fc:b1:a9:71:16:47:b7:62:69:9f:0c:ff:89:e1:7a:e7:
68:10:3d:7c:2a:21:0c:09:f7:10:5f:52:34:dc:2c:f9:05:83:
26:42:3b:e8:ea:92:d6:64:19:f8:93:58:c2:c3:73:8e:47:8a:
67:0a:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:42 2024 by rpki-client on console-fra.rpki-client.org