Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/0oq3SxKNI1mqJi8vbTad-UVSIZE.roa
File: 0oq3SxKNI1mqJi8vbTad-UVSIZE.roa (raw, json)
Hash identifier: bg7Wr9zQ3K0uC3ABfKmuWD1OvqXX5KgRZDzFsFwKgVQ=
Subject key identifier: D2:8A:B7:4B:12:8D:23:59:AA:26:2F:2F:6D:36:9D:F9:45:52:21:91
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 018CC7955A9FF6E63092548B2BD198998ED7
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/0oq3SxKNI1mqJi8vbTad-UVSIZE.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 176.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5a:9f:f6:e6:30:92:54:8b:2b:d1:98:99:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d28ab74b128d2359aa262f2f6d369df945522191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:b9:ea:33:ff:d9:60:ab:51:50:5c:54:b7:
ba:69:58:19:9e:bf:72:27:44:d5:ae:d5:3d:9e:23:
e3:b8:2e:c7:cd:0e:07:ff:a9:c2:69:b4:52:96:7d:
b0:33:2f:f2:30:be:c8:d6:c2:08:b3:88:53:59:de:
0c:2f:d4:e9:c3:96:ca:2a:d0:52:3c:9a:56:80:79:
d4:9e:62:34:77:02:b9:db:9a:0b:29:d5:b4:cf:9f:
f9:36:14:03:f8:0a:cb:a4:84:09:d8:86:b3:df:da:
00:58:26:b5:58:c4:57:2e:fe:4f:a7:a8:73:9f:d6:
f8:8f:f7:57:41:db:ce:ff:53:60:19:72:6c:da:69:
e3:75:26:4c:61:43:d5:c0:80:3f:0e:40:f2:7a:17:
3b:14:6f:f7:04:b3:c6:d1:0d:0e:cd:98:c1:55:4c:
72:60:1f:43:75:16:11:cc:08:a8:08:00:3b:cb:1d:
3a:09:50:00:94:79:b5:ab:5e:11:bb:1d:70:15:70:
c4:4f:2a:2c:d9:95:27:5b:27:cd:f1:51:d4:4e:8f:
f8:60:a7:51:47:3b:b7:ed:1e:7a:1a:ba:4e:ca:07:
de:13:09:74:fd:eb:31:ed:a5:08:e0:b6:1d:cf:6e:
f0:af:d3:d2:32:4d:fd:6f:f9:9e:30:be:29:aa:75:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:B7:4B:12:8D:23:59:AA:26:2F:2F:6D:36:9D:F9:45:52:21:91
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/0oq3SxKNI1mqJi8vbTad-UVSIZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d5:21:b5:24:a9:82:61:2a:d1:79:30:3f:0e:70:34:fe:50:
a9:5b:18:d0:15:61:ba:dc:00:9f:d2:16:a0:c5:0d:e8:52:0b:
8f:fa:1d:c6:d6:9e:d0:9d:00:f4:2d:fe:bb:3a:74:6a:a1:a7:
6f:33:c5:0b:4a:d0:53:ae:95:08:3d:41:34:94:54:e3:bf:c9:
75:3a:af:49:64:e2:f0:4d:90:e8:16:0c:68:ef:54:52:71:26:
69:0e:e8:a7:60:a7:98:24:3b:0b:ac:74:dd:fd:61:7e:85:f0:
6b:0c:4d:e7:fd:1a:e8:46:95:5b:43:cd:12:c0:d1:35:ad:51:
2c:b0:81:f3:6e:e1:c4:82:55:d1:92:93:6e:4b:dd:bc:29:d7:
ff:cd:92:ee:e8:37:5c:7d:15:07:d6:d8:76:2c:57:cc:6b:82:
b4:5b:eb:8c:74:32:0e:07:74:22:05:fd:66:6c:7d:20:5f:5c:
e6:2b:34:fc:16:00:b8:99:0c:fc:65:04:87:2d:37:f6:91:c8:
88:55:dd:4c:ee:ce:46:e1:3f:32:3e:67:ea:7f:b9:c6:a7:4d:
82:96:d7:cc:3d:c0:87:32:4b:dc:2e:31:a5:f9:5f:9b:eb:1d:
d1:0d:89:c5:89:a1:02:61:49:1e:2f:0c:60:68:5f:4e:a9:cc:
3a:b4:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:18:36 2024 by rpki-client on console-fra.rpki-client.org