Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AzsUBzYP8q29LYEnd5UcZxiD6hU.roa
File: AzsUBzYP8q29LYEnd5UcZxiD6hU.roa (raw, json)
Hash identifier: D67snEXn89BonkgPkVTKnPyoaWOEdK+kbxAgqvmbias=
Subject key identifier: 03:3B:14:07:36:0F:F2:AD:BD:2D:81:27:77:95:1C:67:18:83:EA:15
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8313F83E76038E52D994B69CAEB4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AzsUBzYP8q29LYEnd5UcZxiD6hU.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33895
IP address blocks: 178.16.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:83:13:f8:3e:76:03:8e:52:d9:94:b6:9c:ae:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=033b1407360ff2adbd2d812777951c671883ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:85:74:a4:84:28:37:8f:3a:9b:4a:55:05:
a8:1f:2a:1a:3a:8d:90:88:c9:b0:30:12:5a:95:60:
e5:14:43:28:9c:8d:6b:46:3b:8e:8d:ae:0d:9d:a6:
85:6b:c4:7b:e4:db:7c:99:53:00:bb:84:92:2e:eb:
4d:20:7d:b3:b6:8f:15:81:14:d3:51:12:ed:08:06:
38:db:8e:95:61:33:14:a5:86:b2:a2:e8:78:6f:c2:
d0:a5:8a:57:9f:78:4e:c2:95:c3:1d:f0:b2:62:b7:
ba:74:12:96:87:5e:8a:7b:72:0b:93:c9:e7:1d:5d:
f0:f7:be:27:09:4e:cd:6a:04:3d:6d:ba:ab:5d:b0:
8b:82:4b:b6:dd:59:53:f1:9f:16:01:55:3a:b8:71:
21:e9:3a:f1:ee:a7:2e:cf:94:20:f9:9e:33:1c:2d:
31:32:2a:9b:20:5c:6b:e0:c3:7f:4d:54:f8:de:67:
b3:2d:8a:f6:ca:8d:36:a1:bc:95:b4:89:80:f6:76:
f8:e6:29:2d:a3:66:92:6c:6d:e1:82:61:50:49:c4:
24:c2:df:b5:8e:95:1c:a4:c0:34:35:f3:f3:89:a3:
bd:35:ec:d2:68:4e:c4:35:17:e1:24:f1:16:69:e3:
e1:0b:22:a6:a5:ab:5a:76:ab:88:f0:10:78:fb:8c:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:14:07:36:0F:F2:AD:BD:2D:81:27:77:95:1C:67:18:83:EA:15
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/AzsUBzYP8q29LYEnd5UcZxiD6hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
78:87:17:7d:60:2c:80:a1:a8:15:a8:a8:aa:f8:ab:72:48:66:
bf:0b:52:71:d0:71:80:b6:5c:2e:07:05:7b:a5:e5:d8:52:ad:
9b:b0:4b:5c:ca:1d:06:9f:3b:0e:3b:70:2f:44:a8:ec:43:69:
b1:20:36:4a:fb:79:a2:bf:c7:ba:df:b8:04:1a:6d:ec:d4:c0:
50:a1:af:4f:6c:fb:47:09:e9:6d:2c:03:9c:25:a9:90:4b:dc:
32:0a:09:23:92:32:55:5e:81:ac:72:45:78:3c:5c:3b:d6:a5:
3c:f9:63:eb:30:b2:bd:6d:8b:f8:39:20:f4:7a:41:a6:82:6d:
a9:e0:ba:b5:52:94:a7:76:59:9c:35:99:3c:cd:c5:6f:ba:9c:
c4:e0:0e:50:dd:ed:d1:32:78:c4:8e:86:6c:57:36:ea:70:37:
2b:2e:72:2f:f2:b9:1b:7a:8c:8a:f6:a6:05:96:08:7e:8f:2a:
97:c7:00:95:f5:80:d7:8c:0e:07:cd:b4:86:18:9b:00:92:2f:
12:30:96:fa:19:07:00:4e:d1:c9:16:4a:1c:ea:96:70:c4:8e:
38:5e:5d:a4:d9:13:17:a6:9a:19:1d:ae:8f:2d:14:13:20:a3:
1c:90:e3:68:bd:ee:f6:8a:26:8f:dd:6e:e0:ec:05:a0:a3:6f:
38:d7:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org