Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-tVwY66VxOJvWMdWMntVG9WUJHY.roa
File: 1-tVwY66VxOJvWMdWMntVG9WUJHY.roa (raw, json)
Hash identifier: 68TTMs50RoTnbvM8uP3PIynEtiEETeXPXT23/dJqCh8=
Subject key identifier: FA:D5:70:63:AE:95:C4:E2:6F:58:C7:56:32:7B:55:1B:D5:94:24:76
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC80133D4F6A79927956FAD964FE0921D
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-tVwY66VxOJvWMdWMntVG9WUJHY.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 192.102.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:33:d4:f6:a7:99:27:95:6f:ad:96:4f:e0:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad57063ae95c4e26f58c756327b551bd5942476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:db:82:f0:41:1a:25:fd:5b:3d:58:ef:8c:
de:9d:49:cd:1b:90:7d:d4:50:35:d0:cf:14:f2:c5:
ac:2a:82:55:c1:ea:cc:77:5a:b0:9d:ba:92:6a:2f:
53:d7:9b:a6:3f:e8:2b:f2:4c:f2:43:e8:06:1b:a7:
b1:9d:b6:49:21:e8:58:fb:89:8c:b6:f9:56:c0:76:
b0:94:ca:8e:af:97:61:d6:f2:5b:71:6e:e9:2d:0f:
b6:49:3b:c8:3a:3b:8b:14:c8:71:82:5c:64:8f:e3:
c7:61:b0:1c:a3:a8:4d:94:dc:ae:a3:a7:92:bb:0e:
53:a4:1b:22:2e:be:6e:d5:8f:48:af:4e:a0:7f:6d:
b0:5d:2e:93:2b:ce:4d:8c:5d:27:f7:3d:d7:e5:56:
c5:cb:72:22:04:2f:12:66:5e:61:cd:ab:43:a0:e3:
db:b6:dc:5f:5b:00:09:79:56:7f:2c:73:4d:89:e1:
56:75:0a:99:a5:c8:09:0b:e5:43:f5:eb:a2:a8:5b:
ae:52:e2:8d:d4:ab:31:25:3b:d3:7d:67:06:d5:54:
b1:7f:35:b4:17:b9:a1:10:70:fa:7c:27:c1:ac:bf:
b5:b1:04:20:af:27:ac:ab:74:32:e7:a3:72:5d:d9:
d5:cc:69:8d:20:4e:5a:68:5f:99:28:13:4f:68:cf:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:70:63:AE:95:C4:E2:6F:58:C7:56:32:7B:55:1B:D5:94:24:76
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-tVwY66VxOJvWMdWMntVG9WUJHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7b:01:cc:c2:03:da:5b:8a:ec:d4:36:ee:d0:87:e2:a2:61:
ac:c8:34:1f:90:8b:ac:f7:92:d6:4e:32:c4:ce:9e:6b:b4:fe:
87:b2:0a:24:00:9c:f3:ce:6b:43:1d:7c:82:51:6c:c0:cb:8e:
04:94:1b:2c:9c:7b:11:f9:9a:2b:63:2e:34:64:43:70:2a:3c:
6c:d6:83:32:6e:3f:8a:6f:a1:b6:98:9d:73:50:6e:71:55:1d:
3e:ac:ef:b7:bd:2a:8a:8a:27:02:ed:f7:bf:c7:24:cd:d8:c0:
7f:c5:d3:51:44:39:eb:9c:2b:68:e7:d8:84:ac:96:2f:b9:3d:
03:b8:bf:60:88:b2:30:db:4e:82:0e:96:a6:dc:1f:4b:ea:38:
f3:67:5d:2c:f6:c9:a3:aa:d3:43:60:41:e6:80:1d:bb:49:0c:
c9:5e:08:00:55:3b:2c:e0:f9:ef:e1:c9:43:54:57:ea:b6:50:
2b:be:c3:5d:cd:b0:91:98:99:50:93:a9:0a:37:13:ae:04:ef:
1f:8b:56:a2:f4:8e:4b:62:1d:47:cf:51:1b:c9:21:db:b7:27:
93:65:fa:d9:ac:3c:b1:2a:bc:2c:de:23:11:c1:20:45:1f:9e:
03:36:27:c0:28:39:e9:96:5f:e8:77:04:85:43:a9:c0:f5:a7:
74:b5:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:24:23 2024 by rpki-client on console-ams.rpki-client.org