Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qdrOz-q0GkC7jHvX0tqYZSyr0o.roa
File: 4qdrOz-q0GkC7jHvX0tqYZSyr0o.roa (raw, json)
Hash identifier: psoHXco49BtfgBbE2PRbR49B2IQau5O0tKW+IjAn8Lg=
Subject key identifier: E2:A7:6B:3B:3F:AA:D0:69:02:EE:31:EF:5F:4B:6A:61:94:B2:AF:4A
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF7EA3CA9F36CD19D964FB12BE757
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qdrOz-q0GkC7jHvX0tqYZSyr0o.roa
Signing time: Tue 02 Jan 2024 04:30:30 +0000
ROA not before: Tue 02 Jan 2024 04:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208880
IP address blocks: 176.236.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f7:ea:3c:a9:f3:6c:d1:9d:96:4f:b1:2b:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a76b3b3faad06902ee31ef5f4b6a6194b2af4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:e2:9d:1e:19:1f:e0:6c:b0:3c:11:3f:59:
7d:26:b2:2d:b0:d9:9a:2f:24:b7:26:2f:a3:78:dc:
6d:6b:4d:13:e0:ae:94:af:e5:5b:ee:a5:07:0b:0a:
61:db:d8:42:8c:70:e4:38:c2:e2:a8:28:2e:22:3c:
5d:7e:29:1d:f2:43:8b:92:b4:69:f3:47:9d:31:6b:
d7:16:79:fd:19:d8:4a:d1:0c:09:1f:68:a0:9b:e3:
4e:02:dd:e3:53:9a:76:09:5c:40:f3:ea:fe:01:44:
35:12:bb:d0:c1:86:72:42:7d:4a:b0:67:b2:31:06:
e9:85:35:4c:91:0b:88:81:f8:3c:54:1e:04:47:0b:
80:7f:33:f9:81:49:93:a8:71:bd:69:76:db:f4:d6:
4b:00:8d:13:e5:c6:9f:61:12:7b:c0:6c:5b:b2:93:
b2:83:96:91:83:5d:8c:74:16:7b:5d:13:83:50:06:
77:17:cb:3d:1f:97:20:a9:43:b6:ea:08:3a:a4:b5:
cb:dd:89:c3:06:d6:1b:7e:15:c2:b6:d5:be:27:6e:
e3:bd:d2:cd:ba:73:29:a3:85:de:6e:d4:ab:61:c6:
52:56:70:32:8f:b4:98:cc:38:a1:e2:a9:4a:af:c6:
ce:45:aa:35:82:49:c2:63:37:01:2b:30:fc:77:4a:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:6B:3B:3F:AA:D0:69:02:EE:31:EF:5F:4B:6A:61:94:B2:AF:4A
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qdrOz-q0GkC7jHvX0tqYZSyr0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.245.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fc:5a:29:a8:e1:b9:46:5c:ec:e3:80:d2:3b:05:f1:db:e3:
6c:9c:ea:16:11:82:6e:44:c7:88:6a:c5:a5:b7:15:3c:26:ee:
d5:7e:2d:26:9c:aa:48:2b:66:f0:2c:14:64:10:03:ef:d5:1e:
34:3c:22:7e:ff:ba:11:02:65:6e:d9:18:b5:ee:55:e6:a3:55:
d8:f4:98:7c:ce:c8:75:a3:b5:65:91:36:96:16:9f:33:00:6a:
8c:ed:d7:12:2e:2a:34:88:dc:4e:f3:da:07:81:b3:5a:ab:ab:
60:4c:ec:5d:75:8d:20:da:17:08:75:1e:ff:49:fd:8c:69:75:
72:60:9a:8c:85:2e:99:c0:1c:87:54:5c:d2:c3:5c:a6:64:9c:
1d:ab:f3:98:ac:28:2b:48:1a:6d:7c:35:00:87:35:62:d4:e8:
36:02:58:e1:0f:bd:d3:8d:f6:a1:0c:34:16:4b:18:8c:4f:b1:
a4:7d:87:d0:2c:e5:f6:56:8a:cc:11:43:f0:58:54:3c:4f:71:
6e:1c:a3:f9:41:fb:70:8e:7f:ba:cb:ef:1f:5b:ab:6b:75:ab:
51:89:ca:8f:9b:bf:5f:6c:b4:29:52:dd:9f:81:2d:0d:1e:fa:
cf:41:d7:b1:01:a5:b7:75:7c:77:92:c0:84:08:54:64:2f:7a:
81:f5:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:29:05 2024 by rpki-client on console-fra.rpki-client.org