Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/dSX7rGWdAAT9EPBpG8ax9Cmo8Yg.roa
File: dSX7rGWdAAT9EPBpG8ax9Cmo8Yg.roa (raw, json)
Hash identifier: hBVYCVGt396MW6sUN+nmes9f1qXcMcKs5Z3YI0ZpwLo=
Subject key identifier: 75:25:FB:AC:65:9D:00:04:FD:10:F0:69:1B:C6:B1:F4:29:A8:F1:88
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC4248FF788850573DE3F1604A4E2FFFE
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/dSX7rGWdAAT9EPBpG8ax9Cmo8Yg.roa
Signing time: Mon 01 Jan 2024 08:29:39 +0000
ROA not before: Mon 01 Jan 2024 08:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47479
IP address blocks: 178.254.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:8f:f7:88:85:05:73:de:3f:16:04:a4:e2:ff:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7525fbac659d0004fd10f0691bc6b1f429a8f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:e1:2c:75:0f:bb:29:e3:64:69:55:60:ab:
7f:34:29:46:e4:aa:a1:44:2f:ea:fe:1d:63:39:8a:
64:2b:23:34:63:64:3b:45:1a:20:47:22:d0:6c:0a:
a6:e9:c9:72:06:0f:e5:c5:2f:ff:65:e8:54:9d:09:
44:37:21:a9:9c:ef:8f:77:67:a7:71:5b:e1:9f:e2:
ca:1d:e0:10:ed:85:1d:d1:10:31:22:4b:36:02:f6:
38:25:ad:fd:df:f4:d6:38:c0:7c:50:96:f7:4c:e6:
25:c8:bb:a1:61:1c:fb:f4:5e:80:e7:73:77:3b:d3:
dc:1a:a6:6f:1e:a7:92:13:fc:99:be:c1:69:a9:e6:
46:88:b1:a4:d2:c1:7b:aa:39:2c:66:32:9b:c0:29:
ee:fb:2a:42:cc:f4:0a:3d:b3:69:2b:bc:5b:37:44:
30:2d:a3:3c:5e:aa:95:19:63:56:62:81:5c:41:77:
1c:0d:bb:5e:61:2b:89:1e:47:ad:36:fe:ec:4f:72:
cc:e5:49:6f:56:7b:09:f4:29:04:9a:b3:05:55:f6:
1b:0a:b7:28:d5:4e:a8:6b:43:63:29:26:00:5c:b2:
d1:5d:8c:35:56:50:00:f7:40:ee:44:21:7a:98:c5:
c9:28:f1:b3:7b:5e:72:c4:94:6b:0b:85:f0:98:00:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:FB:AC:65:9D:00:04:FD:10:F0:69:1B:C6:B1:F4:29:A8:F1:88
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/dSX7rGWdAAT9EPBpG8ax9Cmo8Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6f:d0:e4:c7:25:c2:51:48:a2:49:86:f2:ec:a7:fb:4b:b8:
23:40:69:39:e4:76:c9:98:b1:27:5c:f6:1e:14:93:3f:89:2d:
b3:c3:c8:ed:7b:2d:f4:2c:3a:c0:b1:9d:02:c5:57:2c:5f:5a:
74:d9:24:97:62:fc:88:fc:c0:fd:f4:ae:b9:c8:82:94:e1:02:
ca:a5:76:e1:c7:48:45:b2:6e:1b:66:ef:12:78:45:11:72:39:
d2:00:d5:bc:83:bc:53:f6:30:51:cc:3e:f7:4e:a7:98:c9:7b:
0d:ae:e5:4f:82:29:c9:36:1a:d3:09:3e:68:41:f6:4f:6b:8d:
f3:d4:f5:d4:b1:2b:ea:f7:d4:61:79:16:c4:e0:d4:33:e9:d9:
3d:f4:3d:42:32:97:ab:32:46:bc:46:ff:13:66:c4:53:62:54:
fa:1d:0c:04:25:4e:35:a1:52:00:e5:20:f7:04:fb:21:f2:da:
cb:10:e8:0e:3e:2f:12:2c:02:09:51:2e:ef:19:3e:f1:27:4e:
df:f1:83:6b:55:e0:64:37:31:03:c3:1f:36:d3:fb:62:24:5d:
ec:e6:a9:fd:0d:54:4a:26:6d:8d:fc:a1:c6:99:7d:06:0b:34:
40:ef:d1:f9:a9:8e:a8:44:57:5d:f2:f8:55:a5:fd:69:b1:d4:
ba:47:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:31 2024 by rpki-client on console-ams.rpki-client.org