Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gaAiHHN2H3jE70iYljLwPEKkyMg.roa
File: gaAiHHN2H3jE70iYljLwPEKkyMg.roa (raw, json)
Hash identifier: 3TVYYkTBiSQiexhXF31tGtYUCgL51A/1nDr8Ymxj3H8=
Subject key identifier: 81:A0:22:1C:73:76:1F:78:C4:EF:48:98:96:32:F0:3C:42:A4:C8:C8
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01910A682CCA7EFB9AB6D00F2542ACE45DBD
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gaAiHHN2H3jE70iYljLwPEKkyMg.roa
Signing time: Wed 31 Jul 2024 20:08:04 +0000
ROA not before: Wed 31 Jul 2024 20:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 84.55.12.0/24 maxlen: 24
84.55.13.0/24 maxlen: 24
84.55.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:68:2c:ca:7e:fb:9a:b6:d0:0f:25:42:ac:e4:5d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 31 20:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81a0221c73761f78c4ef48989632f03c42a4c8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:ca:33:54:f6:95:c4:0f:03:b5:89:d4:49:
13:5b:4c:74:4b:3d:9a:ed:2c:12:7b:04:0f:52:96:
c9:79:34:b9:4c:27:74:47:04:f9:34:0a:14:26:8b:
dd:a6:ad:51:36:03:23:ab:70:4b:16:11:91:ca:2e:
4b:3d:7a:aa:8b:64:d2:65:5b:ce:dd:d4:90:d5:f5:
37:8e:f4:f2:e8:c4:ba:5e:d8:27:f3:8f:ad:71:cc:
32:61:be:33:04:9b:4b:57:2d:7e:75:fa:1c:13:2d:
48:e1:e2:64:ca:f4:15:17:6a:88:73:44:e0:c9:36:
c0:07:f0:d1:9c:90:d7:6e:b9:e9:25:c0:b4:1d:28:
ef:9f:f5:6b:87:b2:32:e8:62:75:f2:7d:b8:a6:49:
0c:22:04:10:19:69:db:31:d9:f6:f7:ac:d9:cd:07:
0d:c5:81:1a:df:b0:b1:ff:4f:c5:29:f4:9a:fd:44:
58:4b:a9:d3:2a:26:e2:3f:c6:74:ef:39:4a:ef:3c:
f9:34:f7:8d:d6:cc:c8:1a:b1:90:d9:42:78:23:90:
2b:f1:61:b5:ff:17:fb:d3:01:2d:f9:6f:98:ee:70:
63:d0:de:1f:16:08:ec:18:77:61:10:9d:e6:6e:d1:
39:2c:6f:0f:d5:d7:c2:bc:38:a5:77:58:e5:6e:11:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:22:1C:73:76:1F:78:C4:EF:48:98:96:32:F0:3C:42:A4:C8:C8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gaAiHHN2H3jE70iYljLwPEKkyMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.12.0/23
84.55.20.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0b:46:3f:84:b2:ad:7e:4d:de:8e:c8:4e:c6:b3:3d:6e:05:
b0:62:f2:82:6d:b5:3e:cf:7d:13:45:03:50:a0:9e:12:6d:8b:
e9:eb:96:cf:58:88:1a:eb:95:8a:24:3b:54:47:90:59:97:a2:
46:eb:d8:c1:47:c4:c7:ae:1b:df:85:16:0f:20:ae:6f:92:4c:
43:93:5c:e8:cb:dc:b6:63:bf:b4:19:e5:d0:04:1f:75:cc:82:
e1:33:b0:9f:6f:e6:9b:a4:01:14:af:21:32:49:9f:86:8c:69:
97:5e:cb:82:a5:ee:1a:51:27:d3:9e:8b:7c:aa:3c:7f:e7:4e:
fe:03:85:62:45:1c:ef:65:d9:c7:bf:46:11:6a:0a:2d:5f:d0:
fa:0b:2a:98:f1:3d:38:e1:fb:db:4d:84:1e:67:54:a6:7b:9d:
3d:15:81:d5:06:07:0b:f6:09:6c:ec:1e:54:fe:d2:86:f2:d3:
80:84:73:36:4d:99:68:bd:c2:8b:dd:bd:f0:66:d4:6b:35:7f:
96:ce:8f:08:b8:1a:e3:7d:65:c1:78:ef:6f:3d:fd:ec:eb:38:
1c:4e:cb:56:3f:4f:cf:a9:06:4d:02:b5:60:f0:dc:a9:f1:51:
4b:3b:c5:9d:8b:80:d8:82:7f:c9:72:64:08:17:89:fd:01:65:
7a:32:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:48 2024 by rpki-client on console-fra.rpki-client.org