Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/G_f1XQHz8G__1c4opWFLt3-vfZ8.roa
File: G_f1XQHz8G__1c4opWFLt3-vfZ8.roa (raw, json)
Hash identifier: IHJJKKnXT3SZ53SOV9Kr9N5Ecwy81+xllqpxfMN1hvA=
Subject key identifier: 1B:F7:F5:5D:01:F3:F0:6F:FF:D5:CE:28:A5:61:4B:B7:7F:AF:7D:9F
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01929F6A00C191A5EA5BA43324A6735EFDBD
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/G_f1XQHz8G__1c4opWFLt3-vfZ8.roa
Signing time: Fri 18 Oct 2024 11:36:17 +0000
ROA not before: Fri 18 Oct 2024 11:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209046
IP address blocks: 5.59.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:6a:00:c1:91:a5:ea:5b:a4:33:24:a6:73:5e:fd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Oct 18 11:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf7f55d01f3f06fffd5ce28a5614bb77faf7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:e1:66:94:96:40:fc:26:88:dc:a0:26:f0:
e5:07:9e:6e:fa:73:92:b0:f4:71:c8:60:99:e9:42:
aa:88:2e:c8:d8:3e:9d:29:99:c1:72:f7:10:47:48:
55:32:64:ae:31:3b:40:7d:e4:7c:fa:8b:74:32:40:
2c:5c:27:2b:a5:fb:d5:e9:7d:64:33:2e:b5:4c:02:
2c:cb:37:9c:e9:35:1c:28:2f:80:47:ff:e1:19:c3:
e3:da:06:8c:b4:d6:cb:04:5e:33:c2:5f:aa:7b:76:
b6:2b:56:69:da:01:74:f2:89:dc:c2:8d:f5:98:e2:
dc:d7:2c:9b:ad:8b:00:df:d4:e0:eb:80:a8:c5:f6:
a4:1f:55:45:fc:f9:2a:93:5f:36:59:7d:48:90:42:
0c:4f:cf:ba:52:b9:cd:58:b7:32:12:3c:70:dd:88:
b3:78:e2:e8:2b:ed:2f:29:9d:c5:b9:45:9d:c1:fb:
da:8a:50:57:4b:36:5d:e5:52:f4:33:13:c7:53:95:
13:73:be:6a:cd:78:d0:aa:05:1d:fe:9f:95:12:1f:
2f:6c:ac:16:ae:64:b2:49:1d:1a:38:ec:56:c3:f2:
f9:35:6c:24:f6:48:9c:de:91:43:84:72:99:88:8f:
fa:11:f1:7c:ce:5d:27:33:e0:ca:d8:18:d6:d6:1f:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:F5:5D:01:F3:F0:6F:FF:D5:CE:28:A5:61:4B:B7:7F:AF:7D:9F
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/G_f1XQHz8G__1c4opWFLt3-vfZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5e:52:71:48:b8:64:10:3a:17:ca:42:84:7f:7f:0a:ca:fe:
7c:2a:3d:7e:54:ff:b6:4d:8c:23:35:4e:bf:3d:47:c0:86:2f:
7f:d1:ed:9c:e3:39:25:82:5a:c9:58:65:d0:ef:fd:72:eb:25:
d5:9f:d7:83:07:2c:35:eb:57:bf:ff:ef:0e:0a:e0:47:99:44:
5f:21:6b:be:fc:4c:66:d5:95:a9:1d:c9:35:b5:cb:df:fe:dc:
4b:59:cc:99:b8:bf:0d:a5:9d:86:5b:53:e6:2e:37:f7:4e:0f:
c9:2c:24:38:49:16:42:18:11:4d:52:f9:48:83:ee:47:29:7b:
e5:b8:48:24:4b:19:af:53:31:6f:fa:60:9d:ab:ef:de:2b:8b:
7b:a1:1a:02:f7:0e:06:64:45:09:66:cf:40:bd:c3:47:1a:a1:
28:18:71:14:df:05:ac:dc:d7:e8:d8:37:30:ee:e4:fa:d3:83:
b4:71:b7:a7:ee:60:41:3e:62:52:9c:af:3b:fc:9b:10:5d:bb:
6f:8b:ff:0d:bd:91:9f:2d:e3:34:b6:70:1a:43:52:df:32:32:
77:85:49:64:3d:97:e4:bc:64:9a:80:90:69:7e:bd:9a:de:8a:
54:a4:f8:4c:a2:5b:3a:73:c5:c6:73:0e:5f:ba:9c:2e:54:63:
ac:2a:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:33 2024 by rpki-client on console-ams.rpki-client.org