Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/1-qNRld7MIEiSxGn0-oJoQLlkfZo.roa
File: 1-qNRld7MIEiSxGn0-oJoQLlkfZo.roa (raw, json)
Hash identifier: tS1ETdv7t5MXP4tP9SMFXCJevinE2ZuxgX9h7ADaFwM=
Subject key identifier: FA:A3:51:95:DE:CC:20:48:92:C4:69:F4:FA:82:68:40:B9:64:7D:9A
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 018CC50154B284D278B3B870E9320F8712C7
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/1-qNRld7MIEiSxGn0-oJoQLlkfZo.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201395
IP address blocks: 176.105.240.0/22 maxlen: 22
2a0d:cec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:b2:84:d2:78:b3:b8:70:e9:32:0f:87:12:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa35195decc204892c469f4fa826840b9647d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:8c:0c:6b:45:f1:04:58:d8:d4:be:86:1f:
01:96:a0:3d:54:9f:30:54:90:54:41:a2:0c:fa:28:
8d:46:4b:40:86:88:55:16:ed:8b:33:1d:97:95:26:
fc:3a:07:8b:a2:bf:a2:a6:dc:d3:d6:03:23:83:05:
4a:a7:62:4e:68:9c:1c:17:ad:3b:a6:94:a7:6f:6c:
77:30:5e:1a:43:79:d5:d0:11:12:7d:c2:25:1a:7a:
0f:4b:ef:5d:2a:52:f2:8d:62:94:bf:ba:d3:4a:d9:
91:88:6a:a3:6a:d0:fa:bf:36:84:35:1c:13:ac:83:
2a:f9:e8:ad:2e:7a:8c:ba:14:70:b1:c0:b6:f3:fa:
38:f2:00:fe:93:05:56:b9:4e:3f:29:c4:27:67:b8:
95:99:74:9c:31:39:ef:9c:79:62:f0:ca:f0:f1:d4:
64:8c:a5:15:46:5e:f3:0a:b6:78:2f:a7:e4:e8:e8:
96:cd:ca:09:23:ea:20:3e:f8:ae:2d:11:90:33:eb:
e1:d8:25:68:fd:fe:b3:10:c2:b2:7b:f7:75:67:44:
b6:11:6e:00:bf:28:98:ff:c2:89:81:e5:d9:9d:22:
27:ce:67:11:93:0a:10:86:58:0c:ba:a6:83:f7:b3:
79:6a:50:e9:5c:50:fc:51:08:7c:ec:9a:2d:42:2a:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:51:95:DE:CC:20:48:92:C4:69:F4:FA:82:68:40:B9:64:7D:9A
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/1-qNRld7MIEiSxGn0-oJoQLlkfZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.240.0/22
IPv6:
2a0d:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
29:f2:11:89:84:2e:9d:49:8f:ee:00:f4:a8:1e:61:28:c2:a9:
c2:39:0a:77:be:06:c8:b6:e0:bd:f5:06:f8:78:91:b5:b3:df:
cd:22:48:42:4b:d4:3a:02:f3:3a:e6:c0:81:5c:3f:94:eb:2b:
f8:e2:9a:9b:c3:f4:b4:a6:3e:4e:19:59:f0:c2:d9:31:d4:c7:
4a:0d:73:67:fa:a2:f0:bb:45:d1:64:f7:5f:f0:c9:ef:e2:f8:
94:0e:c0:d6:fe:d7:b2:4c:8f:2b:94:c9:62:0d:57:74:14:24:
7b:57:a1:99:37:58:f9:c1:03:9e:b9:a5:d6:d7:8e:c7:2d:53:
fa:a0:b5:1f:a5:67:e4:3e:ae:7b:f0:6f:3c:34:de:69:35:60:
24:f7:1a:cd:73:57:ee:21:57:cb:04:b1:3c:d5:e3:20:73:c1:
61:21:83:38:c1:e2:fd:fa:c0:19:52:65:f9:3b:f2:a0:21:1a:
aa:55:02:26:88:41:5f:41:95:7a:69:a7:6e:32:2f:50:22:51:
50:76:37:5f:ab:2f:74:10:c9:9c:4b:b8:fa:d5:45:14:fd:31:
46:97:ee:b8:e2:5d:76:14:7b:70:e9:7e:d8:7d:4c:04:ed:b4:
46:1f:ba:c7:36:0f:e6:ac:c6:0a:68:60:ca:39:b8:f6:bf:0d:
e0:21:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:50:33 2024 by rpki-client on console-ams.rpki-client.org