Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/GRNbZMBfAFiDLkFcN6v7R35hrwo.roa
File: GRNbZMBfAFiDLkFcN6v7R35hrwo.roa (raw, json)
Hash identifier: 5vwQrk2x9IoSmLDzGk+hloTm6HuCD43elte9r+/Hvuo=
Subject key identifier: 19:13:5B:64:C0:5F:00:58:83:2E:41:5C:37:AB:FB:47:7E:61:AF:0A
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019368AD0678833CFC495B7CC2BDCF0B61BF
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/GRNbZMBfAFiDLkFcN6v7R35hrwo.roa
Signing time: Tue 26 Nov 2024 13:33:09 +0000
ROA not before: Tue 26 Nov 2024 13:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 45.89.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ad:06:78:83:3c:fc:49:5b:7c:c2:bd:cf:0b:61:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Nov 26 13:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19135b64c05f0058832e415c37abfb477e61af0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:44:24:f9:fa:38:bd:81:96:30:d1:bb:f3:
e9:c0:4f:ff:8e:a9:e4:cf:6e:05:06:b7:e9:6b:68:
8a:7c:67:83:59:e0:41:20:c3:68:f6:98:02:e4:e3:
ca:5b:26:a5:bd:f7:d2:fe:1d:09:47:fd:c9:dd:8e:
44:88:31:d4:40:7c:73:6e:cc:97:5e:6a:ee:74:7c:
40:b7:30:d4:34:5f:f0:e8:d5:4c:69:b5:5a:9f:99:
94:c1:eb:27:1f:5f:a0:f3:cc:5f:93:86:8b:ca:48:
7e:e1:5c:d2:e8:14:e9:37:ff:10:c0:7e:a7:99:4c:
85:da:5d:4f:9a:33:18:01:40:ea:eb:4a:1b:8a:a5:
cc:61:67:a2:c3:cf:40:8d:39:11:77:41:78:1e:04:
39:59:b3:79:68:f8:11:a1:2b:62:31:04:07:84:f9:
14:0d:62:ed:bf:9f:ab:58:44:18:e0:c3:d5:04:1f:
bc:07:5f:6c:46:f9:23:4d:e8:68:02:d5:8e:94:d0:
22:fb:c0:1f:b1:29:d1:06:4f:eb:2a:19:7d:15:f8:
c3:59:fa:40:71:25:98:73:4b:2b:00:c0:b0:c4:6d:
e7:56:cc:89:ca:8c:f9:a8:58:4b:b0:4f:28:32:3b:
99:e5:a6:26:d8:92:95:8f:97:1e:7d:bc:b4:fe:93:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:5B:64:C0:5F:00:58:83:2E:41:5C:37:AB:FB:47:7E:61:AF:0A
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/GRNbZMBfAFiDLkFcN6v7R35hrwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:cb:dd:82:39:99:c6:f8:60:f9:f8:ab:65:82:47:2e:40:db:
fb:64:41:9f:87:c8:44:0f:d3:c7:d3:c2:1a:50:00:fe:2c:8e:
3a:5b:db:ef:8b:17:17:83:28:2d:fd:e0:82:07:37:e6:8a:0b:
12:59:37:be:e2:25:89:83:2d:af:7c:00:6b:6c:fc:0d:6e:79:
b2:af:66:6f:e4:a0:0c:02:ae:24:1c:84:00:60:f2:cc:ba:4d:
17:51:30:0e:cd:01:fd:f6:c5:7b:ca:05:d1:f1:c2:a9:c3:61:
7f:ed:d2:d3:8e:40:d1:3e:7e:66:93:a0:02:3a:b9:03:2b:93:
b1:7b:a4:55:ab:f7:ec:4c:96:db:5f:bb:87:5d:e5:d5:e1:fc:
ef:29:92:3f:7f:e5:b7:9d:c6:5d:95:a7:f3:7d:cf:80:a8:64:
d9:24:20:70:cd:82:16:4a:e2:2e:95:64:c7:1d:08:f6:90:f6:
0b:dd:db:77:9b:58:98:cf:0c:ee:bf:0f:6e:16:3e:84:ff:b8:
20:e4:85:90:86:4f:62:92:6c:8e:59:07:ff:15:a0:39:5e:3d:
ed:ec:62:00:25:db:9f:da:93:bd:79:94:9b:0f:9e:87:4d:d4:
93:ea:c1:a6:e5:76:92:a2:ef:1c:8f:87:de:eb:4d:66:d2:2d:
aa:59:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:27 2024 by rpki-client on console-fra.rpki-client.org