Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/bez8CTOmfoy_WXzEkj5tLsUZ4Eo.roa
File: bez8CTOmfoy_WXzEkj5tLsUZ4Eo.roa (raw, json)
Hash identifier: s4ipbkjTCxCVmSNCZGW+jlJe1huzb3wcz+OURILjRUw=
Subject key identifier: 6D:EC:FC:09:33:A6:7E:8C:BF:59:7C:C4:92:3E:6D:2E:C5:19:E0:4A
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 018CC86F0921F2AF8DC615290990A525E187
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/bez8CTOmfoy_WXzEkj5tLsUZ4Eo.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59684
IP address blocks: 176.126.164.0/22 maxlen: 22
176.126.164.0/24 maxlen: 24
176.126.165.0/24 maxlen: 24
176.126.166.0/24 maxlen: 24
176.126.167.0/24 maxlen: 24
2001:67c:87c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:09:21:f2:af:8d:c6:15:29:09:90:a5:25:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6decfc0933a67e8cbf597cc4923e6d2ec519e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:f7:87:8e:2e:cf:23:6f:3f:3e:cc:cc:f0:
3a:34:56:82:6c:5f:40:52:25:d6:d1:72:6b:ad:6d:
56:1c:64:52:8d:e7:f8:22:a0:78:01:c6:f7:ec:55:
97:cc:58:e2:e5:53:c0:28:11:3a:7d:97:c6:22:55:
79:a8:e1:ba:03:36:08:21:65:1f:12:3c:15:5a:ef:
d4:ab:7a:c5:d5:28:b8:5b:30:b9:b6:63:64:05:a2:
d1:96:fb:cc:d3:68:d7:b3:e3:d6:22:53:1b:46:95:
d8:4a:a8:a4:0b:1d:51:8b:3d:0b:47:83:07:6e:64:
96:c2:73:af:01:66:6f:ac:b4:8a:98:7f:69:f6:b4:
53:7c:11:7c:a3:d4:5a:29:9f:df:d4:6b:0c:2c:d4:
5d:ac:7b:07:08:7e:5d:c5:9b:c7:8d:42:a2:3a:8e:
5c:93:cb:42:a7:f1:db:fd:e6:17:69:9b:62:bd:9c:
f4:5f:08:0e:ed:1a:be:2c:2f:e9:6e:8d:2f:2d:83:
31:b4:c5:63:fd:96:43:06:b6:34:86:70:56:ec:13:
dc:a3:e5:60:6b:86:f7:62:b2:da:5a:58:52:ae:78:
77:2b:12:88:a9:45:2c:f7:78:4e:df:3d:5f:8e:de:
fc:40:6c:8d:ca:80:a0:f5:11:49:5f:fd:b6:ef:70:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:FC:09:33:A6:7E:8C:BF:59:7C:C4:92:3E:6D:2E:C5:19:E0:4A
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/bez8CTOmfoy_WXzEkj5tLsUZ4Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.164.0/22
IPv6:
2001:67c:87c::/48
Signature Algorithm: sha256WithRSAEncryption
aa:be:b8:2b:b1:f6:50:26:c8:e9:57:5d:f6:3a:e9:65:8a:cb:
16:c7:31:81:d5:7f:40:96:fd:73:d4:33:d6:c4:1a:d4:c5:88:
80:86:eb:d7:88:13:fb:fe:54:eb:4b:80:2d:a0:5d:62:c3:0c:
ae:68:07:1c:6d:02:8a:4c:ac:68:ed:54:82:9d:17:7a:c6:3a:
18:68:97:72:77:fc:b4:6f:08:e5:90:96:c7:8f:f7:d1:c7:e3:
44:ed:d3:d2:66:84:af:ee:aa:77:7d:c7:4c:31:15:12:71:0c:
f0:cb:6c:a9:00:a9:c6:6b:fe:36:45:5c:71:3a:0d:0b:f4:af:
f3:7d:2c:b2:71:ab:59:4b:56:8e:27:a2:5f:e1:0c:5b:61:1c:
d4:f0:60:fb:54:dc:7c:ee:b4:d6:cf:24:93:92:ed:fc:35:b9:
07:af:fd:61:6d:79:a9:c2:b9:d1:6c:fd:22:da:a8:18:c6:81:
22:fa:0b:b7:22:e6:78:7d:79:16:93:b7:b1:6f:9a:f4:a5:37:
01:ea:80:69:77:89:e5:67:6e:d7:00:3c:72:a8:ba:75:cb:02:
db:31:3e:b3:f2:9c:80:1d:94:2f:60:54:e4:34:1f:c0:e7:3b:
95:aa:02:42:49:c3:74:ec:03:bf:8f:75:fa:d7:0e:fd:12:cb:
3b:a0:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:53 2024 by rpki-client on console-ams.rpki-client.org