Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa
File: Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa (raw, json)
Hash identifier: qycc6NY4iGabp0/FSRuUPiHeZXM6GBcIVWL32nPvFtE=
Subject key identifier: 66:2B:B9:83:43:18:EA:81:5C:0A:02:80:DE:D1:02:6F:C0:27:03:56
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E9382C231E3C804FD109566A8E64A
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa
Signing time: Mon 01 Jan 2024 14:30:07 +0000
ROA not before: Mon 01 Jan 2024 14:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 176.43.129.0/24 maxlen: 24
176.43.128.0/24 maxlen: 24
176.43.132.0/24 maxlen: 24
176.43.131.0/24 maxlen: 24
176.43.130.0/24 maxlen: 24
176.43.133.0/24 maxlen: 24
176.43.135.0/24 maxlen: 24
176.43.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:93:82:c2:31:e3:c8:04:fd:10:95:66:a8:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662bb9834318ea815c0a0280ded1026fc0270356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:f3:4e:c0:f1:0e:1b:29:9b:84:dc:d2:bb:
85:a9:82:be:20:a8:62:e1:cb:e9:72:0f:e7:30:f4:
91:87:69:9c:93:22:71:39:08:3a:07:7b:c8:14:91:
c9:7a:06:25:fb:41:fa:53:dc:44:f3:62:f2:7e:b1:
6d:67:49:3c:5c:49:ae:3d:2b:7b:02:fa:c4:32:d8:
e0:ed:25:18:bb:76:5f:ec:fb:c4:51:b2:74:96:4f:
a2:f7:e8:de:b9:c5:cf:ee:7f:e8:dd:58:bb:48:fd:
4d:be:91:07:31:5e:ca:dd:f0:76:27:4a:c6:1e:82:
d8:15:ef:d4:95:84:0c:a0:2e:8a:2a:4d:27:9c:f9:
19:f3:a2:8d:77:c7:b2:23:40:50:3c:20:3d:35:a0:
7f:b7:99:c0:97:fa:3e:08:01:f3:c1:2d:dc:48:4c:
e3:65:5a:5c:c9:7c:6b:e6:be:43:74:59:7b:86:f8:
90:ca:fc:4c:ec:d1:d3:59:fc:3d:57:16:b0:c8:9d:
e4:7d:06:4d:27:2b:e5:19:1f:bb:14:3e:b8:c1:26:
e4:04:30:8a:70:f4:9c:24:fb:59:56:93:2c:da:21:
6b:2a:2c:99:e8:68:30:3a:e3:7b:ad:93:72:04:07:
a9:c2:bd:32:76:68:c8:e2:b5:ff:1e:a6:5a:63:f7:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:B9:83:43:18:EA:81:5C:0A:02:80:DE:D1:02:6F:C0:27:03:56
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.43.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:36:a1:c9:cd:64:22:18:e9:0a:bd:8f:70:4e:74:53:67:74:
88:de:f5:c1:a3:c1:e8:58:c2:b9:d4:34:de:3e:bb:e1:e9:ea:
28:21:77:61:ff:c2:1e:7a:f8:3a:4b:ec:34:4e:35:bf:6e:94:
f8:46:68:4a:3d:65:cb:16:95:78:eb:f0:ca:ea:2e:0f:15:8a:
1e:67:2c:58:78:f6:4e:51:ec:b8:cb:84:f7:13:cf:0a:07:8f:
8d:09:a4:c9:5a:eb:e0:10:5e:e6:60:1b:d8:50:56:7a:ae:b5:
b7:59:01:98:9a:87:76:38:38:7e:56:14:72:64:e3:b3:c9:67:
dc:dc:6a:ba:41:95:9f:82:e7:8e:bd:41:21:2f:a0:4c:2a:2c:
21:67:ba:eb:82:21:af:14:49:a0:5d:3e:31:d7:03:b8:02:f0:
73:ec:a6:52:eb:d3:12:24:09:92:be:1d:88:67:a3:bf:d5:9a:
73:77:bb:a6:11:fd:26:9b:ec:9d:ba:1a:5b:a9:16:32:05:91:
d0:a3:2e:75:17:d3:51:16:84:2c:aa:b9:d8:4f:e5:2c:cd:c7:
98:4b:96:d4:4e:5f:93:1c:2d:b0:80:87:48:1e:29:e6:1a:a4:
9f:f6:59:54:39:f0:b5:72:f2:28:12:04:48:c2:d8:9f:8e:7a:
ce:21:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:07:09 2024 by rpki-client on console-fra.rpki-client.org