Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/c4eDP5p4mFd2bTG986cLGbw9lsQ.roa
File: c4eDP5p4mFd2bTG986cLGbw9lsQ.roa (raw, json)
Hash identifier: 3w3acOcDsfF62mIl6WOONCKgLZOBDzx0DT0rVgzfxxM=
Subject key identifier: 73:87:83:3F:9A:78:98:57:76:6D:31:BD:F3:A7:0B:19:BC:3D:96:C4
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 018CC86F136BE9E55D9894E7C31E1DE1C96B
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/c4eDP5p4mFd2bTG986cLGbw9lsQ.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210876
IP address blocks: 217.67.161.0/24 maxlen: 24
217.67.162.0/23 maxlen: 24
217.67.166.0/23 maxlen: 23
217.67.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:13:6b:e9:e5:5d:98:94:e7:c3:1e:1d:e1:c9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7387833f9a789857766d31bdf3a70b19bc3d96c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:17:6d:3d:2b:17:95:ea:2a:ad:22:1b:b1:
53:d8:b3:01:fa:c9:7e:58:55:87:fa:5f:fe:db:af:
65:ef:e1:5c:c2:fa:48:57:a0:04:91:40:6e:94:80:
be:9d:75:ca:98:d9:81:12:a9:0b:06:cb:c1:f9:a0:
3b:93:92:f1:4e:e6:7b:50:c0:31:84:51:6c:e2:25:
9f:ce:be:f0:f3:bb:eb:7c:69:26:a4:f0:33:2d:8c:
fb:21:d4:23:ae:b0:84:c8:ff:3b:a6:b0:3d:91:bd:
86:4c:98:68:74:3d:97:6e:e1:92:6e:34:04:7a:8c:
e3:15:e3:d1:78:ce:e8:04:5a:66:68:8e:17:20:7d:
b1:1e:d6:ea:d7:9a:74:96:4a:c8:60:eb:89:e9:12:
9c:fa:0c:23:5a:f6:8b:b0:f2:72:ba:08:0b:f0:a1:
a4:fd:34:b7:68:1a:1a:1b:e1:19:9f:03:44:63:67:
a6:4b:61:a2:3a:22:cf:05:e8:87:aa:bd:9c:ce:7f:
f8:09:49:55:d9:8a:d9:01:67:03:d4:21:87:af:c1:
02:50:64:16:da:85:3d:1f:6c:41:07:22:d7:4d:16:
34:e3:d9:54:de:45:bd:b0:e8:51:f9:79:f0:9b:7c:
00:f4:16:31:67:67:68:e6:cc:bd:7c:02:81:57:c1:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:83:3F:9A:78:98:57:76:6D:31:BD:F3:A7:0B:19:BC:3D:96:C4
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/c4eDP5p4mFd2bTG986cLGbw9lsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.161.0-217.67.163.255
217.67.166.0-217.67.171.255
Signature Algorithm: sha256WithRSAEncryption
96:5b:54:98:00:5b:a8:a0:87:f6:38:cc:70:ef:ed:98:b3:83:
76:bf:b5:8a:41:69:5c:88:e0:f2:64:c6:2b:34:ae:7f:2b:fd:
6c:7c:7d:9c:0f:c4:2a:84:39:81:d1:8e:47:37:55:fe:0b:3c:
0d:53:ed:b4:10:54:cd:e9:7b:b2:82:a1:3f:39:bc:55:fa:17:
1e:fa:4f:8c:c4:4e:57:f8:d3:af:88:33:ad:8e:0f:77:ab:54:
82:dc:ec:63:32:07:7e:3c:8a:8b:52:0c:2d:1a:57:42:d0:0f:
96:a2:4e:32:93:7c:d4:0f:e9:e1:e1:1c:d7:97:6f:da:4f:76:
6b:8e:87:3d:21:8d:4a:02:e3:60:25:17:12:00:a4:bd:2e:1e:
11:e1:44:12:0e:8e:33:a4:05:0d:35:f4:96:c6:af:fb:5c:3b:
81:50:4c:3f:8f:f5:93:ff:97:98:3d:cd:28:9c:43:28:e9:4c:
a1:67:a3:97:00:b8:c4:09:63:26:6a:d0:3b:eb:f1:95:aa:f3:
a9:03:ea:50:f2:5c:c0:d0:5a:f0:ac:49:7d:e8:73:c1:7d:9f:
f9:34:42:da:e9:d6:cb:1d:df:ee:ce:80:c3:3f:75:6b:3c:64:
21:87:b1:ed:96:6f:70:00:bd:be:e3:dd:ad:2a:f0:6a:37:8e:
a8:f5:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:35:15 2024 by rpki-client on console-ams.rpki-client.org