Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gd6SU79Nnjabg4mKevxkFITQHY4.roa
File: gd6SU79Nnjabg4mKevxkFITQHY4.roa (raw, json)
Hash identifier: XzNJSpbNqdTCroC5AjwqcZUjs0tec69710hyL1JHJpg=
Subject key identifier: 81:DE:92:53:BF:4D:9E:36:9B:83:89:8A:7A:FC:64:14:84:D0:1D:8E
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 018CC42503B495BBEC16DB290A9DE3B71CE1
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gd6SU79Nnjabg4mKevxkFITQHY4.roa
Signing time: Mon 01 Jan 2024 08:30:09 +0000
ROA not before: Mon 01 Jan 2024 08:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15395
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:03:b4:95:bb:ec:16:db:29:0a:9d:e3:b7:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 08:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81de9253bf4d9e369b83898a7afc641484d01d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:89:cd:25:6b:f7:05:4f:a8:78:f5:1d:bf:
35:39:5f:e0:0d:49:0b:e7:90:d1:b2:bc:ee:a1:7c:
56:4a:71:20:4f:d8:15:dc:8b:a2:72:ff:11:79:29:
10:31:71:d6:99:cc:1b:91:3e:da:9f:e5:24:8c:17:
31:34:ce:65:53:09:f9:cc:44:1a:44:9b:7f:24:1b:
aa:cd:4f:25:96:8e:fe:f0:d4:65:45:77:8b:78:9a:
96:3d:75:02:22:30:29:a2:b5:67:c6:7d:ec:27:d7:
89:43:9d:9e:8d:05:a2:8b:17:89:72:09:d5:aa:86:
3c:0a:b2:eb:4b:ed:0d:a6:f3:21:32:c4:8e:4b:30:
52:69:9c:75:e2:b6:30:52:7c:39:a3:91:08:0e:3f:
de:f6:cf:22:80:d5:3d:44:17:0b:bd:90:20:e0:84:
3f:e7:e4:3f:1c:3b:2c:f0:0e:55:f1:0a:95:75:33:
6f:8a:ad:5a:55:0e:20:ee:1e:34:fb:54:b9:86:f3:
c8:72:28:eb:e3:8a:da:48:43:a2:95:bd:8a:d1:66:
cd:80:ae:8d:8e:0c:81:f6:7d:96:e7:99:f3:80:fa:
68:fb:61:79:c9:91:e6:08:d4:28:99:41:86:be:d6:
73:db:58:ac:51:cd:ea:99:a1:a9:79:e3:d8:0f:70:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:92:53:BF:4D:9E:36:9B:83:89:8A:7A:FC:64:14:84:D0:1D:8E
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gd6SU79Nnjabg4mKevxkFITQHY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
76:23:4c:e3:b2:33:32:20:6f:74:85:e1:ec:fd:a0:b8:6d:bd:
9f:64:9e:50:d8:62:2f:f5:27:16:71:f1:0b:1d:96:49:a9:a0:
5b:e1:eb:16:88:24:8e:7f:39:9c:a8:e1:82:12:5d:71:b8:2a:
cd:e4:ff:30:b4:4f:82:ba:57:64:d1:2a:35:91:1a:a7:e8:a6:
f6:e2:22:d3:e5:da:ea:37:1d:1f:0f:30:36:e9:5a:15:d7:75:
b1:c1:c5:10:e1:9f:4b:a5:54:53:60:ac:4b:c8:a1:89:14:83:
0c:66:a8:2e:8d:f7:1d:0e:26:e0:31:10:9a:b3:c8:7f:aa:5c:
8f:40:74:1b:73:63:be:80:ae:52:17:94:f2:4c:bb:d8:da:22:
c1:48:39:7c:65:a2:cb:45:af:6a:ad:2f:33:a3:37:cd:38:ef:
d5:a7:85:d4:43:96:cf:e0:6f:ea:43:82:99:08:6c:18:52:6a:
9d:c2:88:08:25:50:28:83:0e:b0:73:08:e4:ea:64:bd:00:28:
d6:48:be:ad:2d:f9:ce:43:ec:fb:20:f2:06:bf:03:2b:48:57:
4d:1e:96:ae:74:8b:bf:6e:56:73:8e:5d:8d:88:4a:0e:73:6d:
92:1d:a2:5d:b6:d4:6d:c3:ff:ef:60:8a:2f:1d:6d:b4:50:6c:
aa:fe:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:44 2024 by rpki-client on console-ams.rpki-client.org