Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/G9jJB89CYRQH1X4T1aDSnG-HCNQ.roa
File: G9jJB89CYRQH1X4T1aDSnG-HCNQ.roa (raw, json)
Hash identifier: heOhuNBOQ8BPNdwz79SDqfvZu+1/SZuysrbhTjux/jA=
Subject key identifier: 1B:D8:C9:07:CF:42:61:14:07:D5:7E:13:D5:A0:D2:9C:6F:87:08:D4
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 01909B1D68F6A3C0372B8268B6BB0D5C51EF
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/G9jJB89CYRQH1X4T1aDSnG-HCNQ.roa
Signing time: Wed 10 Jul 2024 05:28:34 +0000
ROA not before: Wed 10 Jul 2024 05:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 130.185.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:1d:68:f6:a3:c0:37:2b:82:68:b6:bb:0d:5c:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Jul 10 05:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bd8c907cf42611407d57e13d5a0d29c6f8708d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:4d:96:55:0c:76:2f:23:6e:73:e4:a5:b4:
aa:42:11:09:b8:93:bb:96:bb:62:78:0b:8c:1d:6f:
03:80:47:9f:98:6c:53:a4:88:c6:22:6b:ac:40:ac:
8e:d6:1a:1f:2f:80:ea:3a:06:ad:5a:d3:2c:ea:ad:
2c:4c:7e:96:12:53:5b:06:46:5e:8b:81:98:cb:38:
0f:69:83:6e:bb:6f:be:2c:cd:bf:6c:e2:ee:7f:f2:
38:d9:97:4b:ed:84:34:57:60:b2:47:43:e2:df:f2:
65:0a:57:f9:51:f6:ef:fd:9d:78:54:a3:8f:ef:e4:
ea:02:32:bc:ac:78:79:8f:d0:c7:96:54:8c:49:0b:
a3:30:be:43:a3:11:81:bc:6b:e7:fc:ec:f6:61:69:
1c:73:7c:a6:56:0c:87:f0:b4:42:66:f4:a7:cf:bb:
75:c3:21:7f:91:4d:d3:de:4b:e9:18:0b:ad:b0:e1:
7f:c9:53:04:7e:ca:6c:48:c8:52:0b:68:12:93:a2:
29:a4:ad:6e:aa:1e:c9:f5:77:5f:fd:5e:65:67:e5:
3d:bc:d8:b6:58:ff:44:85:62:ef:c6:84:e8:cf:7f:
d7:6d:84:b6:44:3d:8e:bc:16:2e:70:76:fb:81:a6:
3f:21:4a:fa:95:c9:de:db:01:c9:39:a6:46:60:58:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:C9:07:CF:42:61:14:07:D5:7E:13:D5:A0:D2:9C:6F:87:08:D4
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/G9jJB89CYRQH1X4T1aDSnG-HCNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:f7:a5:22:22:89:f2:be:8a:ec:55:24:0b:76:52:2e:9b:37:
8f:c7:8d:e4:cc:1f:38:f4:cd:e0:f0:fd:83:02:60:49:66:5c:
9e:5a:04:da:8e:21:0f:ef:cc:0f:f6:03:5d:30:68:e0:d0:38:
98:24:1b:c9:13:26:67:17:4f:54:3e:e1:89:cd:14:21:83:d8:
bd:e6:a1:bf:7f:40:f5:e4:7b:c1:2a:e8:08:1f:a0:7c:b8:8b:
81:c1:df:7d:8a:59:41:f2:b2:9c:18:a6:bb:37:4a:62:e8:66:
ca:0c:6d:00:dc:7b:aa:2d:06:6c:fc:02:fc:d5:fe:81:88:24:
84:95:63:14:a7:34:e1:9b:ca:d1:c0:22:16:81:42:c6:58:bb:
07:bc:70:08:b1:9a:59:09:1b:ad:69:7b:dc:ed:b1:af:4f:7b:
f1:44:bd:35:8a:ea:49:47:31:95:29:fa:09:59:03:0b:b4:9a:
33:a4:13:40:f8:d6:01:7d:ae:ee:bd:e1:41:5e:85:ea:af:dd:
2b:33:8a:07:79:2f:c7:8e:61:5f:7f:30:45:df:ef:45:5f:12:
32:64:ae:64:8f:09:01:e7:ef:e5:27:0e:b6:5d:14:32:73:1f:
e6:53:23:9e:36:a3:dd:4c:6c:3c:80:c6:e1:59:d3:59:d6:13:
fa:8a:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:22 2024 by rpki-client on console-fra.rpki-client.org