Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/_Xb9_PmqVayfGVYFWF9LiHBxOho.roa
File: _Xb9_PmqVayfGVYFWF9LiHBxOho.roa (raw, json)
Hash identifier: rFvbstSl2qHAcxz7TocteOFlyKDRFjbyacLWolfz2MA=
Subject key identifier: FD:76:FD:FC:F9:AA:55:AC:9F:19:56:05:58:5F:4B:88:70:71:3A:1A
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 018CC64B8DD43C5BC2B5F1079CD5D032FC77
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/_Xb9_PmqVayfGVYFWF9LiHBxOho.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206325
IP address blocks: 178.157.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8d:d4:3c:5b:c2:b5:f1:07:9c:d5:d0:32:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd76fdfcf9aa55ac9f195605585f4b8870713a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:30:1e:24:e5:89:23:48:de:5a:e5:cf:2e:
6b:d7:75:f1:7a:a2:3d:83:58:fe:63:a1:a9:5f:8a:
d2:4a:1f:6e:fe:56:ea:91:42:0a:31:95:bf:cf:a0:
91:26:6d:89:a1:10:b8:2c:02:16:ab:50:e6:3c:43:
65:1b:cf:4f:a8:ed:d5:08:c0:a0:61:2f:e5:18:c8:
39:79:f0:41:79:38:27:fe:01:11:6c:88:82:f3:a0:
95:73:21:62:da:cd:f7:55:91:46:b9:13:c8:37:4f:
4b:32:c0:a6:d1:96:37:41:79:14:46:43:76:7c:30:
91:7c:55:a3:a3:1a:83:10:a2:ec:5d:13:e2:04:cd:
2d:a4:28:bf:94:2f:e0:db:5f:f6:65:0b:50:59:59:
86:68:5d:f7:37:5d:e1:49:0c:1c:7f:a9:63:82:4c:
24:81:e9:68:18:75:1b:c9:22:49:f9:0b:61:47:b0:
29:9c:d6:ba:9f:f0:b6:94:2b:8b:45:d1:d2:b5:73:
d0:da:f5:63:cf:15:70:c9:ca:7a:b5:8a:32:a1:3e:
ae:42:73:1a:5d:8f:b1:47:09:c8:80:1b:e3:d1:3e:
09:89:21:c2:96:dd:4c:c5:8a:04:9f:41:26:fd:29:
43:f7:1b:7a:ce:17:da:8a:a1:9d:6b:f9:f3:ed:47:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:FD:FC:F9:AA:55:AC:9F:19:56:05:58:5F:4B:88:70:71:3A:1A
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/_Xb9_PmqVayfGVYFWF9LiHBxOho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.1.0/24
Signature Algorithm: sha256WithRSAEncryption
75:73:91:6b:60:57:e1:8f:eb:8d:fb:6a:d8:cf:99:b9:f3:59:
93:15:4e:f9:06:d6:d9:51:92:41:e8:90:6e:c3:81:a7:b2:e6:
87:a5:94:12:7b:4d:98:a0:23:82:7a:c4:3e:50:46:e2:89:02:
ca:77:2c:61:5a:7a:07:c0:34:63:fc:0b:8b:38:e2:3e:d5:cf:
d7:d1:04:e8:49:64:6a:a2:ce:46:be:c3:74:3f:29:e9:73:7e:
76:7c:b6:93:35:9e:7d:d4:03:f3:d2:ee:bb:a7:64:4e:53:cd:
f1:3d:61:59:6e:33:9a:de:73:c0:b0:21:2f:71:60:37:3b:1a:
1c:b8:d4:53:d9:27:e7:42:82:a5:cb:7e:71:70:c3:d3:a5:4f:
0a:48:7d:92:8f:ba:d3:66:20:12:a5:61:14:01:41:66:30:ae:
5a:56:af:fc:29:36:2c:6f:3f:b3:db:92:7d:82:5d:f2:04:1d:
70:dc:87:33:67:6a:06:e2:01:9d:9c:e5:95:c5:de:ec:3b:89:
69:43:cf:ff:50:b4:f8:76:04:c9:b3:c8:fb:bd:37:b1:9e:c3:
c3:99:b5:7e:5a:97:98:07:7e:97:7c:5e:9c:87:41:2d:d1:ea:
ac:40:18:7b:81:10:1b:60:d3:75:4f:c4:1a:f0:05:cb:5a:b3:
29:6c:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:23:19 2024 by rpki-client on console-ams.rpki-client.org