Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/KCg4tnzm_WVLm3wpZhM6Hk2NHIg.roa
File: KCg4tnzm_WVLm3wpZhM6Hk2NHIg.roa (raw, json)
Hash identifier: rGlSPDdD7STCE2XA0sTBp4FksKhIpQvRJt43/JMmoMc=
Subject key identifier: 28:28:38:B6:7C:E6:FD:65:4B:9B:7C:29:66:13:3A:1E:4D:8D:1C:88
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 018CC794C6EFBADC6E38713E09B4A4870444
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/KCg4tnzm_WVLm3wpZhM6Hk2NHIg.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59575
IP address blocks: 176.116.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c6:ef:ba:dc:6e:38:71:3e:09:b4:a4:87:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=282838b67ce6fd654b9b7c2966133a1e4d8d1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:23:10:9b:1c:30:24:39:4f:b4:3d:4c:df:
57:c1:93:32:5d:8f:69:f7:f7:11:32:cf:da:5f:b8:
2e:d4:af:c1:b1:a7:66:e8:39:08:c1:0d:a8:9d:8b:
02:c5:61:c8:57:29:e6:14:3c:96:7a:09:d8:9f:18:
76:9a:5a:89:82:84:dc:83:4f:d0:64:0e:ab:26:ae:
64:f5:f1:45:17:93:cb:2f:6f:5c:e6:bb:d4:2d:72:
bf:9b:4c:b8:fd:5d:42:1d:68:c7:c7:10:aa:c4:fb:
ed:ca:61:11:6c:23:75:d8:40:f5:eb:8b:99:45:cc:
1c:f6:fe:06:9a:fc:3f:08:42:a1:7a:6a:1c:02:18:
af:9a:d1:d4:54:26:02:d4:73:5a:db:49:50:ea:0d:
2a:51:2d:a8:90:67:c8:80:23:8d:bc:58:ed:52:3d:
da:3f:cb:cd:d9:bf:44:6f:d8:8c:1a:8b:66:33:04:
81:42:63:f7:c1:b9:14:e1:74:88:d1:1f:f6:1f:34:
7d:f7:19:d0:73:6b:33:33:6b:ea:9d:96:4d:3b:b8:
a7:f3:2c:ce:9a:80:ff:28:79:12:02:39:a9:41:27:
a9:19:b2:ef:b2:ee:f9:da:ab:3b:85:d4:ef:64:5c:
4f:ff:4d:dc:d8:96:5b:09:cd:97:91:1a:6b:0d:65:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:38:B6:7C:E6:FD:65:4B:9B:7C:29:66:13:3A:1E:4D:8D:1C:88
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/KCg4tnzm_WVLm3wpZhM6Hk2NHIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.146.0/23
Signature Algorithm: sha256WithRSAEncryption
02:a0:b7:60:e3:8f:5e:f2:6c:04:65:7b:ad:91:5d:db:c1:2d:
b5:53:5a:d0:2a:a1:70:e5:48:28:64:2d:e8:4b:c1:ed:80:20:
7c:54:e1:d9:2f:85:8c:de:54:7d:ef:fd:df:e1:9b:c5:99:06:
8b:47:97:a5:36:0f:c3:c6:be:4c:43:63:dc:b7:3f:82:aa:e5:
dd:03:51:a6:b4:a7:fd:fe:49:6f:66:f9:4a:a8:03:f1:84:1d:
7d:20:34:55:2f:b1:15:c6:9c:ba:df:ad:65:e1:72:07:f7:cc:
66:42:17:a2:bd:8a:99:3d:7d:3a:4b:e2:0a:7c:8c:a7:f7:62:
82:58:d4:0a:fe:3a:5a:46:75:2f:1e:71:6e:71:fe:d5:b2:44:
ab:3f:6f:57:82:89:89:68:3a:0a:85:be:70:75:11:ce:03:10:
1b:8f:3b:d2:71:0e:8f:54:de:75:57:f4:d1:29:54:a6:04:d7:
db:bb:96:48:4c:5a:5f:54:33:4b:2b:37:f2:fa:6c:fd:bb:58:
94:08:7e:c5:75:4a:3f:f7:f0:0b:db:03:4d:1d:6b:b9:ff:86:
d7:df:6a:89:c0:ce:4c:4f:a4:6c:f2:40:92:89:9b:46:db:9a:
79:c1:e9:51:63:10:d4:3a:0e:ea:db:66:c9:3f:e7:d4:01:4a:
c1:29:ee:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlMbvutxuOHE+CbSkhwREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1
ZDhiNjIwHhcNMjQwMTAyMDAzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODI4MzhiNjdjZTZmZDY1NGI5YjdjMjk2NjEzM2ExZTRkOGQxYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOIjEJscMCQ5T7Q9TN9XwZMyXY9p
9/cRMs/aX7gu1K/Bsadm6DkIwQ2onYsCxWHIVynmFDyWegnYnxh2mlqJgoTcg0/Q
ZA6rJq5k9fFFF5PLL29c5rvULXK/m0y4/V1CHWjHxxCqxPvtymERbCN12ED164uZ
Rcwc9v4Gmvw/CEKhemocAhivmtHUVCYC1HNa20lQ6g0qUS2okGfIgCONvFjtUj3a
P8vN2b9Eb9iMGotmMwSBQmP3wbkU4XSI0R/2HzR99xnQc2szM2vqnZZNO7in8yzO
moD/KHkSAjmpQSepGbLvsu752qs7hdTvZFxP/03c2JZbCc2XkRprDWUh5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgoOLZ85v1lS5t8KWYTOh5NjRyIMB8GA1UdIwQY
MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt
ZDlhZWJlNDNlZjQyLzEvS0NnNHRuem1fV1ZMbTN3cFpoTTZIazJOSElnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy
LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHSSMA0G
CSqGSIb3DQEBCwUAA4IBAQACoLdg449e8mwEZXutkV3bwS21U1rQKqFw5UgoZC3o
S8HtgCB8VOHZL4WM3lR97/3f4ZvFmQaLR5elNg/Dxr5MQ2Pctz+CquXdA1GmtKf9
/klvZvlKqAPxhB19IDRVL7EVxpy6361l4XIH98xmQheivYqZPX06S+IKfIyn92KC
WNQK/jpaRnUvHnFucf7VskSrP29XgomJaDoKhb5wdRHOAxAbjzvScQ6PVN51V/TR
KVSmBNfbu5ZITFpfVDNLKzfy+mz9u1iUCH7FdUo/9/AL2wNNHWu5/4bX32qJwM5M
T6Rs8kCSiZtG25p5welRYxDUOg7q22bJP+fUAUrBKe7C
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:28:04 2024 by rpki-client on console-fra.rpki-client.org