Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/G3wP4SjwJWwrnbY7go4ffZbW98A.roa
File: G3wP4SjwJWwrnbY7go4ffZbW98A.roa (raw, json)
Hash identifier: E1a0nysCLzCf7Bo6qp6D4oaJVcLM2/Ix+howbkCCA/8=
Subject key identifier: 1B:7C:0F:E1:28:F0:25:6C:2B:9D:B6:3B:82:8E:1F:7D:96:D6:F7:C0
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 018CC4922F1B0858CA0F89527BEADC618507
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/G3wP4SjwJWwrnbY7go4ffZbW98A.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50604
IP address blocks: 109.197.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2f:1b:08:58:ca:0f:89:52:7b:ea:dc:61:85:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b7c0fe128f0256c2b9db63b828e1f7d96d6f7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:d2:bf:49:03:ec:45:83:7e:74:eb:a4:96:
0d:7d:96:26:6b:6e:52:1b:0e:93:2a:07:0a:6a:16:
f6:08:d5:62:92:d5:c0:8c:cb:58:64:13:ec:7e:31:
14:54:da:58:09:55:79:90:de:31:54:b4:11:2a:24:
21:54:91:c6:46:71:d1:4f:9a:0d:95:ba:46:4e:0f:
d7:39:33:bb:a5:b8:8f:fb:4e:03:c1:d0:5f:0d:a6:
2d:6a:a2:3d:b9:63:38:bd:2c:d8:37:46:af:81:9e:
55:d1:cf:26:05:88:d0:9d:a6:a7:33:d9:75:b2:0a:
74:ee:b6:30:78:3e:f6:49:74:b6:41:67:76:76:b6:
98:01:db:ab:cc:5a:10:d5:61:7c:74:41:19:d5:25:
8a:ac:1f:0e:c5:b2:96:70:28:64:5e:77:4e:07:d8:
63:73:ae:b8:c9:92:c5:50:c0:c5:a5:52:64:ef:f2:
f6:e5:b0:e6:55:b8:74:32:4c:3a:55:0b:49:0f:5c:
a1:fa:b4:42:b4:5d:81:f6:b3:de:1c:4a:22:48:e6:
f5:8d:b8:33:d9:60:58:89:4f:8b:44:f2:e5:58:55:
61:48:52:f4:a1:81:af:f4:e7:7b:5a:91:bd:f4:35:
6c:87:4d:c8:c1:73:27:3d:5a:3f:d1:7c:9f:93:9d:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:0F:E1:28:F0:25:6C:2B:9D:B6:3B:82:8E:1F:7D:96:D6:F7:C0
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/G3wP4SjwJWwrnbY7go4ffZbW98A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.80.0/21
Signature Algorithm: sha256WithRSAEncryption
17:d3:df:0b:c3:9d:1a:f1:47:cf:79:d0:79:45:cc:f1:69:05:
92:ca:4d:3e:5b:1f:d0:34:0e:df:7c:c7:f4:a0:27:31:a1:4e:
fe:3e:04:f6:13:6b:07:40:3a:a5:54:54:46:ef:e1:f5:b6:3d:
00:50:c0:cd:22:0d:15:ee:93:70:07:85:fa:51:8e:50:6c:57:
a3:4a:d2:be:4c:2c:18:80:63:5c:8f:7e:ef:9d:98:f0:36:4a:
b7:65:d3:41:40:7d:71:1c:69:57:42:10:f6:da:b0:95:53:7e:
a6:2c:fd:6c:9c:f3:d0:cb:64:1e:44:e8:da:0b:81:6e:38:e0:
a9:1b:42:a5:8f:93:16:e0:df:20:6d:d5:95:1a:9e:ed:3c:83:
0d:03:8e:05:68:cf:6f:c6:df:57:2f:00:ee:7a:88:a8:bb:16:
1a:bb:fc:9f:65:ab:9f:f7:bc:3d:3d:a9:22:e0:9c:0f:26:81:
05:7e:4b:c5:6e:fa:5f:52:59:d7:24:b1:05:cb:ca:86:a6:bd:
26:13:67:97:2f:44:99:cb:9a:9c:22:b1:c5:84:25:e2:74:d2:
9f:24:8e:ca:ca:11:41:43:00:18:38:ec:71:66:98:52:1c:b0:
32:6c:3b:a8:87:6c:df:b5:ba:56:d0:cd:f9:6d:a3:49:bb:78:
1c:62:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:07:31 2024 by rpki-client on console-ams.rpki-client.org