Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/yz75cZO2GDeEicvf-t9RijzfzsI.roa
File: yz75cZO2GDeEicvf-t9RijzfzsI.roa (raw, json)
Hash identifier: 8HETo+iUA07BzFPm8gkqRAcDovDHrF75qlrwxn9YRhY=
Subject key identifier: CB:3E:F9:71:93:B6:18:37:84:89:CB:DF:FA:DF:51:8A:3C:DF:CE:C2
Certificate issuer: /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial: 018CC2DB1FF33170231E673DD9C8EE68BA48
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/yz75cZO2GDeEicvf-t9RijzfzsI.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57659
IP address blocks: 176.104.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1f:f3:31:70:23:1e:67:3d:d9:c8:ee:68:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb3ef97193b618378489cbdffadf518a3cdfcec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:06:a0:9d:6d:2e:61:60:54:98:f4:48:dc:
f2:dd:8b:4f:fc:24:78:53:0d:5f:f8:63:45:c6:fb:
5d:d5:b3:69:ab:f3:60:23:26:fd:16:e3:f1:d4:16:
71:d9:fe:66:37:80:24:28:6e:99:3e:79:4e:b6:fd:
2c:ff:2e:32:e4:ec:c0:34:52:a9:dc:c5:d0:cc:a2:
c9:a0:7e:0d:eb:e9:b4:af:48:37:01:8b:14:6e:30:
6a:dc:91:5d:a5:18:36:ea:f7:c5:45:79:1d:ee:29:
f7:27:af:54:7c:84:77:cb:91:4c:3e:7b:02:e7:58:
28:44:bc:e8:df:a0:e3:90:a0:ed:62:b7:64:27:db:
91:d7:cd:86:7d:d9:5c:68:ee:79:fe:30:2b:87:43:
7d:c4:67:33:f3:e4:43:ad:ee:19:88:c4:cc:25:30:
71:7b:de:29:9b:bf:a3:41:33:91:44:8b:a3:4a:0a:
9c:23:4f:4c:83:e9:92:ba:be:ae:2a:75:67:c0:8a:
ef:4f:ef:d2:6c:13:ee:97:73:fe:3a:85:e4:a2:77:
f9:ff:fc:45:44:d9:f4:79:a0:87:b4:dc:aa:22:b0:
34:d5:51:bd:0b:e5:53:62:d6:12:9d:51:b1:8f:4c:
63:79:da:bc:6c:43:51:1b:cc:43:40:ab:c0:36:ce:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:F9:71:93:B6:18:37:84:89:CB:DF:FA:DF:51:8A:3C:DF:CE:C2
X509v3 Authority Key Identifier:
keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/yz75cZO2GDeEicvf-t9RijzfzsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.168.0/21
Signature Algorithm: sha256WithRSAEncryption
49:10:14:45:14:b5:16:75:ae:eb:6f:93:b8:6e:09:8b:44:07:
2a:3b:b8:8c:b2:77:cd:73:c4:df:66:f4:18:7d:a3:52:8a:da:
af:e4:ec:c2:41:cb:61:7a:78:57:25:e8:89:a1:ee:86:10:4b:
3b:c7:f8:77:38:da:c6:c5:4e:71:54:e1:60:86:19:df:a4:b1:
c6:e7:33:8c:df:32:51:90:1b:75:89:35:63:eb:aa:3f:50:02:
16:b7:b6:23:c0:72:e8:1d:c8:ba:14:ef:5b:d1:fc:cf:e2:eb:
c8:03:83:1a:64:06:b8:63:9f:d4:a1:cc:20:f7:99:00:67:ad:
d8:95:18:65:24:1a:88:b2:61:b4:c8:5f:65:b1:38:93:c7:b3:
ce:67:65:1a:29:4d:ac:ff:c8:b2:4b:0b:8d:0f:36:77:a6:6e:
1b:53:7a:37:da:06:d5:9a:04:f4:12:66:a0:61:84:8a:3c:5b:
49:ad:c0:95:6a:8a:f2:c0:15:fe:e6:5f:f4:8e:70:41:32:3d:
51:0d:1b:6c:a7:a2:8e:b3:9d:2d:58:67:df:10:8c:1b:c0:b9:
b4:f4:2b:08:c1:a9:5f:19:76:e1:22:31:7a:42:ae:0b:95:e2:
ef:a5:4c:9a:4c:b2:fc:19:91:dc:9e:59:22:9b:d1:f9:b0:d9:
b3:94:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:08:04 2024 by rpki-client on console-ams.rpki-client.org