Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gAhppixH_F_PYi7UGApfAnS0F8Q.roa
File: gAhppixH_F_PYi7UGApfAnS0F8Q.roa (raw, json)
Hash identifier: mbouvd3HbqfBOGMQs6bDNRpFoOJapn+yq+GLac+Wxa8=
Subject key identifier: 80:08:69:A6:2C:47:FC:5F:CF:62:2E:D4:18:0A:5F:02:74:B4:17:C4
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC50093904004EACA37AF79FC8DAE7818
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gAhppixH_F_PYi7UGApfAnS0F8Q.roa
Signing time: Mon 01 Jan 2024 12:29:58 +0000
ROA not before: Mon 01 Jan 2024 12:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212505
IP address blocks: 83.139.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:93:90:40:04:ea:ca:37:af:79:fc:8d:ae:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800869a62c47fc5fcf622ed4180a5f0274b417c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:59:71:84:fa:e7:eb:bc:ad:d3:da:af:cf:
13:76:11:85:17:76:05:eb:d8:f9:1d:68:7a:95:91:
35:fc:bb:7a:77:76:6b:e2:d7:d9:ec:3a:21:a7:84:
ee:6d:b6:9c:e4:62:99:f0:ed:7f:ce:e3:0d:6a:47:
67:4e:4c:fb:c3:c4:43:73:b9:6f:50:af:07:2b:5f:
45:58:ba:89:0d:f3:03:5b:52:a9:4d:35:81:d3:e2:
0e:4f:55:f9:03:97:66:cc:4f:0c:d8:97:45:2a:f4:
3f:c5:54:f0:a9:25:04:8d:ea:45:7c:41:83:84:81:
99:a6:8f:0a:20:52:32:b5:d6:b8:aa:5b:b5:b0:86:
bb:35:25:4d:4d:e7:87:ee:7a:13:ec:5a:e3:77:51:
17:22:fc:89:bb:27:ac:81:52:de:a2:14:b6:ea:c2:
98:2a:2e:2a:ac:fd:0e:78:9d:13:6a:f4:08:96:57:
8d:45:b1:e1:31:ed:9a:1e:f8:db:b7:b0:22:cc:be:
01:e2:50:da:8a:38:6e:d0:9b:db:26:46:c5:ec:12:
80:0b:ed:33:f4:ac:98:37:8a:1b:3a:bf:88:19:b0:
d1:09:75:e2:67:f0:87:d1:5c:c7:6e:21:34:08:34:
7c:31:e2:a2:f1:b4:c9:54:37:f6:64:66:ca:63:80:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:69:A6:2C:47:FC:5F:CF:62:2E:D4:18:0A:5F:02:74:B4:17:C4
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gAhppixH_F_PYi7UGApfAnS0F8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7a:aa:20:89:09:ce:b9:60:2d:ff:ff:6e:0f:af:73:07:7b:
29:7a:a1:55:db:a3:af:db:e0:39:01:d5:f9:a6:3b:f3:ac:11:
11:63:dc:ec:ac:31:d0:c4:fc:79:52:92:d1:43:c3:32:66:03:
78:91:c4:3e:0a:57:ce:ea:f6:da:38:d2:a9:b0:ad:3a:2b:f4:
aa:82:d2:bd:f8:04:a2:22:41:34:08:02:07:33:c5:8e:69:ee:
b8:41:54:ed:78:7e:45:31:9f:33:c2:76:ef:5c:47:62:ab:db:
16:06:81:17:18:eb:96:9d:13:f4:c7:69:45:03:07:40:2e:fb:
1d:fd:63:22:00:ec:bc:83:91:d6:5d:b7:90:16:11:6f:9e:0f:
48:ea:9d:e5:5f:b1:9a:ab:fe:1b:92:f6:26:9d:02:bd:21:a1:
98:b8:64:6d:f6:19:0f:04:de:72:5a:2f:fe:3c:b6:d1:c9:0b:
e0:59:df:d5:56:c2:b7:d5:80:a5:d9:d1:86:dc:e0:c6:3c:88:
d6:fd:2d:a7:50:eb:45:8f:10:9b:64:23:87:2f:b7:93:d1:a8:
6b:ed:9b:70:e8:b5:80:91:12:71:f8:da:c4:c6:07:a5:57:16:
9c:11:7e:84:3c:e8:f7:b5:a6:ed:eb:89:e5:4e:9a:ca:63:e2:
3b:1d:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:32 2024 by rpki-client on console-ams.rpki-client.org