Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/aA8EMr14n-h014s7Jagh0vxo_oA.roa
File: aA8EMr14n-h014s7Jagh0vxo_oA.roa (raw, json)
Hash identifier: KT2D9uRksiUxzZjAtwA0uFJWYPfjQCgN0wjewbAlyQc=
Subject key identifier: 68:0F:04:32:BD:78:9F:E8:74:D7:8B:3B:25:A8:21:D2:FC:68:FE:80
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 018CC802573AD5662E1050F72EADD4852800
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/aA8EMr14n-h014s7Jagh0vxo_oA.roa
Signing time: Tue 02 Jan 2024 02:30:45 +0000
ROA not before: Tue 02 Jan 2024 02:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44465
IP address blocks: 92.43.170.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:57:3a:d5:66:2e:10:50:f7:2e:ad:d4:85:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680f0432bd789fe874d78b3b25a821d2fc68fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:5b:c3:20:0c:e1:dc:97:84:5b:d4:89:77:
5d:e7:be:3d:2b:e5:eb:43:c5:4b:66:2a:0e:2c:91:
1b:ec:63:fc:a6:f8:08:79:e8:5d:4d:ae:d6:41:d7:
8f:de:6d:eb:27:ef:f3:d0:5f:7e:74:41:12:38:e1:
04:e1:65:f5:6d:97:2c:45:78:b6:eb:fd:ac:dc:a2:
f0:fc:a5:de:cd:1c:e7:51:7a:a3:2e:22:58:2f:8e:
94:55:24:bb:2c:85:27:a4:53:f8:17:88:a6:aa:90:
8e:55:5d:c6:3c:11:c0:80:3e:09:a3:0d:0b:e0:32:
92:7d:a7:d1:f9:e8:51:ba:17:da:23:d6:31:b7:6e:
56:76:86:8f:cb:24:c5:f7:2d:20:44:47:11:f3:1f:
51:5b:9d:38:ef:e3:31:65:ac:b0:54:46:b3:8f:a8:
6b:9a:c4:3e:02:d2:29:12:50:8f:d3:6c:02:7a:54:
25:4e:e7:92:32:0b:c0:ab:41:81:49:fc:09:03:4f:
32:ff:b5:42:1f:cf:78:8b:d6:e7:e7:55:32:ef:f5:
35:6a:c7:cf:e9:2e:f2:17:e3:0b:cc:2e:61:c0:94:
96:0f:3f:fb:58:53:52:28:ad:0b:f4:0f:cb:5e:c1:
55:8e:19:74:1e:57:fe:cb:a8:fe:66:45:16:8a:5a:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:04:32:BD:78:9F:E8:74:D7:8B:3B:25:A8:21:D2:FC:68:FE:80
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/aA8EMr14n-h014s7Jagh0vxo_oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
1c:46:eb:95:df:8e:36:61:a2:5a:d4:b9:30:b0:20:1c:1f:50:
06:24:35:db:ce:e3:63:c7:3e:65:fe:6d:6e:f4:9f:93:c9:13:
bd:1e:07:00:9d:92:13:79:e2:9b:16:83:b9:a3:61:5f:5e:81:
a5:db:97:18:be:71:0d:ef:61:66:ab:60:2a:39:ba:e9:75:19:
19:73:f3:9e:ec:99:74:2c:83:79:85:b9:0b:a6:6d:b5:05:e5:
b5:48:b1:2f:88:b2:d1:51:1c:ba:8a:7d:8f:d4:81:02:06:5d:
ee:56:dd:75:8e:00:b3:19:93:62:ca:6c:12:e8:39:bf:0b:51:
15:93:de:b0:c8:e3:81:15:eb:5a:17:79:1d:4b:c9:63:82:6e:
56:1e:92:cc:23:58:fe:4b:73:4d:25:19:e1:fe:df:50:64:f9:
76:19:cb:45:51:37:7e:40:22:bc:f0:33:31:53:a1:d9:b2:9a:
2d:ce:4e:ea:63:9a:d8:df:63:b8:2f:d5:5e:dd:a0:8b:d4:4f:
d1:0d:c3:4c:e8:bf:b0:4a:6a:ca:3e:a5:0f:42:ec:d6:90:57:
b3:97:1f:6e:76:f8:f8:08:89:ca:1d:98:9b:99:f9:3b:bf:da:
78:0e:03:68:94:92:52:86:49:6d:7b:1b:78:be:c8:5b:cb:3e:
90:93:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:42:20 2024 by rpki-client on console-fra.rpki-client.org