Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/9p6dEhsYUCHd-0VPKwhG7sdIUug.roa
File: 9p6dEhsYUCHd-0VPKwhG7sdIUug.roa (raw, json)
Hash identifier: gx8CLpmL/UCLP5OwCdFzLvAGtZVjN8PsAcUHBh/HLrY=
Subject key identifier: F6:9E:9D:12:1B:18:50:21:DD:FB:45:4F:2B:08:46:EE:C7:48:52:E8
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 018CC3B6CD1B204958A644870D72DA556F6A
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/9p6dEhsYUCHd-0VPKwhG7sdIUug.roa
Signing time: Mon 01 Jan 2024 06:29:46 +0000
ROA not before: Mon 01 Jan 2024 06:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201299
IP address blocks: 176.52.182.0/24 maxlen: 24
176.52.183.0/24 maxlen: 24
176.52.180.0/22 maxlen: 22
176.52.181.0/24 maxlen: 24
2a07:cbc0::/29 maxlen: 42
2a07:cbc0:140::/42 maxlen: 42
2a07:cbc0:1c0::/42 maxlen: 42
2a07:cbc0:200::/42 maxlen: 42
2a07:cbc0:180::/42 maxlen: 42
2a07:cbc0:100::/42 maxlen: 42
2a07:cbc0:300::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cd:1b:20:49:58:a6:44:87:0d:72:da:55:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jan 1 06:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f69e9d121b185021ddfb454f2b0846eec74852e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:29:1f:01:a2:4c:6a:fa:4f:c8:a3:3b:4c:
c0:50:d6:c6:24:e9:a8:e6:8a:a8:a9:ac:5c:80:1f:
6c:50:31:03:30:5b:2a:b5:21:a2:da:3f:31:35:00:
77:85:f5:5c:90:80:fd:bd:12:63:6a:ca:28:02:c3:
b8:ee:fc:91:31:3b:4d:05:d7:f7:b3:ee:db:73:5e:
a7:14:cd:e2:ed:66:de:84:49:b4:62:51:90:ef:6b:
38:94:46:97:df:29:a2:0d:87:89:0c:07:18:53:4d:
49:56:2d:73:ff:cd:52:05:e4:55:55:a3:f9:75:6e:
47:64:36:0c:b9:c2:f0:f8:8a:47:cb:e8:2b:10:0c:
95:1d:9e:47:7b:89:94:a6:77:0e:19:08:f3:80:c0:
d5:e9:0d:9c:50:be:6b:88:2d:11:f9:84:d5:fb:9e:
da:4c:1d:a1:8f:f9:c8:1d:f4:3d:15:23:9e:dc:81:
a1:59:22:6c:02:68:f9:65:52:7c:02:c4:7d:29:6f:
fc:fa:8c:75:fc:ea:67:ac:94:b7:0f:1a:be:c1:94:
c5:dd:c3:64:7f:8f:1e:f6:b0:2a:bf:ac:74:53:51:
a1:be:0e:61:d9:fa:af:c2:cd:af:8f:ff:c8:fa:a2:
ab:db:17:6a:1b:bc:94:7e:d5:82:03:fb:7a:f5:cf:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:9D:12:1B:18:50:21:DD:FB:45:4F:2B:08:46:EE:C7:48:52:E8
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/9p6dEhsYUCHd-0VPKwhG7sdIUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.180.0/22
IPv6:
2a07:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
18:37:8e:23:83:6b:2e:d1:35:86:26:8f:a1:20:06:7a:37:54:
5d:51:2b:7e:26:d1:df:c2:99:d1:69:68:d3:8b:a7:dd:6b:c1:
6a:4b:dc:e2:ef:74:c9:14:42:e2:97:23:25:1f:a4:c3:23:de:
de:77:00:90:4b:21:0c:80:bd:dd:b2:c7:e4:0f:2a:4e:8d:c8:
c3:f1:c3:90:e1:05:76:b9:b8:c7:5d:46:4d:ba:11:2c:41:85:
c3:fe:54:a7:a8:c6:b1:da:5c:d0:eb:96:4b:44:ae:90:bd:7b:
1c:54:63:36:66:fd:7d:71:2f:34:8c:45:45:14:18:c9:ad:b7:
2a:87:69:ef:4f:9c:f6:dc:35:cd:0b:24:ef:82:68:54:3a:e2:
e4:fe:75:f2:08:9b:ac:ee:a6:1a:da:29:1b:db:26:80:24:d5:
a0:f9:7b:45:13:ed:59:df:a9:07:ce:3f:54:9b:35:b8:b5:a7:
0c:06:1b:90:47:e5:3d:f3:8d:21:e7:b2:b8:10:21:6b:b3:0b:
df:0c:63:e3:34:b7:4a:08:ca:44:60:c5:25:84:2c:58:08:bf:
d4:1b:a8:e6:d4:bc:5d:f9:18:b0:14:82:8b:1b:ab:58:36:22:
75:a7:b2:bf:0d:01:55:11:46:84:7a:0c:81:6b:25:5b:bf:26:
0e:82:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:28:42 2024 by rpki-client on console-fra.rpki-client.org