Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/_oFgKnKG6rlkEnhDwrnF72tENn4.roa
File: _oFgKnKG6rlkEnhDwrnF72tENn4.roa (raw, json)
Hash identifier: GUmpKx2ceeL1MK1GSocjlwFbL9I6RK7GVkcF084YvxU=
Subject key identifier: FE:81:60:2A:72:86:EA:B9:64:12:78:43:C2:B9:C5:EF:6B:44:36:7E
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 018CC3B67FE53E31E5E88C27FEB8783C37E3
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/_oFgKnKG6rlkEnhDwrnF72tENn4.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57534
IP address blocks: 176.101.224.0/20 maxlen: 20
176.101.224.0/21 maxlen: 21
176.101.224.0/19 maxlen: 19
176.101.232.0/21 maxlen: 21
176.101.240.0/21 maxlen: 21
176.101.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7f:e5:3e:31:e5:e8:8c:27:fe:b8:78:3c:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe81602a7286eab964127843c2b9c5ef6b44367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:4e:d0:d4:e2:02:39:91:5d:d5:8f:19:2e:
c4:28:f9:cd:95:e6:cd:75:d5:e7:20:f4:e6:7e:7f:
5a:a3:70:a1:2e:59:f1:8f:8d:3c:83:ab:73:0f:a0:
36:8c:77:96:13:af:96:b9:5c:53:d4:e0:1f:1c:de:
cb:82:f1:3c:0d:8a:0c:28:fd:f0:2f:4a:e2:74:4b:
bd:85:88:a0:12:b9:2b:2b:81:b7:77:0c:8b:47:93:
2e:02:e7:f5:6f:2f:5c:b0:73:c4:34:a9:ca:27:3b:
e6:5d:7e:4e:22:b5:8d:a1:8b:92:30:20:40:4a:78:
48:35:27:e9:7d:12:da:99:c5:bd:64:50:40:5d:b5:
4a:fc:52:d1:9c:47:62:41:1c:d3:c9:6f:fc:d4:83:
ae:7f:5b:9d:a9:58:c6:fa:45:cb:c4:60:ce:3c:1b:
2f:da:7a:46:9d:71:30:e6:b1:bc:67:9f:bd:83:87:
3f:15:76:df:d4:c1:01:4a:d4:d1:31:a1:71:41:53:
d2:9c:1a:f9:79:39:4d:19:7d:eb:3f:0b:be:d2:0f:
a7:c9:33:ab:4b:32:3d:f9:5b:42:ba:a3:9a:11:4f:
7b:ed:8d:38:5e:8b:2e:a7:ec:54:f0:28:19:e7:b4:
77:03:b1:33:67:8c:93:1f:62:c5:6d:af:44:ca:6a:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:60:2A:72:86:EA:B9:64:12:78:43:C2:B9:C5:EF:6B:44:36:7E
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/_oFgKnKG6rlkEnhDwrnF72tENn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.224.0/19
Signature Algorithm: sha256WithRSAEncryption
77:69:3a:ed:17:17:cb:33:d4:5c:e1:90:d9:78:1a:1f:a0:87:
ed:bf:42:dd:a9:cc:64:9a:d6:86:49:2c:07:d3:2b:10:8d:0f:
4d:89:32:f7:5c:fa:8e:c4:8e:58:6c:d5:3c:18:84:a0:00:47:
73:69:d0:5e:02:22:84:c6:33:96:34:4a:d1:11:a7:fd:17:53:
d4:93:df:ac:a5:8b:80:31:a1:07:bc:1a:50:78:34:b5:3d:67:
bf:ff:50:71:0a:82:90:36:8f:0a:93:40:f5:4d:e7:42:31:4f:
cc:1a:f7:b0:9d:e3:7f:f4:28:50:96:ee:37:dd:8e:e3:06:d1:
d8:dd:a6:15:78:56:2d:97:91:a8:ad:37:92:4a:38:46:d9:ec:
6b:7b:b0:01:be:91:ca:c8:6c:ad:b3:d9:91:fb:56:f8:87:fa:
66:be:af:44:62:a3:4c:48:8c:c6:8c:48:88:5b:db:e0:1e:73:
b1:60:b6:db:42:d2:bc:29:b4:fd:13:ea:f5:e0:c5:57:0b:f2:
e5:70:2a:40:f1:1b:d1:59:e8:12:b4:ac:44:5c:57:db:7c:ef:
df:f2:be:04:81:ea:7b:e4:d3:cb:fa:15:d6:e9:a4:9a:19:b0:
22:fa:6f:56:c7:7d:bc:46:06:c1:6d:8a:b3:fe:dc:12:3b:eb:
d0:9e:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:08:54 2024 by rpki-client on console-ams.rpki-client.org