Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/CxEFb_SPtgpusRu1Ni588FKYVYI.roa
File: CxEFb_SPtgpusRu1Ni588FKYVYI.roa (raw, json)
Hash identifier: o99ivj152j7CI87cLlEc6ECSNP80mBIqoqiIsYG8jy4=
Subject key identifier: 0B:11:05:6F:F4:8F:B6:0A:6E:B1:1B:B5:36:2E:7C:F0:52:98:55:82
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 018CCA2A635A1371E53D07E514FEEC87A3AD
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/CxEFb_SPtgpusRu1Ni588FKYVYI.roa
Signing time: Tue 02 Jan 2024 12:33:44 +0000
ROA not before: Tue 02 Jan 2024 12:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57067
IP address blocks: 176.62.144.0/21 maxlen: 21
176.62.144.0/24 maxlen: 24
176.62.145.0/24 maxlen: 24
176.62.149.0/24 maxlen: 24
176.62.150.0/24 maxlen: 24
176.62.146.0/24 maxlen: 24
176.62.151.0/24 maxlen: 24
176.62.147.0/24 maxlen: 24
176.62.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:63:5a:13:71:e5:3d:07:e5:14:fe:ec:87:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b11056ff48fb60a6eb11bb5362e7cf052985582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:a1:c9:90:31:c2:83:35:e9:82:e8:fb:ed:
ee:0a:7f:e3:1b:cf:a6:5b:ca:61:16:24:0c:8b:04:
3c:bf:df:34:6d:91:43:98:8d:5d:d8:cd:fc:f7:11:
11:d6:6e:af:f5:18:eb:cd:45:03:b3:29:fb:1a:97:
f1:7c:4b:96:b4:b2:45:d0:46:af:68:a5:a2:c6:e9:
76:4b:ff:cc:ce:d8:c8:2b:cb:61:c7:83:dc:63:b3:
ce:90:ba:46:b5:b4:2b:7a:dd:89:8f:5e:38:75:03:
28:90:ea:53:f5:80:af:55:10:d7:28:8c:f1:84:7b:
99:59:45:7a:0c:cb:b4:6e:91:d5:17:a2:eb:63:e4:
3e:68:a6:75:19:bc:cb:85:26:fb:1b:20:ae:a6:47:
36:41:5d:49:a5:d9:a5:55:57:3a:c9:8b:75:e2:78:
62:c9:06:a6:9b:3f:bb:09:8c:48:39:20:cb:ff:be:
d1:9f:33:78:9a:d3:f9:4b:8f:4d:e9:23:79:18:32:
81:a0:73:14:3c:1d:a8:eb:9c:07:03:58:cc:34:8b:
19:a3:13:02:2a:27:75:df:36:6b:67:4c:c1:79:03:
a6:a9:d9:8e:0f:78:2b:6b:7c:58:d1:40:a8:de:40:
27:a6:18:c9:a2:89:d8:90:55:00:2c:2e:2a:5d:64:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:05:6F:F4:8F:B6:0A:6E:B1:1B:B5:36:2E:7C:F0:52:98:55:82
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/CxEFb_SPtgpusRu1Ni588FKYVYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.144.0/21
Signature Algorithm: sha256WithRSAEncryption
67:c6:31:64:ad:82:e3:9f:c4:0d:6a:c2:2a:6b:fa:68:13:88:
c9:c5:07:a3:89:5e:10:f9:da:77:3f:f1:e7:7b:d1:72:96:7f:
35:e3:4d:f2:47:b9:89:c3:2a:4e:2a:d1:6a:b8:12:61:7a:40:
44:3f:2a:b0:ad:77:21:cd:e8:c3:02:68:b9:9e:55:1a:46:7a:
13:e3:d2:39:d1:1f:c3:25:11:52:cd:78:b9:0a:4c:d7:1e:9c:
7c:c6:dc:6d:7d:c4:f8:59:97:b9:ee:7b:f3:66:e5:a7:ea:23:
dc:c3:05:f3:f3:36:ef:40:db:38:6b:28:46:48:cf:88:3f:62:
b3:13:b0:09:5b:2e:62:37:96:48:84:64:c4:c2:11:e7:ec:1c:
0a:56:00:3b:47:39:50:6f:03:a0:52:1e:27:4c:6a:77:cc:a6:
60:b4:cf:3f:82:0d:60:6e:ae:ec:5c:78:e6:95:5c:d1:e0:68:
3e:61:9c:ff:8f:5a:8c:7e:7b:24:68:3c:35:be:d1:71:9b:fb:
61:e8:6d:b7:db:2b:ee:11:54:60:3d:36:50:58:31:f5:63:f7:
b8:a7:66:07:45:3d:2f:e5:43:2b:ad:dd:04:02:0e:b2:21:88:
f0:a9:5f:2a:ff:b2:92:d0:17:84:3c:bf:87:13:71:d3:2e:ed:
f2:35:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:10:51 2024 by rpki-client on console-fra.rpki-client.org