Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/G30i_LNaVGEoPFFO260ZPafMtq0.roa
File: G30i_LNaVGEoPFFO260ZPafMtq0.roa (raw, json)
Hash identifier: 8nmD15yvyvEktAJuGRD6xYrlvHG4YK3+QG5xSkXqrOs=
Subject key identifier: 1B:7D:22:FC:B3:5A:54:61:28:3C:51:4E:DB:AD:19:3D:A7:CC:B6:AD
Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial: 018CCA2B47BE037BD825B605577EE16206B1
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/G30i_LNaVGEoPFFO260ZPafMtq0.roa
Signing time: Tue 02 Jan 2024 12:34:43 +0000
ROA not before: Tue 02 Jan 2024 12:34:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6732
IP address blocks: 193.247.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:47:be:03:7b:d8:25:b6:05:57:7e:e1:62:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Validity
Not Before: Jan 2 12:34:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b7d22fcb35a5461283c514edbad193da7ccb6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:90:c6:0e:f5:e3:53:49:e0:51:e0:c9:54:
b8:29:63:00:97:49:9b:f2:9b:53:70:e4:6f:4e:29:
26:ab:ed:69:23:7a:1a:33:53:3c:f4:ee:e8:36:5c:
f2:51:a7:25:c3:31:fa:b6:3e:f1:77:6f:98:20:89:
84:23:14:47:0e:a3:b7:5e:79:75:fc:95:7b:2d:09:
49:8c:09:f6:22:75:bc:44:65:39:a8:a2:94:72:e7:
ac:3d:30:73:c7:40:09:11:6c:2b:7a:56:e3:0d:f7:
9a:7a:33:e2:a7:5b:81:5e:b7:10:fd:4c:33:2a:d3:
84:3a:e9:7e:dc:1e:c5:2c:42:6d:bd:f4:f9:67:b8:
ab:a3:39:ef:4d:14:f7:56:c8:0a:49:86:71:99:58:
33:42:0b:b8:00:a0:f6:e2:c9:c4:53:20:64:e7:71:
a4:7a:0d:e3:cf:92:15:77:dc:f3:6c:ed:c3:7a:2c:
22:17:c8:cb:3f:93:0c:20:50:af:5b:ef:df:57:fc:
4f:04:cd:e8:f7:5c:5f:9b:d5:f6:53:ae:ff:34:a7:
d7:f8:47:ce:ef:fd:28:14:27:35:d2:b1:ec:5c:4d:
76:2b:0c:f0:6e:db:b5:59:2f:09:30:39:93:59:b4:
6b:40:ce:c0:42:da:65:e3:c5:22:b4:87:7e:9a:31:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:22:FC:B3:5A:54:61:28:3C:51:4E:DB:AD:19:3D:A7:CC:B6:AD
X509v3 Authority Key Identifier:
keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/G30i_LNaVGEoPFFO260ZPafMtq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.146.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b4:24:0b:6f:5a:84:e7:e6:91:75:21:98:55:bf:9a:b6:6a:
55:17:76:87:ca:ef:81:e0:8f:d8:e7:a6:ec:b8:ce:42:25:3a:
ff:e3:6c:1d:b5:48:70:4c:39:05:7d:a8:c9:bb:dc:57:5c:83:
96:ed:2f:7b:d0:4f:dd:fb:3d:20:29:ee:f6:8e:07:6c:f5:15:
ce:aa:1c:05:e7:0c:c0:4a:96:4a:2d:78:9e:9a:92:88:33:1e:
37:f4:2a:b1:11:07:b2:78:09:c0:a5:fb:fe:a4:1a:0c:05:bd:
89:1c:9e:2f:d4:f7:8b:fd:19:5b:c8:e5:44:34:a4:99:c6:b3:
45:52:e4:55:4e:be:46:da:e7:a6:e1:e4:1f:a7:8f:9f:04:3e:
2b:1e:ef:97:d4:8b:d1:a3:31:1f:ef:da:46:89:85:23:4c:bf:
b1:90:c5:7d:be:78:4b:3e:e8:43:ec:2a:7d:43:10:8e:5b:e2:
68:b1:ac:40:55:d0:b8:3d:7e:a4:c7:6d:16:e5:52:77:26:08:
b8:e8:44:f2:0a:c2:9d:eb:e1:5b:8b:db:d6:de:85:a8:95:27:
63:9e:07:02:06:57:80:ed:73:80:bc:eb:8d:69:ad:c8:4e:48:
d7:b8:a4:98:18:74:98:ad:d3:73:e0:c0:d3:98:32:71:de:90:
c4:e7:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 07:58:15 2024 by rpki-client on console-ams.rpki-client.org