Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/GwAJAZi4enKy5zyRRX2FMZaWbDA.roa
File: GwAJAZi4enKy5zyRRX2FMZaWbDA.roa (raw, json)
Hash identifier: MomCCztVnXbBRrH0hAEsd2+pnVx2hzovJFNmc2TV8WQ=
Subject key identifier: 1B:00:09:01:98:B8:7A:72:B2:E7:3C:91:45:7D:85:31:96:96:6C:30
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019055329C705365EA1025D78A55B67C740F
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/GwAJAZi4enKy5zyRRX2FMZaWbDA.roa
Signing time: Wed 26 Jun 2024 15:38:18 +0000
ROA not before: Wed 26 Jun 2024 15:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200091
IP address blocks: 81.30.103.0/24 maxlen: 24
2a13:ae00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:32:9c:70:53:65:ea:10:25:d7:8a:55:b6:7c:74:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jun 26 15:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b00090198b87a72b2e73c91457d853196966c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:d0:8c:c9:a3:3f:d9:26:69:5e:22:06:4c:
cf:72:76:0c:cb:c1:e7:96:a1:6d:96:98:fc:09:b8:
77:97:78:c6:e9:a4:74:7a:f5:f4:cc:2c:c5:3d:fe:
3c:f6:29:69:58:48:69:16:9f:54:5f:30:c7:3f:df:
93:02:54:ff:1f:c1:46:19:ad:96:75:db:25:d9:be:
11:fa:ae:9c:a7:c1:53:30:a6:73:2d:08:95:29:75:
8d:e5:d5:0f:ae:a2:d1:9b:45:8b:97:a0:fc:a9:a5:
ca:dd:3f:b3:c3:5f:6f:45:91:e7:da:88:2a:18:16:
83:f1:06:45:bf:02:02:6f:a7:31:48:c7:21:f9:d6:
67:50:dd:5e:a3:fe:30:ff:28:ff:8a:3d:62:72:5f:
2a:73:fc:39:fb:1c:45:13:44:6d:dd:59:de:7a:aa:
24:ba:b0:59:84:58:60:f9:72:29:00:64:2a:d2:fd:
67:68:cf:d6:fb:f6:0b:44:4c:6e:4a:00:f0:32:b0:
c4:47:96:cb:17:8e:c4:29:aa:e9:54:39:7f:73:9a:
e0:0a:c6:74:7d:dd:fd:1f:77:3e:f5:18:77:5a:7d:
a0:94:31:2c:dd:97:3e:55:17:37:af:07:ae:b1:03:
6c:db:59:60:1f:74:31:99:1e:f5:eb:f8:ab:d8:ed:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:00:09:01:98:B8:7A:72:B2:E7:3C:91:45:7D:85:31:96:96:6C:30
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/GwAJAZi4enKy5zyRRX2FMZaWbDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
51:e0:18:51:4a:19:96:86:21:a2:e4:5a:52:8d:dd:2e:2a:4e:
a8:64:7f:43:65:d0:82:e8:85:f9:24:ef:e6:26:5d:75:fb:8b:
f8:be:fb:7c:7f:4e:63:a2:f9:bc:34:52:da:64:b1:66:69:64:
b4:80:8e:93:fd:de:01:47:88:27:ac:84:db:b7:97:50:8c:10:
88:12:57:e6:3e:c4:bc:7d:12:80:b9:ec:d7:8c:1b:3a:e9:c7:
22:5b:65:97:be:dd:41:8f:4f:0f:47:1b:45:46:8f:9a:b0:12:
b6:99:02:32:91:27:00:ab:b6:8e:f3:a8:cf:33:e2:57:13:65:
2c:2e:74:3c:3e:c6:31:3d:7f:d4:a6:f7:0b:de:9e:1c:77:66:
d5:e4:4b:cf:88:21:bb:d7:d2:81:09:0c:f3:31:2c:ac:28:8a:
c8:c5:57:a8:f0:96:15:0a:cf:d7:99:e8:00:cd:32:16:f4:95:
15:52:6a:98:56:81:84:7c:4d:c7:7a:a4:b3:64:70:0d:ea:d7:
1f:3f:87:e3:52:c7:8b:3a:d0:be:0b:a8:e2:fc:18:79:01:ae:
44:2d:b7:cd:b4:da:ab:be:0a:24:00:0c:46:3e:c0:c9:1f:5a:
a3:fc:0e:1d:3f:ec:26:90:19:bd:ac:94:7d:6c:aa:64:59:2c:
ec:bc:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:54:37 2024 by rpki-client on console-ams.rpki-client.org