Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASxn6Sl0V8pzES_yKF376M-Nk2o.roa
File: ASxn6Sl0V8pzES_yKF376M-Nk2o.roa (raw, json)
Hash identifier: KpH0uMHzEQAtrqyTCwfbiuetcO6p81icUsI26H1qyVE=
Subject key identifier: 01:2C:67:E9:29:74:57:CA:73:11:2F:F2:28:5D:FB:E8:CF:8D:93:6A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275B7036F0E9AD2BD5F3FF2F58E5A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASxn6Sl0V8pzES_yKF376M-Nk2o.roa
Signing time: Thu 02 Jan 2025 17:54:15 +0000
ROA not before: Thu 02 Jan 2025 17:54:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 176.223.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5b:70:36:f0:e9:ad:2b:d5:f3:ff:2f:58:e5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=012c67e9297457ca73112ff2285dfbe8cf8d936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:d0:cc:90:b0:35:a2:2c:dc:75:e8:ac:18:
02:dc:34:81:5c:de:93:8f:2f:19:99:a6:5d:81:88:
4d:90:62:ca:e3:1b:7e:94:d2:d0:93:1a:11:7e:e0:
7a:fe:28:b5:92:15:ef:43:74:97:0f:66:d9:ef:1a:
3f:f9:23:30:15:4b:ca:54:dd:e1:c7:f0:4a:be:99:
aa:b0:16:5c:22:36:28:be:d9:78:81:cf:0c:9d:60:
4c:f2:e2:55:74:f8:b3:78:6c:16:7c:0f:66:1a:f2:
ca:af:ef:fb:c8:ae:0d:65:c7:8c:9c:0a:80:6c:c7:
9e:74:87:f7:ff:ec:65:89:35:a7:33:bd:9f:2a:65:
ce:63:fb:cb:d4:fc:8d:db:5a:90:fc:d4:91:d6:69:
40:a9:cc:28:b4:3d:07:a7:3f:69:29:42:e6:aa:ce:
d1:ed:cf:30:68:80:7c:4a:af:ca:fa:1d:42:d1:37:
cb:0f:c1:da:7b:72:12:cf:e1:5d:4c:f8:da:7f:0e:
9b:7d:a8:2f:60:fc:15:80:64:8a:25:73:1e:90:17:
14:11:ff:0c:d2:9b:e8:9f:cd:b2:72:4c:a2:dd:4b:
98:a7:db:da:3f:49:22:db:5e:30:1b:14:6f:93:34:
f6:b5:51:65:04:f6:af:4f:2c:6b:d3:ed:15:8d:a4:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:67:E9:29:74:57:CA:73:11:2F:F2:28:5D:FB:E8:CF:8D:93:6A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ASxn6Sl0V8pzES_yKF376M-Nk2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ce:49:68:00:3f:c7:b6:18:ec:6a:21:4a:80:0c:2b:df:39:
e7:35:4c:2b:a8:33:11:7a:17:12:48:e7:2d:2c:b3:1c:f3:f7:
0c:82:35:cb:66:c3:d6:43:f2:02:c6:e5:a4:80:b7:43:f9:2b:
76:9f:2b:6e:97:bf:1e:a6:75:32:c3:d0:67:fe:25:24:84:ef:
b7:61:88:e6:67:84:85:20:19:c9:28:cf:9f:5c:89:8d:87:1d:
78:5b:dd:63:dc:b9:aa:e6:cd:d7:1e:91:16:2e:cd:39:c9:34:
8f:9a:f2:11:d4:6b:22:33:51:40:f5:3b:6f:2a:91:b8:3c:14:
f6:96:c6:05:4f:22:21:ff:c3:37:8f:3a:07:99:ed:d3:15:0d:
c7:ed:0d:ad:ca:e7:26:a0:28:fe:48:d5:7b:12:03:71:fa:cb:
86:46:d6:6a:ff:05:69:df:ab:d1:3e:5b:cc:92:1c:1d:1a:eb:
af:02:a4:2f:c1:4c:8a:52:9f:09:97:d8:f9:15:79:38:27:28:
08:31:b8:86:36:c4:cf:cf:4c:58:33:f7:26:df:c9:7f:20:ce:
0a:75:1b:56:d8:4b:2c:70:f1:b1:0d:13:2f:7c:c8:ad:2b:d8:
77:88:ce:9c:94:a2:80:79:fe:10:ba:fc:34:ff:07:ef:52:48:
e1:db:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:53:41 2025 by rpki-client