Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/q7I8QprBnAaRxizx69SzqdJ3-wA.roa
File: q7I8QprBnAaRxizx69SzqdJ3-wA.roa (raw, json)
Hash identifier: Tqfk1EwVXycEcdPzP6sw9B+UnCCwVu0qP9RpYtugm2A=
Subject key identifier: AB:B2:3C:42:9A:C1:9C:06:91:C6:2C:F1:EB:D4:B3:A9:D2:77:FB:00
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 018D401B0EAE623DC39EF1B8A3C6BC6AD959
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/q7I8QprBnAaRxizx69SzqdJ3-wA.roa
Signing time: Thu 25 Jan 2024 10:12:11 +0000
ROA not before: Thu 25 Jan 2024 10:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201012
IP address blocks: 176.114.124.0/24 maxlen: 24
176.114.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:1b:0e:ae:62:3d:c3:9e:f1:b8:a3:c6:bc:6a:d9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jan 25 10:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abb23c429ac19c0691c62cf1ebd4b3a9d277fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:63:d2:da:d6:4b:67:74:67:47:83:a7:1c:
69:36:e8:68:e8:9a:b3:ad:92:de:0a:3b:fc:84:6f:
47:1b:c3:a7:ea:a9:23:6d:68:02:67:be:d7:08:70:
4b:02:bd:33:4c:93:0f:89:48:c0:ec:77:4a:e0:e7:
f9:8c:53:78:f2:f6:0c:95:ba:6a:66:51:6c:c3:a6:
d8:02:8d:3b:ff:90:76:f3:33:5c:00:90:8f:cd:70:
cb:52:75:84:04:e3:09:cd:17:d1:8f:2c:33:43:bc:
96:3e:f2:a5:ca:8d:e1:49:17:d0:3b:29:ef:5b:30:
20:5b:fa:b1:fb:2a:43:97:f1:6a:37:6d:21:81:22:
1b:de:81:fc:27:9b:2a:5d:28:6d:1d:8e:d7:4e:cf:
d9:bb:14:1d:81:01:75:59:7e:0c:32:c2:92:28:2c:
fa:d3:bf:3c:c4:48:bb:ad:4f:e3:10:72:a4:17:b6:
dd:ff:b3:21:f0:e0:b9:91:4e:ec:4a:de:e6:42:63:
60:01:04:4b:38:29:57:71:a8:f7:45:25:9c:90:02:
5f:5c:69:4b:88:b7:9a:b7:54:cf:ae:6e:09:29:1f:
52:0e:d4:b9:01:20:81:df:57:3a:e5:08:3c:fe:e9:
56:f5:95:ca:9b:51:95:1c:ed:6a:ca:29:d2:4b:e8:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:3C:42:9A:C1:9C:06:91:C6:2C:F1:EB:D4:B3:A9:D2:77:FB:00
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/q7I8QprBnAaRxizx69SzqdJ3-wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:f7:3e:f4:a6:c1:71:b0:5b:0b:e6:43:e4:84:40:af:ba:35:
7e:ad:e3:9d:8d:fe:df:fa:67:51:8a:d0:13:91:05:25:f3:5d:
ee:38:e7:06:a2:4c:84:14:e9:fc:c3:25:f7:89:3e:84:c0:f9:
c3:4c:d3:2b:4b:9b:00:1b:c1:1f:5e:82:c6:bd:54:7c:c0:c3:
c4:2c:2c:87:dc:19:36:15:66:0f:b8:1e:24:fb:7e:17:72:6a:
3b:73:2e:f9:5a:a7:d5:da:b7:f8:12:33:8b:4a:3f:bd:44:87:
15:18:01:da:c6:83:87:ea:42:cc:d2:8e:5d:27:e2:37:a4:82:
86:ca:27:0a:9e:da:77:c3:cb:77:3f:2e:93:62:29:bc:dc:fd:
c9:37:4e:86:a4:1f:97:35:6d:38:3e:95:e9:96:f3:39:5b:25:
e1:82:9e:b0:ac:24:95:bc:22:1a:ef:28:85:d9:16:e9:1c:9f:
5c:a3:12:22:b9:e7:49:a6:6f:52:ab:af:b2:94:f6:4e:b4:36:
2f:a7:7f:e3:21:7f:39:a7:b2:ea:e9:ba:6e:0a:5d:ff:f3:88:
cb:2f:5e:e4:63:7e:58:b6:7e:99:b2:42:fa:52:98:2c:17:e3:
77:ea:84:93:65:1b:dc:cb:05:de:7a:d4:a5:23:93:ec:e4:f2:
9e:d1:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:16:59 2024 by rpki-client on console-ams.rpki-client.org