Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/pA0z25nHcDCUTWAVwR5JDxhnx9Y.roa
File: pA0z25nHcDCUTWAVwR5JDxhnx9Y.roa (raw, json)
Hash identifier: qp7xIkaql8+ujmGn1MldoQm22t0RwGfKf/huComP+nQ=
Subject key identifier: A4:0D:33:DB:99:C7:70:30:94:4D:60:15:C1:1E:49:0F:18:67:C7:D6
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 018CE9770556ACF38689E0B8AB65674EFB8C
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/pA0z25nHcDCUTWAVwR5JDxhnx9Y.roa
Signing time: Mon 08 Jan 2024 14:25:40 +0000
ROA not before: Mon 08 Jan 2024 14:25:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57440
IP address blocks: 83.172.172.0/22 maxlen: 24
83.172.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:77:05:56:ac:f3:86:89:e0:b8:ab:65:67:4e:fb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Jan 8 14:25:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a40d33db99c77030944d6015c11e490f1867c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:3f:0d:a4:af:62:0f:53:20:34:72:0f:7a:
cd:e7:d3:0f:66:cf:02:ff:5f:31:47:61:d9:cd:99:
e4:13:51:0b:42:7a:b0:02:e5:43:48:67:2f:86:49:
d7:cd:d5:c6:21:9d:4f:00:f1:60:d5:8d:7d:e8:be:
42:24:8e:9e:de:a1:f7:73:41:03:7d:63:92:bf:f2:
2a:d6:25:40:0c:85:b6:2f:8c:62:f3:32:2a:01:84:
be:30:1b:02:39:82:c6:a7:df:fb:e3:03:42:fb:c9:
8c:72:49:41:ec:7c:99:b9:ed:60:5f:2f:9f:a4:5e:
ea:ec:ae:fe:a0:f6:44:89:5d:fb:03:fe:5d:8a:18:
77:9d:e4:b2:66:68:18:d9:17:49:67:22:02:ba:54:
5e:c9:f4:83:c5:0a:bc:e8:e4:3c:5b:e1:1f:9d:4e:
12:4b:10:c2:de:c9:e9:c7:6a:bc:37:10:c4:51:ad:
9b:b6:28:0c:2a:39:f2:40:89:d7:f1:d2:51:d5:a4:
be:83:9b:4a:43:83:c3:1d:22:46:dc:5f:b1:e8:52:
3c:65:e5:42:5e:d2:32:75:6b:a8:6f:95:eb:6f:4a:
20:74:93:76:d4:62:26:ab:bf:af:78:f0:8d:5c:c7:
b4:9e:ae:2e:6a:76:51:85:2b:da:e7:d2:db:45:c3:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:33:DB:99:C7:70:30:94:4D:60:15:C1:1E:49:0F:18:67:C7:D6
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/pA0z25nHcDCUTWAVwR5JDxhnx9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.172.0-83.172.179.255
Signature Algorithm: sha256WithRSAEncryption
ae:20:0d:7e:b1:67:7d:b7:e3:f2:23:59:58:0e:81:4d:15:db:
0d:13:c0:b0:d9:58:96:b0:23:6c:33:83:da:c4:ab:98:2d:35:
e5:2a:28:24:33:00:e5:d4:ba:89:d3:3b:a5:0a:a5:68:9f:53:
24:a0:67:d8:d7:3a:1d:c7:f7:da:32:91:3f:ef:5d:7c:0e:8a:
e5:6c:13:07:c0:e3:13:f2:d6:cf:52:a9:22:2c:3f:a4:8e:64:
07:4d:de:bc:aa:02:64:1b:1c:83:10:18:4b:d5:0b:83:1a:67:
e0:c9:49:02:84:d4:fa:2b:b8:c2:81:91:1a:ce:b8:fb:1b:d5:
eb:27:43:6f:31:10:d7:87:62:67:c5:8a:62:d8:7f:28:15:17:
46:3e:79:0c:96:96:07:ae:42:35:c8:3a:b9:2e:13:45:00:da:
91:66:da:4f:d3:90:81:6a:a7:c4:aa:6d:ac:b0:10:47:4c:73:
ad:95:6e:8e:5d:59:07:c9:03:ec:af:78:4d:f0:ab:77:7a:a6:
a4:fb:dd:7c:7b:36:3b:ef:f4:64:61:ee:6d:75:90:5e:d6:91:
ce:12:1d:a7:47:a6:3f:b0:26:45:0b:70:64:ff:03:89:52:28:
40:90:43:0f:1e:b0:fb:dc:b9:27:02:33:c0:4d:8f:f0:7e:aa:
6a:7c:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:34 2024 by rpki-client on console-ams.rpki-client.org