Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/G_B6wtJea-fdocZA8cbgqZ-bM0c.roa
File: G_B6wtJea-fdocZA8cbgqZ-bM0c.roa (raw, json)
Hash identifier: 12Jxz6zKM4Gbk8XwzAGVS+7B2fbm1K/F/EIOjCAvTqo=
Subject key identifier: 1B:F0:7A:C2:D2:5E:6B:E7:DD:A1:C6:40:F1:C6:E0:A9:9F:9B:33:47
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 018CC26D03A8D97A4A26F556417366C5E9B7
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/G_B6wtJea-fdocZA8cbgqZ-bM0c.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210018
IP address blocks: 194.124.148.0/23 maxlen: 23
194.124.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:03:a8:d9:7a:4a:26:f5:56:41:73:66:c5:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf07ac2d25e6be7dda1c640f1c6e0a99f9b3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:71:1a:f3:70:ba:dd:df:de:b6:bf:64:1a:
0c:3a:28:e5:17:cf:34:72:92:29:6e:5f:17:5a:8b:
d4:e7:1a:da:bc:d1:dc:a7:90:09:9f:f5:17:8e:bf:
96:7a:98:9c:c5:96:1a:97:56:e3:19:c4:83:06:0e:
d7:3b:db:ec:e0:00:a4:38:e9:bd:69:38:75:30:4c:
78:dd:e1:b4:eb:64:f9:51:ba:7c:76:b1:75:6b:81:
86:71:ec:eb:ea:4f:db:28:ff:e8:bf:81:87:c3:53:
22:c9:12:33:20:42:4c:e0:47:e3:ec:8a:59:d4:0e:
91:7b:1d:9a:fa:13:72:7d:15:16:61:7c:3b:86:04:
fa:9e:ff:0f:f9:84:ed:fd:32:07:8f:2d:27:fd:78:
97:b8:2d:07:9d:6e:f5:1d:ee:bb:a8:25:85:7c:4c:
84:51:c0:ba:db:b9:40:50:6d:8e:b8:b1:79:b3:f5:
60:c0:f6:a2:9a:7b:d4:b2:af:0d:e4:8f:57:e6:47:
f4:d4:23:d4:0e:ca:f5:a7:a8:e4:5f:83:e2:4a:72:
5f:29:4c:96:36:f2:42:89:f3:c6:fa:09:cb:1b:d5:
60:31:82:68:f4:b1:12:04:0e:67:9c:5f:4d:81:ed:
85:34:a3:82:29:06:32:c6:72:4a:cb:f8:01:64:c6:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:7A:C2:D2:5E:6B:E7:DD:A1:C6:40:F1:C6:E0:A9:9F:9B:33:47
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/G_B6wtJea-fdocZA8cbgqZ-bM0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:18:6c:49:40:e7:89:53:e7:7c:d1:14:68:43:9d:a3:5f:b0:
36:56:67:ef:7d:d6:f4:eb:6b:1f:17:73:cb:47:1b:f9:90:24:
83:2a:94:7d:32:fc:46:be:3a:88:d7:c5:a5:db:50:20:2b:ea:
e1:61:78:3a:38:6e:79:2a:9c:7e:74:25:2f:06:2d:4b:2f:fe:
4f:63:df:2a:a5:8f:b4:b3:84:97:2f:e7:77:06:ed:74:a7:34:
81:e2:2c:61:12:b1:11:26:6f:c5:72:f0:fc:80:d8:be:f6:b1:
1e:5e:1d:08:7f:2e:34:a8:8f:cb:ba:a0:08:eb:67:b1:33:0b:
61:14:de:5c:14:a4:fb:eb:7f:f3:39:4b:0f:96:c9:d6:51:34:
3e:6a:ba:6d:ab:8e:16:df:36:e0:4f:61:85:aa:74:25:a7:1a:
41:27:80:ad:7a:16:4e:2a:64:90:bd:4d:6a:1e:31:9c:a9:2e:
be:f1:d0:d8:d7:85:93:53:0e:34:9b:cd:49:0e:5a:2e:3b:25:
7c:c4:5d:8d:6d:95:22:36:87:25:13:35:04:71:45:88:be:b2:
3d:ba:42:5d:4e:a3:66:9a:1a:e7:08:83:8e:bc:9a:db:e0:ca:
ba:e7:28:b0:0a:0e:04:06:2d:2e:33:d1:ee:3f:2b:2d:37:d6:
48:7c:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:18:00 2024 by rpki-client on console-ams.rpki-client.org