Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/g5gob-GT4Scoc9jXH4CLk2xcBig.roa
File: g5gob-GT4Scoc9jXH4CLk2xcBig.roa (raw, json)
Hash identifier: Y38G95r9ReVTpQMPh3dZTCJje64crraX1WflluZVSyg=
Subject key identifier: 83:98:28:6F:E1:93:E1:27:28:73:D8:D7:1F:80:8B:93:6C:5C:06:28
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 018CCA2A5A6821C02757E521251485C55952
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/g5gob-GT4Scoc9jXH4CLk2xcBig.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16004
IP address blocks: 217.29.72.0/24 maxlen: 24
217.29.72.0/21 maxlen: 21
217.29.76.0/24 maxlen: 24
217.29.77.0/24 maxlen: 24
2001:1ac0::/64 maxlen: 64
2001:1ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5a:68:21:c0:27:57:e5:21:25:14:85:c5:59:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8398286fe193e1272873d8d71f808b936c5c0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:0c:23:a3:a7:ea:06:38:69:bf:75:46:cd:
70:a9:2b:4d:e8:1c:1e:25:e3:68:06:ce:c8:1e:b4:
0b:0f:93:45:4a:85:5f:b6:9e:01:1b:f9:13:07:fe:
1c:48:48:03:19:b9:44:47:ac:d7:32:7e:76:bc:e8:
44:7d:5d:7e:3c:cd:0c:14:54:23:72:32:7b:72:8c:
99:af:21:8f:4c:9e:e3:ff:a1:f2:a7:bb:6e:41:68:
d4:ae:5b:83:f4:b1:1e:bc:4d:9a:7c:3f:28:6d:c1:
a8:97:65:56:b2:9c:ee:5c:05:88:40:44:15:98:0c:
26:d1:d6:64:eb:bb:53:c2:7c:b5:a1:a2:d4:28:cc:
00:b1:dc:06:6d:56:40:09:6b:a3:97:cd:bb:2f:3d:
1b:ed:ac:70:cf:34:4b:1a:4c:36:0b:4b:f2:1b:7b:
ef:17:9b:14:a7:5a:2e:1f:c6:80:1f:de:ae:78:b4:
e8:fb:41:2d:4b:59:10:e3:b6:f0:3e:3b:ee:61:26:
79:2b:55:45:f6:86:9f:7b:f6:97:a2:4d:6b:c0:5c:
9d:a6:13:f8:7e:2e:46:84:40:35:45:a8:99:8e:9c:
4d:b9:ee:a1:1e:09:e7:c8:0f:24:b1:c9:fd:39:b2:
7b:58:3a:bb:28:d7:45:bb:44:3a:de:54:6c:92:30:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:28:6F:E1:93:E1:27:28:73:D8:D7:1F:80:8B:93:6C:5C:06:28
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/g5gob-GT4Scoc9jXH4CLk2xcBig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.72.0/21
IPv6:
2001:1ac0::/32
Signature Algorithm: sha256WithRSAEncryption
e4:aa:a6:b1:ca:ef:1e:e2:5a:fd:77:e4:b6:fd:60:8b:cc:24:
49:35:97:d5:1e:95:cd:1f:40:23:ba:d2:d6:d7:33:e4:6d:55:
0b:15:51:ce:48:a8:d0:e8:4c:23:82:a9:d8:e9:46:b8:87:aa:
c2:1e:de:03:8b:d2:91:b2:0b:cd:d1:54:e7:3a:c0:ed:55:43:
62:b9:0d:43:03:9e:dc:e9:0f:77:e0:7d:a2:29:9e:e0:37:eb:
81:a5:6e:e8:7e:c1:55:b4:ce:e3:00:34:c9:ce:de:06:51:33:
eb:4e:0f:ed:28:07:81:19:fe:38:11:a2:67:c6:ac:dd:7f:14:
38:f6:3f:f9:d1:1d:29:5b:c8:3f:53:e6:ce:c2:10:36:ad:9c:
f8:81:8f:3b:24:80:77:1b:6f:c0:e4:fc:e9:69:92:5c:f8:eb:
e3:bc:39:fc:b1:23:a3:fd:50:a9:1c:41:9f:40:99:8b:d6:42:
17:24:4f:97:e6:a7:aa:ff:c5:64:52:d2:56:aa:91:b6:76:c1:
9d:1c:e5:13:52:87:98:81:85:7d:ef:f7:8d:3b:79:25:f4:bc:
f1:8a:06:93:67:5e:e7:ac:cc:1c:7b:60:9d:ba:4c:49:31:a6:
a6:dd:fc:00:08:31:57:e0:d7:55:97:28:d7:34:c3:3b:08:3b:
aa:39:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:40 2024 by rpki-client on console-ams.rpki-client.org