Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/E7rR__Ji32s7-yAFmN39317tH4Q.roa
File: E7rR__Ji32s7-yAFmN39317tH4Q.roa (raw, json)
Hash identifier: vJL21SutcozufhqCe67GR+XIkE9PgPLWN2JSPrs/V28=
Subject key identifier: 13:BA:D1:FF:F2:62:DF:6B:3B:FB:20:05:98:DD:FD:DF:5E:ED:1F:84
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 018CC2DB3500F7743FE8139401D84CDC3313
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/E7rR__Ji32s7-yAFmN39317tH4Q.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208905
IP address blocks: 176.106.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:35:00:f7:74:3f:e8:13:94:01:d8:4c:dc:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13bad1fff262df6b3bfb200598ddfddf5eed1f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:04:02:6e:0d:21:77:3b:4f:a3:05:b7:91:
89:9b:ce:ff:81:b1:1f:96:cc:9f:78:8f:7b:d7:98:
b0:b9:82:cb:2d:26:71:e5:19:46:42:eb:7b:48:c1:
a4:07:8f:b9:82:35:60:82:11:ee:ca:33:a4:6f:0a:
ac:88:81:aa:16:ad:9b:f1:eb:a8:0b:cd:00:78:5b:
c7:fc:a4:24:c3:54:b0:39:9b:03:a6:59:96:0b:b4:
2c:e0:50:2d:96:5e:1f:09:01:a6:c7:eb:03:d1:b5:
53:ba:5d:e9:4f:40:e0:c2:24:c7:fd:08:f1:02:90:
0d:3b:06:fe:62:12:7f:64:c0:36:f8:08:67:ab:12:
f0:04:f4:bd:af:b1:62:c0:3c:be:59:d6:13:9a:18:
a1:f9:f8:37:b0:6f:63:0a:2b:92:9c:36:4a:a2:fe:
03:33:f6:63:41:33:c2:de:40:9f:05:8c:cf:59:7a:
af:f1:d2:12:60:c8:b1:50:44:f9:0b:b2:d5:48:11:
23:10:ea:ba:b7:69:b7:87:56:7a:cd:b6:4f:bb:1d:
03:ca:84:73:76:6b:cf:47:88:81:66:a6:20:5d:ca:
02:8f:c6:51:9e:27:a3:24:ea:2e:c1:48:4d:07:c9:
3e:86:17:3d:a2:a5:c8:f7:18:35:60:4e:24:ff:27:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:D1:FF:F2:62:DF:6B:3B:FB:20:05:98:DD:FD:DF:5E:ED:1F:84
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/E7rR__Ji32s7-yAFmN39317tH4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.229.0/24
Signature Algorithm: sha256WithRSAEncryption
98:aa:61:92:cb:a5:52:a5:f2:5a:17:62:48:c8:bf:29:30:5a:
11:01:f0:58:7b:ad:27:eb:09:1d:16:de:93:32:c3:67:48:ea:
f9:05:ed:11:50:ab:e0:93:40:37:15:05:35:20:12:85:ed:ef:
26:c9:52:9c:92:38:fe:66:e4:06:19:3f:88:2f:32:2e:1e:2a:
5d:53:38:60:02:45:c1:d7:86:c2:77:b6:97:17:a2:4f:e8:4d:
0d:68:16:6b:5e:8f:ff:23:f5:cd:e8:97:13:39:6f:e5:b1:c0:
a5:07:03:ff:22:4c:ae:11:3c:d9:19:02:da:10:3a:35:b3:28:
ab:82:c7:28:2e:c5:70:bd:ba:8d:3b:7c:36:59:0d:10:b9:ec:
d0:2c:a4:25:53:a6:81:ca:c6:97:d8:38:dc:5a:e5:7a:c5:f1:
0c:d5:03:df:7f:6a:6f:8c:7c:ef:b0:6a:33:a2:f6:40:75:de:
f0:fa:31:3f:cd:80:e5:d7:8c:b2:a8:1b:30:e6:71:c8:de:e1:
6c:aa:ff:93:46:81:6a:bd:fb:4e:77:81:66:63:13:42:9a:e6:
14:79:0f:3a:29:a5:b7:fa:96:4c:6a:5f:02:48:e0:85:ed:66:
ea:11:a8:b9:80:ac:72:cd:0e:3f:ad:52:ef:c8:cf:08:85:da:
a8:17:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:27:52 2024 by rpki-client on console-fra.rpki-client.org