Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/Onc_GoImgYJgywV4R9UlDDwZCHk.roa
File: Onc_GoImgYJgywV4R9UlDDwZCHk.roa (raw, json)
Hash identifier: iAv98LcnRuWodCKrZjJPZE1wzL8vqdh2RsyL9YHzZ+4=
Subject key identifier: 3A:77:3F:1A:82:26:81:82:60:CB:05:78:47:D5:25:0C:3C:19:08:79
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 018CC86F3DC1D8D843C2A15AB03482404AB7
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/Onc_GoImgYJgywV4R9UlDDwZCHk.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57280
IP address blocks: 109.163.200.0/21 maxlen: 21
185.60.172.0/22 maxlen: 22
185.60.174.0/24 maxlen: 24
185.60.175.0/24 maxlen: 24
2a03:5584::/30 maxlen: 30
2a03:5580::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3d:c1:d8:d8:43:c2:a1:5a:b0:34:82:40:4a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a773f1a8226818260cb057847d5250c3c190879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:63:ae:e9:f7:0c:26:a0:73:d1:f4:d8:df:
95:94:9a:52:6e:76:e7:e5:89:3a:10:7d:54:96:8b:
14:9b:50:44:91:22:dd:1f:14:59:1b:a0:2c:7d:21:
be:b1:10:dc:96:75:66:d5:51:40:64:72:5c:84:9e:
e0:e3:0f:d4:76:67:bc:da:ff:80:6e:73:19:ae:f1:
78:42:4d:f4:f7:d0:6d:c6:e9:d8:bc:94:15:5a:2a:
5c:57:f0:9c:f2:9b:86:4e:a1:43:4c:18:92:1a:7a:
18:99:16:36:b9:5f:d1:38:77:03:d7:dc:c5:9f:8a:
7b:a5:f5:46:59:34:26:da:af:cf:05:20:95:d2:65:
1a:e0:2a:d3:78:8e:c4:8d:be:4c:b9:6f:4e:9d:23:
cf:32:41:2e:72:ad:98:aa:cb:17:94:29:e8:66:6a:
0b:27:f3:b6:0d:19:6a:ca:95:a2:57:09:5a:17:30:
c3:97:fa:35:c9:ad:f1:99:cd:1a:21:5f:2a:2f:b5:
ac:cc:60:5b:df:66:9f:4d:22:3c:96:17:fb:14:a4:
03:93:60:6b:c4:e9:c4:59:f5:a5:44:b5:4a:d2:71:
6b:8e:9b:26:bf:6f:b3:39:af:70:a8:36:07:48:99:
e8:00:b6:8b:23:f1:01:bd:40:22:4c:db:4c:ca:2b:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:3F:1A:82:26:81:82:60:CB:05:78:47:D5:25:0C:3C:19:08:79
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/Onc_GoImgYJgywV4R9UlDDwZCHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.163.200.0/21
185.60.172.0/22
IPv6:
2a03:5580::/29
Signature Algorithm: sha256WithRSAEncryption
69:7c:a2:87:00:10:4b:a1:26:3f:37:1d:64:42:37:db:93:49:
90:3a:d7:6e:d2:55:76:c6:1c:5f:c5:7a:19:15:79:cb:75:9f:
1d:d0:ba:2f:93:c8:b5:97:7c:69:aa:7e:9a:9e:10:2f:2a:4b:
ab:2d:42:88:f7:de:85:e4:b3:45:ee:c1:d7:c6:57:ac:23:a8:
f0:d0:3f:95:0d:35:fe:8c:f3:b2:84:b2:ec:0a:e5:5d:6d:f6:
0d:67:32:1e:b1:57:1a:73:4c:3c:a9:93:ce:31:a4:4b:26:58:
96:d0:08:d7:aa:32:5e:1e:e5:eb:da:a5:24:28:42:5e:2f:43:
6a:5a:71:eb:42:9a:0d:a7:a8:9d:f6:a8:ea:34:c1:d2:9a:c9:
fa:4e:5d:fb:fa:ae:e7:1b:21:e6:78:8f:4b:a0:01:01:72:dd:
a5:74:96:01:18:3f:d0:08:97:58:6e:d7:ef:92:a2:94:e6:6c:
9b:ca:ad:79:50:31:42:2b:f1:46:be:60:db:e5:cf:8e:be:c3:
2d:38:c0:73:b5:3b:fd:31:33:15:1d:4b:c9:2f:41:04:9e:9e:
01:1f:39:df:dd:c1:a0:29:da:93:c1:4e:74:7c:14:15:d5:61:
a7:2b:09:20:27:8a:fa:ad:74:3c:4d:14:12:af:3b:da:6f:65:
51:52:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:29:46 2024 by rpki-client on console-ams.rpki-client.org