Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Fozqy-C4hz_jCh3p1UJQPRp9e_s.roa
File: Fozqy-C4hz_jCh3p1UJQPRp9e_s.roa (raw, json)
Hash identifier: jzJVPgEC6vPmWJ1D/eYRMRCPnnLTwJM4RYVwA97we0s=
Subject key identifier: 16:8C:EA:CB:E0:B8:87:3F:E3:0A:1D:E9:D5:42:50:3D:1A:7D:7B:FB
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF77AA69A8B930F69318C5EF13E10
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Fozqy-C4hz_jCh3p1UJQPRp9e_s.roa
Signing time: Tue 02 Jan 2024 04:30:30 +0000
ROA not before: Tue 02 Jan 2024 04:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206595
IP address blocks: 176.235.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f7:7a:a6:9a:8b:93:0f:69:31:8c:5e:f1:3e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168ceacbe0b8873fe30a1de9d542503d1a7d7bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:64:28:81:ac:b9:f2:0c:0f:1f:6a:4f:8a:
78:8a:58:fd:5e:c6:2c:b2:68:96:90:8f:80:b6:32:
ac:50:f6:98:ec:e9:9c:06:10:e8:b9:3d:ce:1a:10:
4c:5c:87:dd:20:46:e7:ee:2e:57:04:d0:ff:a5:85:
ba:e8:6b:8d:67:5a:53:8a:2b:3b:3e:1c:ee:cd:65:
36:93:28:7c:87:d6:21:07:88:63:a7:8e:23:d6:11:
07:fb:ae:9b:4a:15:17:93:25:ab:4e:a4:56:fb:f6:
83:2b:31:8f:c3:9f:aa:06:d2:84:ae:3d:36:6b:59:
bb:25:3f:7b:1c:15:ea:8c:b0:31:b0:bc:6b:bd:9b:
05:3f:d5:6c:dd:34:1f:e7:e3:b6:0a:77:32:0f:3e:
84:74:71:94:b0:b8:68:e6:9a:f3:85:fe:2f:fa:72:
db:5e:51:35:4b:1e:2a:e0:8d:20:6b:f1:79:b9:10:
a3:9a:3f:62:53:c0:4f:88:3a:cd:9d:15:d7:d4:55:
71:e6:82:8d:6d:dd:a1:1c:e8:10:61:c3:e7:7b:06:
20:06:ce:25:2d:54:b6:f8:47:51:c7:3f:b7:71:eb:
e4:d4:c0:f9:59:21:85:18:05:eb:9c:e3:b0:c1:fc:
f0:46:58:df:c3:2d:f9:e1:da:d4:fe:eb:56:86:5b:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:EA:CB:E0:B8:87:3F:E3:0A:1D:E9:D5:42:50:3D:1A:7D:7B:FB
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Fozqy-C4hz_jCh3p1UJQPRp9e_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.235.96.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2e:59:39:ba:e1:3d:d5:b8:1d:6c:ea:20:c4:06:2f:72:63:
71:92:29:de:2b:5c:36:b0:65:00:46:52:03:c5:d6:08:06:3d:
c1:bc:68:81:75:69:ac:f4:21:0c:2b:e0:f3:93:d6:73:4b:c7:
08:86:bf:01:89:03:00:a6:14:3f:1c:d4:f2:38:07:0e:d2:f8:
e6:db:7c:83:1f:f9:51:da:0e:09:fe:42:97:bc:20:92:ac:20:
e2:db:f4:94:f9:33:93:d1:25:79:cb:bc:48:7c:c3:d6:1c:de:
be:67:fa:bc:63:1a:e0:0b:ba:b2:e6:ea:35:19:58:05:da:25:
30:b9:ac:7f:37:c7:1e:98:6d:73:4a:30:a5:4b:77:52:f6:c6:
c2:5b:81:5f:9c:41:d3:4a:ea:7b:f5:3b:76:f3:75:91:e4:54:
9f:99:6e:3f:52:9a:30:92:09:03:20:db:bb:5a:a6:aa:f4:53:
16:63:77:07:ed:2f:e2:8a:7a:57:ec:1d:3a:c1:72:e3:3e:85:
e2:c8:32:d2:ab:54:3e:87:f8:47:0e:b3:58:7a:d2:9b:45:59:
00:d9:c3:79:c7:bd:35:3a:ef:1e:88:57:41:c4:87:be:13:3a:
5b:c6:43:62:ed:ed:ab:ce:be:e6:de:dc:36:0b:72:f7:fa:d8:
58:0c:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:23:13 2024 by rpki-client on console-ams.rpki-client.org