Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/gQ21BzSnQKazXeYKK_Q8ASXjzB0.roa
File: gQ21BzSnQKazXeYKK_Q8ASXjzB0.roa (raw, json)
Hash identifier: TvCWyuWF1iDbwL3asmYv8xUW/MZAMSJyyhz12ksPQMw=
Subject key identifier: 81:0D:B5:07:34:A7:40:A6:B3:5D:E6:0A:2B:F4:3C:01:25:E3:CC:1D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 018CC9BCED56928AB08982306540903CC087
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/gQ21BzSnQKazXeYKK_Q8ASXjzB0.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28878
IP address blocks: 193.30.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ed:56:92:8a:b0:89:82:30:65:40:90:3c:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810db50734a740a6b35de60a2bf43c0125e3cc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:e7:bb:ac:41:9f:31:ab:7c:ae:f6:67:12:
64:d1:a5:09:41:18:e0:90:4e:f4:02:c1:77:46:4c:
eb:0e:e8:df:ca:c6:4a:f0:ee:15:4b:ad:d9:9f:93:
85:16:52:c9:f0:d3:db:4d:c9:9b:e9:76:cf:03:80:
e2:d7:de:11:b4:cf:22:e6:1e:ee:79:b5:1d:e1:5d:
58:bf:17:7c:bd:66:99:aa:74:64:a6:79:55:b4:f5:
70:52:13:3c:68:72:41:03:84:ea:48:64:a5:e3:30:
c3:d1:1f:77:95:d3:fb:ee:1f:61:64:0f:ae:0e:89:
f3:11:5f:df:40:75:a6:f9:02:8f:af:d1:b6:de:e3:
1d:10:4a:bb:8f:4c:a6:4f:21:20:15:53:f9:01:52:
97:ed:19:de:dd:c1:a9:75:ba:ad:6c:b1:0a:de:58:
08:c0:e5:a2:50:35:15:67:95:06:f4:2f:c7:bb:9c:
c8:c0:0b:4f:82:c1:f9:07:ae:66:1d:9d:3a:c1:fb:
56:80:2c:0c:cf:0e:73:ae:7d:f5:78:2b:57:8c:a4:
f1:10:74:7e:69:9b:3f:cc:24:2e:32:ab:3b:8e:07:
59:00:68:62:29:80:38:b1:53:28:11:0f:6d:a4:f0:
fd:54:e2:ae:f2:81:ec:92:8d:1c:a3:44:38:64:d1:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:B5:07:34:A7:40:A6:B3:5D:E6:0A:2B:F4:3C:01:25:E3:CC:1D
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/gQ21BzSnQKazXeYKK_Q8ASXjzB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3e:dd:a8:35:b0:9b:2d:6b:ab:8a:5b:94:99:48:1b:0e:a9:
cc:09:35:90:be:3e:d2:e1:32:30:86:41:ad:f4:73:0f:27:1d:
af:68:05:36:44:03:ba:69:6c:6e:56:0b:03:e9:79:d5:09:f6:
2c:ab:a4:f5:be:8e:f2:11:4b:dc:05:73:80:b8:d9:d4:19:db:
4f:40:31:c3:ee:0a:92:46:df:b4:42:aa:ac:51:4e:b8:40:79:
e3:3b:fb:5b:1a:2d:f7:ff:f3:ea:ed:70:83:8a:9f:08:0d:ee:
9c:8f:bf:88:71:97:ac:9f:0c:05:f6:a4:40:ad:f5:d5:eb:ae:
e3:76:6b:c5:6d:d3:ba:a8:ad:27:17:d0:97:29:b3:30:e5:b6:
fa:f2:fe:8f:df:52:66:5e:1e:75:7e:8e:d5:53:e7:a2:f8:e4:
3c:74:ed:81:40:2e:d2:2d:f4:e7:46:16:5f:33:49:1f:55:76:
10:7b:15:8d:66:aa:3d:11:88:46:06:cb:89:ec:09:2b:a5:14:
33:30:92:23:b1:81:5b:36:ae:ec:81:d3:1d:e7:7b:f4:cc:15:
26:87:ce:0f:d9:14:f0:a4:8c:c5:51:0a:ba:ce:86:2c:74:9f:
0f:82:fe:64:b5:dc:b7:5a:68:e2:9d:b2:52:b5:61:82:1e:e0:
af:c0:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:17:26 2024 by rpki-client on console-ams.rpki-client.org