Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Sq6sEIiRmrYxDOZhKm2KF87gLg.roa
File: 3Sq6sEIiRmrYxDOZhKm2KF87gLg.roa (raw, json)
Hash identifier: 131BRh0djrT51phqhbI6/mU4tS5cNo3yRwsOL38Y8nU=
Subject key identifier: DD:2A:BA:B0:42:22:46:6A:D8:C4:33:99:84:A9:B6:28:5F:3B:80:B8
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC424940CA5909D9E8DC15DFB50B630F2
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Sq6sEIiRmrYxDOZhKm2KF87gLg.roa
Signing time: Mon 01 Jan 2024 08:29:40 +0000
ROA not before: Mon 01 Jan 2024 08:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:94:0c:a5:90:9d:9e:8d:c1:5d:fb:50:b6:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd2abab04222466ad8c4339984a9b6285f3b80b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:be:04:0f:7d:92:ee:0a:80:c0:89:33:d2:
ea:33:64:62:c8:62:af:2b:42:1e:1a:f3:7b:fd:0e:
00:97:50:3d:f5:0b:fe:75:76:e2:8c:14:64:71:3d:
7f:1a:c2:e2:45:39:b4:db:3a:b0:43:67:91:19:1b:
87:8f:20:23:d8:df:12:71:b0:f7:77:7a:81:a2:5f:
e4:23:3b:6e:c9:c2:72:2e:ec:31:1d:9b:a5:3e:5f:
3d:a7:36:f8:20:bd:16:af:90:c8:cd:1d:00:0c:41:
b6:67:7d:b1:06:38:df:4d:99:a9:05:07:50:bb:ed:
02:ac:a9:a3:65:12:6e:b4:1c:bf:0d:04:e1:26:ba:
3b:f5:b0:36:65:bd:2a:9a:64:48:70:c4:7d:16:a6:
49:2b:59:ee:81:e0:6e:a4:44:2e:b4:f9:ab:fe:01:
c3:4b:95:da:13:24:c4:7c:2d:95:f0:b8:23:0a:ff:
6d:cf:ee:56:a9:97:5b:6d:f9:37:19:eb:71:1a:04:
b8:35:f4:b2:de:c8:34:9c:b0:0f:ea:14:07:b5:a1:
91:ad:8f:84:08:96:04:9f:6d:8b:e9:61:8e:0b:da:
bb:34:c8:ed:d4:1d:44:d7:44:2c:da:18:72:c8:24:
64:6f:84:f8:23:08:97:36:a4:e7:43:c9:ed:ac:a8:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:BA:B0:42:22:46:6A:D8:C4:33:99:84:A9:B6:28:5F:3B:80:B8
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Sq6sEIiRmrYxDOZhKm2KF87gLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7f:d4:a0:78:33:57:2a:b7:40:5b:0e:ae:8e:f7:29:c7:4b:
64:8a:d9:8e:1a:70:94:3d:5a:53:da:2d:bb:53:48:c1:09:39:
70:d1:54:05:1e:1a:17:b3:98:7b:14:d3:7d:66:7d:47:43:2c:
49:65:c4:60:11:41:e5:b0:b9:83:ea:05:02:88:63:e5:f7:44:
cb:a8:da:c1:52:c3:ed:c4:ed:8e:6c:9b:f2:c1:88:fc:0d:06:
4d:ee:55:2f:39:99:80:70:55:ed:5c:2e:ce:dc:3b:2b:41:1c:
8f:34:59:2d:89:a9:96:cb:e5:67:65:f3:c0:26:de:03:ec:4e:
43:ad:e2:31:84:f2:47:63:04:69:61:ec:8d:af:fc:64:47:14:
c8:28:6c:b0:e4:2e:fb:21:24:e2:15:54:36:57:60:07:5a:df:
fb:ae:23:ea:4d:b3:2d:6c:c7:6b:20:b1:5e:93:be:a0:db:c5:
08:55:ad:2c:09:31:41:01:33:13:db:91:d9:75:d8:0b:5b:b6:
42:de:8e:e8:67:dd:65:77:c1:ac:66:09:70:27:d2:0d:13:40:
bd:04:d5:25:93:87:7c:16:03:a5:48:eb:c9:8a:8b:ab:9a:32:
a0:09:b4:28:00:61:72:a1:f8:d1:78:eb:15:d6:86:7d:c7:a1:
71:33:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:31 2024 by rpki-client on console-ams.rpki-client.org