Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa
File: 7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa (raw, json)
Hash identifier: bY0ACuZfN1E9zSxlVVfi47hMrlYVLdbmPVj7nq30shk=
Subject key identifier: EC:59:9B:80:8C:84:72:73:65:0A:D2:34:7B:87:50:A3:17:04:EA:03
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 018CC8DF631FC3836DC833EF913FFFE77DED
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa
Signing time: Tue 02 Jan 2024 06:32:12 +0000
ROA not before: Tue 02 Jan 2024 06:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 1.179.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:63:1f:c3:83:6d:c8:33:ef:91:3f:ff:e7:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jan 2 06:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec599b808c847273650ad2347b8750a31704ea03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:6e:92:25:34:d1:74:93:ce:b6:39:2c:96:
c1:04:e9:13:1e:43:fc:7e:f0:ff:a0:f5:24:fc:19:
76:2a:88:83:2f:6b:eb:9b:76:45:43:4e:56:aa:64:
9f:66:58:1c:04:6f:2b:04:b0:88:1d:d5:88:95:78:
9c:3d:aa:8b:1a:83:4a:d6:68:3a:d6:ca:f2:fe:37:
91:56:50:06:ba:c0:4b:5b:d7:93:71:15:06:8a:d8:
1e:18:41:a3:31:b2:45:9b:29:41:86:11:89:79:d7:
4d:ac:37:6b:2a:06:35:be:9c:70:e8:6c:c5:6e:34:
eb:c4:6e:5d:36:a5:fc:cb:9c:c5:bc:6e:c5:6d:ae:
3a:fe:2a:4f:24:fa:a5:5f:b7:4b:3c:66:af:a5:66:
37:97:e9:30:6b:76:3c:72:37:db:f9:02:b8:94:36:
35:02:73:be:f6:46:f7:20:d1:c3:1d:ba:b8:84:71:
c2:60:6c:3f:21:a0:b2:3f:03:7c:09:72:e7:5f:1a:
6e:f4:2e:da:5c:c1:f0:f7:4c:8d:5e:d7:f8:b6:02:
6d:b8:78:76:18:5e:d6:d7:0d:a4:33:18:6a:69:38:
85:79:f7:8e:88:ee:ed:73:ff:34:47:1d:89:5b:66:
dd:4f:f3:33:f2:94:a9:51:f0:2a:f0:94:81:b1:37:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:9B:80:8C:84:72:73:65:0A:D2:34:7B:87:50:A3:17:04:EA:03
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.112.0/20
Signature Algorithm: sha256WithRSAEncryption
35:3a:8a:82:81:67:5b:07:08:58:99:7f:d9:21:3c:41:72:bd:
71:6e:6e:33:c9:5f:20:8c:54:e4:9f:e5:37:16:6e:07:6f:74:
6d:c4:cc:b2:c8:4f:b3:f7:80:ca:5a:af:29:d7:4b:ba:25:8a:
7d:07:1b:e4:61:72:a6:c6:9d:63:00:dd:18:65:18:4b:10:9e:
08:5e:69:7e:3c:d3:5f:4b:0d:b8:f8:9e:93:36:33:f7:7b:d9:
b8:ff:1a:28:78:43:75:80:84:ad:f5:8c:6a:6b:0d:76:61:08:
7e:3b:ea:7d:19:c1:5a:df:d4:90:fb:79:62:a7:aa:fe:f4:ae:
8e:7b:60:bc:af:ad:9e:5a:5c:f3:09:fb:e7:be:de:a1:69:e9:
f6:8d:ff:5e:36:1a:60:95:81:e4:92:62:83:b3:28:b2:a3:c6:
15:c5:24:4d:8f:7d:fe:c7:81:df:e4:e1:83:4d:9b:72:30:3d:
14:4b:40:62:a2:ff:49:6c:d3:5a:36:da:7e:d3:36:2e:a2:f6:
11:e8:3a:c4:fb:33:e8:d9:7d:51:30:1d:5e:28:39:02:e1:85:
91:89:50:86:b6:d9:26:00:9a:5c:25:b1:70:ee:c2:e7:ba:7d:
6d:fa:a5:2c:a9:57:30:ee:90:89:b8:56:0b:da:22:ea:fa:a4:
36:f4:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:07:56 2024 by rpki-client on console-ams.rpki-client.org