Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/7ixAgRqnLpSyAhhhU9bsA7kqyAg.roa
File: 7ixAgRqnLpSyAhhhU9bsA7kqyAg.roa (raw, json)
Hash identifier: QbsEJ6tLNw1KYEE/yMUrZ7tBwTLoMXavYapKyM+Va5I=
Subject key identifier: EE:2C:40:81:1A:A7:2E:94:B2:02:18:61:53:D6:EC:03:B9:2A:C8:08
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 018D8529F3FCD7C16B6F4C2FD90A781E067C
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/7ixAgRqnLpSyAhhhU9bsA7kqyAg.roa
Signing time: Wed 07 Feb 2024 20:02:15 +0000
ROA not before: Wed 07 Feb 2024 20:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50767
IP address blocks: 176.104.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:29:f3:fc:d7:c1:6b:6f:4c:2f:d9:0a:78:1e:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Feb 7 20:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee2c40811aa72e94b202186153d6ec03b92ac808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:68:1b:a5:ce:53:52:35:1b:79:e2:e5:0e:
0f:d8:10:41:d4:8e:96:fa:f0:da:58:56:4d:6c:4b:
2f:fe:db:0e:4b:18:d8:b7:26:b9:44:ba:d4:e7:c9:
45:de:81:c0:af:d6:39:9e:72:30:f5:39:81:88:f2:
bf:8e:5d:f6:5e:e2:89:e5:d0:9f:19:2b:d4:4c:aa:
7c:e4:71:b8:33:cd:18:3f:7a:26:bb:59:8d:1e:73:
9b:bc:f5:a0:ec:97:ac:f7:0f:d1:fd:7d:ba:85:fa:
e6:86:80:b6:f3:0e:83:7d:a3:e9:32:b7:53:82:1a:
f5:03:41:b9:94:da:62:4b:f4:d4:92:11:17:0c:8e:
72:8b:63:c7:17:00:27:09:e5:02:2a:8b:08:a4:6d:
38:58:84:94:20:d1:a4:e7:66:34:3c:a5:bc:47:d0:
16:79:25:58:84:95:c4:79:f9:12:b3:de:6f:e6:2a:
39:87:96:88:c0:23:7c:fe:10:a4:6b:ba:f4:1b:6b:
6d:3d:0a:1e:07:82:95:ac:70:61:f2:ff:f7:f6:ca:
76:da:76:a8:bc:20:1c:aa:42:72:44:a0:00:18:1c:
90:02:9c:a9:f5:3e:0a:58:73:0e:1d:c8:ce:86:dd:
d8:5e:5e:10:13:a0:6c:27:40:b0:8b:a8:e0:b0:54:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:40:81:1A:A7:2E:94:B2:02:18:61:53:D6:EC:03:B9:2A:C8:08
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/7ixAgRqnLpSyAhhhU9bsA7kqyAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.176.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:7f:16:01:4e:b9:b4:ef:06:7a:6a:43:7c:22:6f:0b:11:36:
4a:b3:23:2e:1a:d8:0c:66:cf:d7:99:36:b4:0a:07:29:7a:c7:
c8:d0:5d:ae:c5:fd:b1:d7:a8:a7:68:5f:36:c1:a8:ea:3d:f6:
3f:2e:e4:99:d0:27:bd:06:f7:c5:89:fc:28:fb:67:fd:3a:60:
60:16:5d:13:02:19:e0:af:96:48:bc:db:30:44:36:90:67:2b:
33:c8:40:82:a7:c9:5f:f2:a5:83:2d:5d:b4:de:36:ca:75:4c:
c6:4d:dd:40:76:85:33:92:fe:03:d1:05:49:97:49:d1:7e:23:
8c:54:4e:ba:7c:96:a1:a6:10:f0:aa:58:bd:3c:f0:06:fd:27:
79:35:4f:74:cd:f3:06:da:79:e6:d9:5b:d8:35:a8:22:12:1f:
0d:d1:b9:14:23:d3:4d:20:a2:ac:dd:14:62:52:f9:2f:46:05:
56:d5:41:44:bc:74:50:eb:89:c1:ec:84:76:1d:3c:17:30:7a:
cf:8c:6f:41:fc:db:15:ec:86:d3:bc:2a:4b:c9:5f:46:8f:2a:
a7:b0:35:5e:d6:57:3c:a1:97:f3:08:e1:17:ea:aa:93:7a:5d:
e6:4f:14:24:95:aa:67:04:27:a6:33:f5:fe:cf:c2:1f:c4:9f:
54:78:38:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2FKfP818Frb0wv2Qp4HgZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNGIwNmFiZjA3ZWVhYWMxMWIyNTlhMDhmZTE3MWQ2NmJk
MjgzMGQwHhcNMjQwMjA3MjAwMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTJjNDA4MTFhYTcyZTk0YjIwMjE4NjE1M2Q2ZWMwM2I5MmFjODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBhoG6XOU1I1G3ni5Q4P2BBB1I6W
+vDaWFZNbEsv/tsOSxjYtya5RLrU58lF3oHAr9Y5nnIw9TmBiPK/jl32XuKJ5dCf
GSvUTKp85HG4M80YP3omu1mNHnObvPWg7Jes9w/R/X26hfrmhoC28w6DfaPpMrdT
ghr1A0G5lNpiS/TUkhEXDI5yi2PHFwAnCeUCKosIpG04WISUINGk52Y0PKW8R9AW
eSVYhJXEefkSs95v5io5h5aIwCN8/hCka7r0G2ttPQoeB4KVrHBh8v/39sp22nao
vCAcqkJyRKAAGByQApyp9T4KWHMOHcjOht3YXl4QE6BsJ0Cwi6jgsFQkiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4sQIEapy6UsgIYYVPW7AO5KsgIMB8GA1UdIwQY
MBaAFD5LBqvwfuqsEbJZoI/hcdZr0oMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0Zjct
NTMwMTc3YzAyZGNjLzEvN2l4QWdScW5McFN5QWhoaFU5YnNBN2txeUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0ZjctNTMwMTc3YzAyZGNj
LzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsGiwMA0G
CSqGSIb3DQEBCwUAA4IBAQCjfxYBTrm07wZ6akN8Im8LETZKsyMuGtgMZs/XmTa0
CgcpesfI0F2uxf2x16inaF82wajqPfY/LuSZ0Ce9BvfFifwo+2f9OmBgFl0TAhng
r5ZIvNswRDaQZyszyECCp8lf8qWDLV203jbKdUzGTd1AdoUzkv4D0QVJl0nRfiOM
VE66fJahphDwqli9PPAG/Sd5NU90zfMG2nnm2VvYNagiEh8N0bkUI9NNIKKs3RRi
UvkvRgVW1UFEvHRQ64nB7IR2HTwXMHrPjG9B/NsV7IbTvCpLyV9GjyqnsDVe1lc8
oZfzCOEX6qqTel3mTxQklapnBCemM/X+z8IfxJ9UeDhF
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:55:18 2024 by rpki-client on console-ams.rpki-client.org