Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/g_VRa83LoTd4SDytl-M0lGU4hXA.roa
File: g_VRa83LoTd4SDytl-M0lGU4hXA.roa (raw, json)
Hash identifier: 0vneRhspGyTmqlKax0QAZdBREWTx7GfjSkAz2vUItMc=
Subject key identifier: 83:F5:51:6B:CD:CB:A1:37:78:48:3C:AD:97:E3:34:94:65:38:85:70
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 018CC801182FC59FD32EDA6CC31799E75DD6
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/g_VRa83LoTd4SDytl-M0lGU4hXA.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61155
IP address blocks: 94.142.160.0/22 maxlen: 22
2a04:d3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:18:2f:c5:9f:d3:2e:da:6c:c3:17:99:e7:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f5516bcdcba13778483cad97e3349465388570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:30:f0:b4:c2:64:65:f8:26:d3:77:e2:1c:
69:87:5a:06:b9:30:29:d3:ee:a1:91:a7:99:08:d9:
be:6f:d7:c2:f5:e5:4b:85:e9:cf:38:3b:80:c8:0f:
b0:e0:06:6c:64:e0:94:09:05:88:b4:8d:3a:20:ed:
02:53:b3:fe:ed:ce:50:56:65:67:24:8d:f5:00:ce:
67:af:29:90:69:9b:7b:5f:31:34:a2:a9:c8:9f:f3:
53:e2:1f:12:dc:10:95:34:e4:2c:db:82:80:14:df:
ba:e7:ba:b8:35:e2:da:1c:75:1b:c9:86:c5:08:cb:
72:8d:9d:7a:63:9a:90:28:f2:c5:57:9c:86:6c:46:
b6:00:4b:19:b1:89:4d:f3:96:9f:03:46:8e:9a:67:
10:1f:dc:8d:c4:ad:61:4d:fd:bb:69:8e:06:79:83:
b8:a0:df:27:49:b8:95:3d:d1:f8:7e:ad:18:ed:d7:
22:13:fe:40:fe:6e:08:d7:2b:e9:2d:41:b7:94:04:
72:1d:34:c9:40:71:e7:72:5c:1a:57:d6:98:08:5f:
19:81:c8:58:6a:9e:1f:c7:53:5c:1f:0e:6e:77:00:
8c:26:2b:b8:32:19:8d:93:5e:4a:de:19:21:ee:4b:
d7:c6:f8:08:34:3a:9f:c8:70:f1:f5:bd:55:7c:57:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:51:6B:CD:CB:A1:37:78:48:3C:AD:97:E3:34:94:65:38:85:70
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/g_VRa83LoTd4SDytl-M0lGU4hXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.160.0/22
IPv6:
2a04:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:7a:c3:d4:fa:92:5c:5b:ac:56:0a:15:61:c9:bf:c6:68:3b:
84:bb:d9:20:4b:0b:4b:0e:6b:70:d0:5b:97:6f:62:35:7f:0d:
9e:71:9e:8a:e2:c9:b7:d2:d4:60:ef:37:33:c5:71:e0:35:60:
e8:be:a0:bd:bc:51:be:0a:9c:bd:37:a7:86:66:44:7d:2c:7d:
bc:93:a2:32:61:7a:bb:30:15:6c:71:ef:7a:68:59:03:45:a4:
48:23:b7:5f:71:19:1d:de:e7:77:43:16:a6:ce:90:da:6b:ba:
1e:2f:1a:75:cb:88:f0:8b:62:19:8c:88:49:71:cc:a2:98:ca:
30:c6:ab:f3:c1:4b:51:fb:b1:88:c0:7c:30:1a:0c:3e:fb:fa:
59:a7:89:8c:5f:24:ae:47:55:ab:da:b3:ca:e6:0d:c5:30:31:
1a:fb:9b:c6:ae:c3:80:ed:fa:7d:38:95:77:66:fc:9d:8a:b6:
5b:7e:e7:37:b6:a1:3a:c2:e3:8d:4f:48:33:01:59:a9:d9:93:
01:60:f4:b4:b6:50:2c:d4:f2:6f:4a:b1:97:c6:bc:cd:e0:de:
c1:86:5d:43:5e:81:f6:99:46:42:c5:96:85:5e:cd:f2:a6:e0:
9c:8e:09:f5:5a:b1:55:1e:d7:23:00:fd:10:2b:9c:86:22:61:
18:63:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:20 2024 by rpki-client on console-fra.rpki-client.org