Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PvfzLS1LKlUyqv7l04lLOE4rTU.roa
File: 1-PvfzLS1LKlUyqv7l04lLOE4rTU.roa (raw, json)
Hash identifier: tpdhLlkkhm51q9YMiHcKzOz1rCyazpxyDisxBlIWRoI=
Subject key identifier: F8:FB:DF:CC:B4:B5:2C:A9:54:CA:AB:FB:97:4E:25:2C:E1:38:AD:35
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F81D4E8F42D4819EDFED0CB372E055A85
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PvfzLS1LKlUyqv7l04lLOE4rTU.roa
Signing time: Thu 16 May 2024 14:36:05 +0000
ROA not before: Thu 16 May 2024 14:36:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 176.56.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:d4:e8:f4:2d:48:19:ed:fe:d0:cb:37:2e:05:5a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 16 14:36:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8fbdfccb4b52ca954caabfb974e252ce138ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:76:ef:93:71:d2:6b:1b:0b:91:ff:4d:06:
5b:e5:f3:bd:3b:69:bd:0f:56:66:1c:f0:46:e9:89:
f3:01:35:41:4f:0d:03:e8:76:84:11:59:95:fb:db:
0f:b2:d4:e7:6f:b8:b9:21:40:4b:41:63:6b:38:fb:
a7:94:d8:17:e1:13:f4:19:58:dc:ec:7d:1a:0a:d1:
1b:0e:85:3a:97:da:11:14:d1:10:ba:ff:ac:d1:7e:
01:d8:eb:7f:7a:6a:8d:90:26:ad:a2:8c:8c:e8:48:
66:71:26:af:65:4f:e9:1e:0d:83:81:4d:45:d1:a6:
c2:0f:18:92:e0:d2:0a:80:12:69:ab:2a:52:d0:3b:
b4:88:a3:95:b6:d1:59:47:6c:34:79:93:b0:8f:05:
e7:86:51:e9:8e:68:62:42:f5:8a:0c:22:d1:cb:df:
5f:d8:a1:d4:ff:81:a2:99:e2:79:c1:06:d4:47:af:
d9:7b:03:70:e1:4e:07:6e:1a:4c:0f:71:c3:43:0c:
8a:66:79:52:f8:6d:dd:47:c9:05:da:16:7a:c3:0f:
c6:01:92:d0:12:8e:f4:81:7e:db:03:1b:29:17:67:
68:32:ef:9a:20:f3:54:a5:b1:56:11:18:1e:9e:7b:
49:0c:7c:05:52:84:96:50:6b:2b:2f:db:2d:c7:34:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:DF:CC:B4:B5:2C:A9:54:CA:AB:FB:97:4E:25:2C:E1:38:AD:35
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-PvfzLS1LKlUyqv7l04lLOE4rTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e2:3d:9c:80:4e:59:64:87:ea:49:09:d6:cd:74:4c:cf:9e:
fe:09:22:e4:0d:ac:d9:b3:e5:2c:54:6c:c3:94:64:d9:26:e8:
21:33:1c:fb:16:f7:41:f1:12:ca:81:ab:84:da:72:77:db:20:
d1:e5:70:98:ec:84:f6:76:0d:ec:d6:0e:8f:d4:4c:56:2d:a2:
f3:7c:ac:a3:e4:f6:d0:ed:72:57:82:db:56:c9:f9:e2:5c:d1:
a8:c4:91:df:9c:82:a0:b6:34:1e:d5:e4:89:d1:3d:24:ae:bd:
dd:55:4c:b1:0f:ca:51:1b:00:6e:27:bd:0e:02:52:c1:37:5a:
80:86:1f:4a:0f:a5:e7:74:27:d5:85:9a:94:96:fa:d0:1e:5f:
08:54:da:5e:37:8e:cf:bd:b1:55:68:68:e7:4d:b5:65:c5:2f:
fc:bd:1e:25:db:02:6a:94:b5:1c:fd:7f:c3:e0:99:98:08:14:
74:7f:fd:35:bc:9a:18:3b:f0:46:2b:4d:f4:a4:7b:f2:08:05:
9c:a6:76:c6:39:45:59:fd:04:84:8e:cb:d1:f9:61:75:65:4b:
e5:09:9d:98:8c:35:05:07:08:9f:35:25:e8:df:d1:93:8f:dc:
b6:cb:08:43:c5:f6:ca:2a:a1:25:65:b7:3e:29:03:39:d7:c3:
08:02:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:48 2024 by rpki-client on console-ams.rpki-client.org