Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tZHcpfjJ9xfCc3h3IvF861iq3CQ.roa
File: tZHcpfjJ9xfCc3h3IvF861iq3CQ.roa (raw, json)
Hash identifier: ffbTU+XW7tCz8LdS+6tGZQHZ3vopcDwQdJCDVvuxscU=
Subject key identifier: B5:91:DC:A5:F8:C9:F7:17:C2:73:78:77:22:F1:7C:EB:58:AA:DC:24
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3488D3BCD78378D6BEC6C9C3BF0EEAC
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tZHcpfjJ9xfCc3h3IvF861iq3CQ.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41047
IP address blocks: 87.237.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8d:3b:cd:78:37:8d:6b:ec:6c:9c:3b:f0:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b591dca5f8c9f717c273787722f17ceb58aadc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:a5:61:97:ad:52:5c:e2:5c:d1:e5:dc:48:
ec:5f:91:b2:ce:d6:b3:66:bd:6b:ab:40:e1:5a:64:
49:13:3b:6c:a6:c2:86:00:6e:fa:ea:aa:27:21:ea:
7b:d1:f9:b1:da:9a:30:58:75:dc:00:dd:b2:36:e3:
65:a3:2f:72:db:97:10:a8:ce:55:74:d3:69:79:a7:
9f:94:f1:82:cf:be:8f:e1:73:02:0c:d1:f7:6b:13:
27:a4:fb:af:a9:4e:2f:ec:a3:61:32:23:b4:21:05:
7b:89:6f:2d:e3:b1:9f:83:bf:29:a6:6f:71:3e:a1:
fe:6b:45:d6:8f:4e:b2:41:d4:6d:e5:de:e3:ce:a5:
22:47:66:1c:b4:4b:86:33:24:f4:4e:83:52:42:8a:
fb:83:76:fe:4c:7e:4a:13:fc:b7:90:5d:c1:ff:cf:
64:bb:de:e6:5d:8d:d0:8f:e8:b1:17:84:b7:39:ba:
85:f0:cc:37:51:63:20:b3:a0:97:21:fd:51:b5:0c:
24:77:67:78:f7:c1:19:ca:22:c8:b0:bc:5d:b7:53:
c5:87:a8:7d:13:18:5b:9f:65:c6:f5:9b:7c:14:49:
92:ea:aa:05:ca:ee:5f:60:5b:33:34:97:e2:2e:61:
96:2f:50:5c:b2:99:b7:9e:ca:1e:0b:32:79:af:a6:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:DC:A5:F8:C9:F7:17:C2:73:78:77:22:F1:7C:EB:58:AA:DC:24
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tZHcpfjJ9xfCc3h3IvF861iq3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:83:87:fc:5f:57:12:df:29:3d:ba:bd:91:ea:4d:d7:00:
ba:01:77:f5:5f:bf:f5:dc:bf:dd:46:36:fa:ce:88:93:f2:d0:
51:df:1e:00:78:10:71:ad:a3:64:73:bb:96:06:86:3a:cf:15:
6b:9e:64:0c:b4:cf:a6:b0:cf:ad:be:4f:28:25:b6:ca:29:d9:
69:b9:f1:8e:b6:2e:78:2f:59:96:ac:2b:7f:d2:00:2d:0b:7d:
b1:c0:15:a9:99:f1:75:34:b0:9e:75:6c:c1:b5:b8:5b:44:1d:
67:87:82:8d:b0:93:9e:66:02:a4:d9:2a:67:d1:f2:21:d1:81:
a7:87:a4:e8:57:99:c4:70:f7:6c:cc:43:01:16:51:a4:a6:00:
92:f1:d3:da:11:28:06:94:16:e6:08:97:6c:b2:61:64:d1:f4:
ef:17:d3:f3:21:43:c4:e3:a3:f3:ea:2e:8e:7d:51:ce:a6:04:
3d:83:09:40:ee:9b:be:c3:2e:06:9b:54:fd:2d:7e:66:54:c3:
f0:c3:ce:10:3b:6a:a6:d2:27:c6:51:46:fd:d4:7e:5d:18:f3:
cb:66:11:00:ac:04:69:f3:a6:75:06:59:36:07:f8:a2:a9:5f:
45:01:f6:bc:61:88:9a:40:cb:50:fa:dd:b5:4f:fc:a2:7c:50:
a6:00:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 05:17:54 2024 by rpki-client on console-ams.rpki-client.org