Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/xlxoaNVJ0IxWtpSTZ-ABY7DeWCs.roa
File: xlxoaNVJ0IxWtpSTZ-ABY7DeWCs.roa (raw, json)
Hash identifier: 3XNDtWiYQET8YIWdePetS6IRFsm4kaYv4AJAf18WVJs=
Subject key identifier: C6:5C:68:68:D5:49:D0:8C:56:B6:94:93:67:E0:01:63:B0:DE:58:2B
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 018CC26D61703217283312477B6AAC33636E
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/xlxoaNVJ0IxWtpSTZ-ABY7DeWCs.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21219
IP address blocks: 176.105.168.0/21 maxlen: 21
176.105.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:70:32:17:28:33:12:47:7b:6a:ac:33:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c65c6868d549d08c56b6949367e00163b0de582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:d8:21:33:0f:a3:50:cc:ff:ce:9c:d4:27:
de:9a:e1:f9:33:e9:bd:cd:45:d5:9e:34:2b:5d:25:
aa:5b:a2:fa:93:80:26:ac:66:4a:d2:46:e1:50:b0:
e7:11:d8:88:4b:59:d4:4c:3f:e5:bd:14:c3:15:00:
45:ff:6d:e1:bf:12:14:c2:c5:56:5c:21:c2:a3:03:
c8:1e:05:b3:1b:58:e4:2b:70:03:9f:c3:8a:e1:54:
dd:92:b2:03:bd:ff:fe:05:a1:99:84:9f:bc:a4:ff:
c9:3e:db:f4:05:24:12:c2:4d:21:45:87:b8:8f:ef:
5b:94:a6:e1:08:a5:fa:8c:ab:62:ae:26:b0:e6:c8:
b6:84:f5:28:1f:4b:d8:54:08:09:b3:e6:69:b5:60:
bc:01:19:18:f3:c4:8f:75:b7:fe:82:25:7b:fd:7f:
40:f1:a4:f7:a7:4c:4d:15:37:20:ba:bc:d6:54:79:
2b:51:5c:0b:1a:c9:c8:d1:18:57:9f:a0:36:3c:fe:
3b:bd:6c:9a:6a:4d:9d:76:a0:21:16:ed:86:dd:3e:
2a:ba:f4:da:dd:be:87:30:d7:34:06:50:8f:00:9d:
ac:d8:b5:81:f3:ba:4a:e4:f0:5c:a3:1f:13:0a:24:
45:7d:2f:70:cb:f2:b5:43:09:22:22:79:63:9f:60:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:68:68:D5:49:D0:8C:56:B6:94:93:67:E0:01:63:B0:DE:58:2B
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/xlxoaNVJ0IxWtpSTZ-ABY7DeWCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.168.0-176.105.183.255
Signature Algorithm: sha256WithRSAEncryption
3b:40:d5:0a:30:a6:e7:73:31:d8:cc:76:d9:da:ef:65:78:96:
67:38:ea:88:d9:c4:2b:d2:e9:ca:d7:1f:dc:da:2c:f5:fa:d9:
86:6e:d2:97:12:c5:11:35:50:e8:81:9f:e7:cc:17:ec:24:fb:
b6:b7:f3:13:77:55:71:bb:b8:a0:bf:54:4d:ee:e3:98:c0:d6:
30:71:0b:d8:1c:87:0c:bc:71:96:4a:01:c7:ee:21:de:b3:2c:
99:37:87:3d:1e:4e:59:24:d2:09:be:2c:9f:60:33:ef:5f:c5:
ee:08:a4:ac:50:95:a5:f4:32:a8:96:67:d8:85:11:f0:11:35:
36:95:d1:a0:16:00:21:6c:0c:35:73:f9:51:d9:71:d4:77:0f:
b5:cc:4a:5e:c9:80:14:cf:18:7b:7c:99:13:fa:60:69:38:56:
00:51:ea:80:ee:df:36:fc:ef:02:74:9b:de:a0:db:72:77:c3:
87:bd:7a:f9:f7:f9:1b:df:fc:a7:ee:be:f3:ac:ae:f3:1c:c0:
a1:f8:83:f5:f0:d8:69:1d:d3:6d:f0:5b:e2:92:88:98:05:c9:
6e:dd:6d:b7:86:69:6d:28:8a:b1:47:13:87:b6:08:56:ff:b1:
c9:d9:e4:19:4e:be:62:7d:31:7f:78:80:83:84:14:85:8a:12:
db:79:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:59 2024 by rpki-client on console-ams.rpki-client.org