Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa
File: Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa (raw, json)
Hash identifier: ZvhQWlrWAOHGJkfGnTRwDVkkNCW5DQDDMDZroYNA1JI=
Subject key identifier: 1A:0E:A8:8A:C3:83:9F:6A:93:46:56:1F:27:91:97:0A:30:B0:02:32
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 018CC26CFA4AB7B91F3364AEA661702EFD61
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 91.206.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fa:4a:b7:b9:1f:33:64:ae:a6:61:70:2e:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a0ea88ac3839f6a9346561f2791970a30b00232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:55:84:d0:c0:3e:a6:e6:c2:f8:28:75:0b:
cd:d9:13:b2:0b:d2:fc:d2:22:0f:71:e0:77:a1:b8:
99:94:fc:08:da:e1:48:89:19:f9:dd:7f:84:53:76:
40:43:63:52:f0:fa:cd:fe:67:f5:45:ad:ab:45:89:
f3:f5:91:87:b7:d2:9e:bc:c2:e1:53:63:c4:fa:0c:
3c:90:90:71:88:e2:5d:52:b7:85:cd:b1:32:a0:7d:
e9:6c:e1:3e:41:ca:0f:e5:1c:da:fc:2d:18:eb:3f:
21:45:15:56:19:7e:80:61:a0:c5:cf:e9:88:8a:a5:
4f:53:19:40:28:51:3a:16:3c:6a:ea:9a:e3:86:35:
21:3d:f6:b1:7e:c5:cc:1b:00:6e:d5:b5:ac:f3:ad:
e2:ad:d3:e0:4a:fa:0e:47:ab:e2:1b:9d:40:a0:ac:
c0:7e:41:98:4c:d0:bd:36:df:01:0a:22:fb:03:34:
9b:22:4f:78:d7:ef:b9:6a:b8:7d:6e:1f:6c:b9:37:
75:34:d1:25:01:19:a5:e2:66:9e:66:95:59:f5:96:
44:f4:ff:f1:ca:cc:5c:38:48:3a:f1:f3:3e:50:b0:
c4:3f:9e:64:1e:2e:cd:28:6b:21:18:26:c9:34:85:
ff:ea:43:fd:d7:6e:3a:7f:ea:20:98:18:68:94:67:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:A8:8A:C3:83:9F:6A:93:46:56:1F:27:91:97:0A:30:B0:02:32
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
00:69:3e:0e:dc:e0:de:ae:18:b9:b4:cb:88:32:b6:87:35:37:
49:c6:24:f0:b0:b2:3b:a5:3d:3f:78:12:7d:5b:7b:0d:08:17:
e9:40:0f:0d:8c:1e:f9:d8:57:7c:5c:2a:b3:0f:ae:a1:3a:8f:
f2:f0:64:a1:0d:02:e2:9f:1f:a7:87:8f:19:7a:b3:c0:08:c2:
8f:f3:dd:53:ef:dd:d7:82:94:41:dd:a4:cb:c1:bb:2b:be:d3:
e7:4d:65:09:4b:7f:ca:81:78:8a:31:83:ad:ba:68:c6:77:98:
99:5a:d5:b4:7b:1c:a0:14:80:eb:26:e6:c9:0a:1f:02:7a:8b:
d5:63:9a:09:1c:8b:f3:50:07:55:6c:3a:40:b5:e5:d6:66:aa:
d3:ea:74:6a:fc:26:3f:83:27:75:25:65:51:9e:55:1a:27:e2:
fe:2d:89:0f:c7:f1:02:e8:d3:f5:c3:05:71:87:8a:64:fa:aa:
65:f8:6f:5d:34:99:b8:5d:97:4d:b8:3b:5f:86:ed:d5:c1:12:
8e:31:37:27:66:92:2f:25:30:7b:ba:b6:c7:de:99:bf:af:8b:
0d:26:61:4a:9f:bc:0c:e2:be:5e:f6:3c:22:9b:c6:f7:2c:6e:
98:ee:48:50:5f:81:fc:bb:83:a9:f9:20:2e:b9:94:0a:59:9c:
01:80:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:04 2024 by rpki-client on console-fra.rpki-client.org