Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/G6gmIKJUhjkzi0z6OAdoJs844rY.roa
File: G6gmIKJUhjkzi0z6OAdoJs844rY.roa (raw, json)
Hash identifier: c72HnbHzYZYTcnx4gTtQvMyKtw/dk3aTMnP9ypJnWbk=
Subject key identifier: 1B:A8:26:20:A2:54:86:39:33:8B:4C:FA:38:07:68:26:CF:38:E2:B6
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 018CC50042653BA3E9E55E36586BD6F3B353
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/G6gmIKJUhjkzi0z6OAdoJs844rY.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 209.127.220.0/24 maxlen: 24
185.44.177.0/24 maxlen: 24
185.44.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:42:65:3b:a3:e9:e5:5e:36:58:6b:d6:f3:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba82620a2548639338b4cfa38076826cf38e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:8e:60:47:ff:47:c6:3e:29:f5:f1:2b:5c:
76:49:2d:ec:3c:b5:d5:1d:2c:ce:15:7e:ce:0d:72:
0a:8e:03:b6:5e:e6:1c:05:62:39:1f:1c:c8:ea:90:
aa:1f:5f:ae:f6:d4:af:96:a6:23:aa:61:49:d9:10:
e8:52:bc:4b:46:e0:2b:92:53:d7:ea:61:b9:5e:06:
5c:04:f9:b2:f9:15:8c:7f:73:3f:af:fb:c9:1a:c0:
4a:a8:cc:f7:b7:69:20:be:3a:87:68:47:78:b8:55:
c4:10:23:b3:fe:78:43:cf:45:f1:e5:d8:c1:79:b4:
91:e3:b0:52:b4:d5:85:de:75:4e:29:bc:8b:58:72:
58:9c:34:96:4c:f0:43:ce:73:b5:44:04:8d:76:0f:
0c:3e:b5:9b:3e:27:82:f0:ff:30:11:73:47:39:01:
5f:7a:38:5c:b7:56:f2:aa:01:ea:93:31:31:d2:e2:
2a:05:a5:35:6b:6c:bc:57:ec:5c:f6:2d:6f:a0:54:
a6:96:89:ba:8b:07:39:c3:03:67:ff:28:61:a7:e9:
6c:bc:10:2d:9b:9f:35:81:31:9e:81:28:06:e0:b8:
03:82:e3:61:3b:93:98:ec:08:3b:de:17:55:99:62:
5a:f7:47:b9:d7:57:26:0f:2a:9e:8a:af:53:f9:23:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:26:20:A2:54:86:39:33:8B:4C:FA:38:07:68:26:CF:38:E2:B6
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/G6gmIKJUhjkzi0z6OAdoJs844rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/23
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:4c:a1:29:d6:0c:a4:d6:32:f3:a7:0b:dd:bf:6e:e7:3a:
6b:c9:d8:af:b3:1d:c9:5d:48:fa:1c:25:61:87:08:32:7c:43:
f4:69:76:8b:6a:fd:a8:94:45:a1:58:79:d4:01:a0:0d:57:e9:
6f:2e:4c:e3:c1:29:d4:a9:1b:1b:00:1d:5c:a6:45:7b:0f:a1:
bd:61:96:84:b5:6d:1b:3f:79:91:67:ac:c7:bf:06:19:0a:f6:
e7:f2:c2:e9:1e:5f:86:3f:a0:4f:de:f0:cb:20:a8:81:e3:43:
32:67:bc:a6:b3:6d:d4:73:e3:07:27:8e:0a:ac:df:cd:0f:88:
29:0a:94:ea:32:4e:71:7c:56:70:99:c6:fa:6f:22:80:24:cf:
1c:91:e0:8e:d9:99:5d:87:4a:4e:ef:72:8f:63:57:2b:39:af:
d8:f2:08:20:ff:9c:72:3b:ea:3d:80:0f:df:12:77:3b:99:3a:
0d:ae:04:2b:a6:a8:a6:f3:b3:cf:cc:7b:0f:d7:e4:d9:15:1c:
0d:79:d0:9b:af:d6:5d:e7:96:4f:f3:8a:1e:8a:1b:8b:3b:2a:
16:81:e4:ec:8c:29:d6:7b:bf:a2:77:53:48:59:50:50:49:c6:
69:50:40:84:9c:64:63:44:dc:70:27:c1:81:16:b4:80:d9:c8:
a8:2a:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:03:45 2024 by rpki-client on console-ams.rpki-client.org