Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/g6P5RbuAoeSL3xnxKIDysGbwIMY.roa
File: g6P5RbuAoeSL3xnxKIDysGbwIMY.roa (raw, json)
Hash identifier: rRpE/4ZEPUZ1KTIOVu7KZEdAHRRW4w+jpQBLCwVNhyI=
Subject key identifier: 83:A3:F9:45:BB:80:A1:E4:8B:DF:19:F1:28:80:F2:B0:66:F0:20:C6
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA9934BD27AA6F8254D572E4C360D88C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/g6P5RbuAoeSL3xnxKIDysGbwIMY.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51777
IP address blocks: 81.12.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:34:bd:27:aa:6f:82:54:d5:72:e4:c3:60:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83a3f945bb80a1e48bdf19f12880f2b066f020c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:c6:79:fc:68:69:f0:04:d8:d6:bc:8a:c5:
24:78:75:2e:a7:27:a6:51:3f:82:aa:59:3e:ad:10:
b1:5c:c9:6d:08:e4:a9:28:4d:8c:7b:d8:23:a8:b7:
bc:7e:c1:99:7b:19:7f:3a:ad:91:2d:d7:1d:2e:14:
a3:b1:86:32:26:cf:a2:8c:14:6e:3b:2c:d5:ac:1c:
97:11:cc:aa:18:a9:40:a9:65:80:14:a8:ac:08:4a:
d5:16:a9:69:34:13:51:6e:e2:50:60:15:80:fe:a8:
96:e1:9a:43:87:b5:e4:48:9e:b9:31:3c:d0:cc:e2:
4d:63:ce:43:46:3f:ee:a9:2c:34:11:38:76:2b:04:
ac:f7:2f:c8:7f:9f:0f:e7:b7:44:39:f7:42:87:ab:
f4:06:ed:3b:19:49:a4:e3:2e:24:ec:c9:40:ec:72:
f2:7a:6a:95:c4:d7:c3:1c:27:8b:85:9b:8a:ac:7c:
20:dc:45:23:b6:2c:bf:31:10:30:5f:56:40:7e:30:
a9:dd:1a:89:12:10:0a:77:38:09:90:5c:c9:e8:6e:
a9:7a:76:29:ca:8a:d0:72:d1:97:98:9d:2b:47:43:
ff:77:66:64:e7:16:b8:2f:29:10:55:76:df:39:eb:
44:e2:84:0d:f3:bc:0b:48:6e:ea:60:3e:85:0d:71:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:F9:45:BB:80:A1:E4:8B:DF:19:F1:28:80:F2:B0:66:F0:20:C6
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/g6P5RbuAoeSL3xnxKIDysGbwIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.29.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6a:2d:63:1b:67:a6:d4:38:09:ae:83:42:7a:5e:83:57:d9:
e6:32:92:ba:c0:1b:20:c5:a0:53:a8:10:b0:3c:5e:62:cd:da:
5b:2b:34:67:57:28:5b:79:a4:e5:ef:68:f5:27:85:ee:00:94:
06:f0:69:9e:a4:f4:31:eb:11:2d:de:07:72:21:1e:b1:b5:d8:
13:bd:5a:57:13:f0:92:55:60:16:f4:07:23:ed:cb:93:34:eb:
6a:09:a8:4f:3c:79:9b:fb:80:b4:7d:ea:49:d7:88:47:bd:e2:
8e:c5:79:70:56:d2:6a:a5:41:fa:88:c9:1b:95:95:2b:e0:34:
1d:6c:8e:77:ae:6d:5f:bd:0d:fa:85:12:dd:75:ce:54:a6:6e:
be:97:25:63:e0:81:04:1d:a8:41:f6:20:86:c0:44:f2:60:f4:
ea:68:67:8e:e3:32:51:cd:cd:10:f6:00:ca:12:59:7d:64:00:
e4:2c:34:84:ee:28:54:4a:cb:ea:5b:1a:e9:48:16:6d:5f:0b:
cc:17:16:72:43:0b:c6:a7:bd:2b:65:01:71:d8:b2:7d:f9:58:
9d:9f:87:0b:2c:a2:5b:58:db:0b:07:74:e8:32:19:6d:45:dd:
d0:6a:ac:bd:d6:b3:e9:f7:41:b5:91:91:14:e5:3e:c5:64:dc:
4f:68:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:20:24 2024 by rpki-client on console-ams.rpki-client.org