Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/bIm5S1jLTBavpT78m8_0pwZNhmQ.roa
File: bIm5S1jLTBavpT78m8_0pwZNhmQ.roa (raw, json)
Hash identifier: 2WcCbGSRTgSf6wm7geogJuVRykpEsJnb0uJQ1hAM8g4=
Subject key identifier: 6C:89:B9:4B:58:CB:4C:16:AF:A5:3E:FC:9B:CF:F4:A7:06:4D:86:64
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 0191A619031443154244138D093E8B1EFA6A
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/bIm5S1jLTBavpT78m8_0pwZNhmQ.roa
Signing time: Sat 31 Aug 2024 01:42:22 +0000
ROA not before: Sat 31 Aug 2024 01:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43766
IP address blocks: 92.43.168.0/23 maxlen: 23
92.43.168.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a6:19:03:14:43:15:42:44:13:8d:09:3e:8b:1e:fa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Aug 31 01:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c89b94b58cb4c16afa53efc9bcff4a7064d8664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:14:03:f3:d7:c0:bb:74:12:ed:b1:00:93:
ba:a5:4d:82:75:68:5d:c0:e5:20:79:78:ca:e4:da:
f7:ac:ec:50:ee:af:13:08:d1:19:ce:1c:cd:db:93:
05:8a:9b:13:98:c3:93:41:a6:47:d7:aa:ac:2c:0a:
a1:6a:c7:a9:24:27:7f:0d:c3:88:b3:9d:ed:50:7a:
4d:de:f4:1d:fc:fb:cb:bf:de:ea:79:74:4a:99:b5:
38:60:9f:c6:63:fc:f2:5a:3c:72:43:43:eb:6d:07:
e2:75:8d:ec:96:3e:5a:51:3e:8e:ec:0a:2d:19:49:
b3:8c:93:03:6a:80:dc:a6:5d:3a:3a:01:50:f5:0d:
2a:64:6c:b2:11:35:15:45:19:d1:4c:0b:67:65:d5:
9c:c1:e3:8b:c4:54:23:e0:ee:77:37:a0:d4:25:ee:
57:ce:67:8d:03:09:c3:da:3b:f7:8e:9a:bb:b4:2f:
5a:88:01:55:f9:f7:cc:6e:e8:67:52:6c:c5:d1:96:
b3:26:f5:77:9c:aa:e7:b8:d2:30:6a:31:65:18:84:
af:96:09:8e:9b:27:0e:2a:e1:79:81:19:65:69:d5:
1e:aa:fa:59:d1:05:c0:bc:40:8a:e2:20:27:64:d0:
60:c9:fe:8a:2d:f3:93:ee:5c:64:25:64:fb:57:4a:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:B9:4B:58:CB:4C:16:AF:A5:3E:FC:9B:CF:F4:A7:06:4D:86:64
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/bIm5S1jLTBavpT78m8_0pwZNhmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:2b:80:45:4e:45:53:d9:0e:ca:97:b8:19:54:33:16:de:8d:
a5:12:0f:84:a3:74:19:e6:76:06:a0:83:ba:21:bb:d9:ec:6a:
a6:16:2c:5d:77:21:8a:59:7e:00:a1:f1:fb:7c:67:48:11:3e:
70:ad:00:3f:cc:62:29:42:d9:cd:b5:76:9c:e6:02:da:f0:b9:
4e:b8:a5:3e:e2:28:c3:8f:25:21:5a:d0:69:9c:2d:75:30:f8:
4b:a2:65:3c:e6:ff:79:5f:17:a2:73:11:4f:1d:2f:ac:c7:13:
8f:e9:b0:83:1f:57:e3:0c:72:e4:c9:f9:a5:35:e8:7d:9a:be:
1e:2b:51:d4:eb:16:76:53:cf:ca:ca:de:72:cb:0d:32:a5:a2:
8c:b5:7d:07:d8:3d:72:fc:c1:fc:e1:d0:af:16:e7:dd:28:43:
5a:a0:cb:a1:31:1a:b2:48:26:30:c7:50:c9:4c:2f:1a:57:7e:
bf:79:c1:83:94:7d:c9:74:e8:d0:60:b0:3b:6f:64:13:a6:4d:
c7:4b:38:9a:5a:31:bf:47:15:80:76:73:f5:09:65:83:91:07:
5e:e1:07:93:6c:eb:58:c5:ad:8e:6d:73:23:13:b4:15:21:03:
9f:98:9d:fa:b0:5b:1e:dc:2d:7e:8a:3f:3d:36:bd:da:97:14:
97:64:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:43 2024 by rpki-client on console-ams.rpki-client.org