Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/b7uA8D8D-ikPeMGQhnz1YTQ3Fpk.roa
File: b7uA8D8D-ikPeMGQhnz1YTQ3Fpk.roa (raw, json)
Hash identifier: BHi6qqx7QzasRGGtvWY5t6ZCrpQJsOM7XcTyXMYLTyc=
Subject key identifier: 6F:BB:80:F0:3F:03:FA:29:0F:78:C1:90:86:7C:F5:61:34:37:16:99
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 01900BAF4651190D91428AD67BEE79E559C9
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/b7uA8D8D-ikPeMGQhnz1YTQ3Fpk.roa
Signing time: Wed 12 Jun 2024 09:02:34 +0000
ROA not before: Wed 12 Jun 2024 09:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198363
IP address blocks: 176.103.248.0/21 maxlen: 21
176.103.248.0/24 maxlen: 24
176.103.249.0/24 maxlen: 24
176.103.250.0/24 maxlen: 24
176.103.251.0/24 maxlen: 24
176.103.252.0/24 maxlen: 24
176.103.253.0/24 maxlen: 24
176.103.254.0/24 maxlen: 24
176.103.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:af:46:51:19:0d:91:42:8a:d6:7b:ee:79:e5:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Jun 12 09:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fbb80f03f03fa290f78c190867cf56134371699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:aa:27:2a:cf:94:df:d9:81:78:52:be:8a:
ce:4b:02:de:81:75:4a:18:ee:11:0a:7a:5b:7c:aa:
c8:9a:65:af:42:1c:3e:92:1f:dc:1d:ca:05:71:8a:
d9:eb:5a:3b:dd:14:84:9b:b7:8a:0b:26:7c:31:bd:
97:74:32:15:1a:6d:9f:09:7c:f5:7a:1b:72:5d:10:
83:93:be:7a:2a:b5:36:fb:f8:0e:4d:82:07:f0:44:
e8:5b:90:18:cb:9c:e4:2a:59:5c:2f:c1:3e:93:b5:
90:f6:55:2d:d1:56:b3:97:16:34:e4:a2:94:a6:eb:
9a:a7:8a:54:fd:d8:c1:32:9a:43:57:b3:5b:66:52:
5e:a1:6a:37:96:9e:31:41:4d:b7:cc:b3:5e:c4:5d:
6b:b9:31:ae:db:a0:c3:b0:74:3d:12:2b:e1:8b:0a:
e2:4f:84:6b:3a:49:05:62:76:99:fd:40:e2:80:46:
b6:ef:ec:b7:3a:e9:0e:4a:72:7f:6d:38:ed:99:49:
81:db:90:e7:9f:13:fe:67:50:30:e8:8f:0f:2a:65:
25:99:5b:c9:1e:1b:cf:2a:d7:f8:8e:aa:0c:25:2b:
6d:25:cf:e2:da:cc:a2:0b:80:0e:c2:24:40:d7:05:
dd:1d:ac:c9:19:2b:33:d9:6a:15:f9:40:f0:6f:7a:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:80:F0:3F:03:FA:29:0F:78:C1:90:86:7C:F5:61:34:37:16:99
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/b7uA8D8D-ikPeMGQhnz1YTQ3Fpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.248.0/21
Signature Algorithm: sha256WithRSAEncryption
86:4a:b5:d8:75:e5:57:02:1e:af:79:cc:70:6c:4e:dc:52:60:
7c:2e:aa:7a:c6:62:73:ef:f2:99:1c:6b:f8:25:9c:0b:a1:d3:
ab:09:c5:96:f4:89:3e:ff:1a:d2:da:4a:09:4a:f9:2b:29:36:
00:64:a6:40:bf:1d:3f:42:8b:c5:e3:49:f8:8c:2d:01:dd:48:
cd:bf:fc:f7:ca:1e:5f:cb:60:d3:74:56:3d:c0:89:da:b6:d6:
95:82:a6:b7:6c:b1:fd:dc:c7:2e:c6:77:b6:52:a4:5c:db:98:
74:82:c7:1c:bc:42:2c:8f:35:85:f8:24:5e:38:8b:08:3c:f0:
48:ba:ef:a9:8a:40:42:4c:12:9e:2e:df:bc:f1:06:2d:da:ee:
ea:3e:0e:3b:d7:3d:d0:28:25:a2:1b:0e:60:d4:86:f6:70:d1:
6b:06:9f:d8:d0:18:79:b4:1e:61:eb:4e:d1:2d:e9:cb:5a:71:
70:2d:71:e0:80:16:c3:91:e5:19:1a:71:ba:b6:d8:c0:cd:1d:
d0:55:76:da:a1:fe:a3:64:f1:4c:46:96:e5:6c:9d:7f:fc:eb:
ef:3b:70:cd:09:f5:e4:11:48:4f:de:be:63:94:15:83:17:0a:
6e:70:20:d6:9f:16:76:51:e4:7f:45:7c:3d:f7:0b:33:2a:81:
56:6d:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:08 2024 by rpki-client on console-fra.rpki-client.org