Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/xHV0xr9Xzxi1BmI6Va4d_ZICywU.roa
File: xHV0xr9Xzxi1BmI6Va4d_ZICywU.roa (raw, json)
Hash identifier: kGmB/FsYq5eo5R25K3rbbniVxcbkb8n+CTP9PZ2hxtM=
Subject key identifier: C4:75:74:C6:BF:57:CF:18:B5:06:62:3A:55:AE:1D:FD:92:02:CB:05
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 018CC8DE3E6E1103744111521877AB8F16E8
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/xHV0xr9Xzxi1BmI6Va4d_ZICywU.roa
Signing time: Tue 02 Jan 2024 06:30:57 +0000
ROA not before: Tue 02 Jan 2024 06:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199199
IP address blocks: 176.97.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:3e:6e:11:03:74:41:11:52:18:77:ab:8f:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Jan 2 06:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c47574c6bf57cf18b506623a55ae1dfd9202cb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:e5:ca:39:a1:f0:bd:17:0b:21:ac:25:ca:
ff:9f:93:f9:ee:5d:f5:5f:d9:a4:0a:80:f9:a2:50:
4e:b0:69:10:61:fc:b3:db:cb:c7:5a:70:68:42:0f:
6f:c9:62:c4:38:b8:c9:ba:f3:19:fe:ee:67:ea:9c:
8d:96:a6:1a:eb:0d:07:b1:b9:5f:27:7d:00:29:e4:
12:a7:47:9d:ae:7a:8d:2f:a9:5f:ac:2e:9b:7a:fb:
82:3b:cd:fe:e6:eb:6b:0a:5f:00:fc:76:6d:66:da:
ed:8c:bd:37:5f:b6:e8:3a:52:b6:c3:fb:ec:14:d0:
9e:1c:4a:9b:0b:b4:b3:51:28:cf:61:57:d1:2c:1d:
f2:9d:61:52:59:a5:6c:47:c5:b5:cd:e5:8b:75:8c:
e8:fa:1c:1e:23:e7:fe:fb:d4:e0:5d:53:bf:23:ab:
57:e9:fd:0a:b2:9e:75:1d:ba:c1:cd:22:fe:af:10:
af:43:4a:37:fa:00:19:21:08:40:25:c9:d8:e8:45:
86:72:0f:cc:9e:d7:af:8b:24:c7:1d:11:dc:2f:34:
56:26:66:78:77:a9:59:f7:2e:11:35:1f:59:30:28:
fa:53:45:0b:af:c9:91:30:69:f4:ad:52:d4:56:8c:
2b:95:01:05:f6:6f:8f:a1:2b:75:c9:59:59:62:9d:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:74:C6:BF:57:CF:18:B5:06:62:3A:55:AE:1D:FD:92:02:CB:05
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/xHV0xr9Xzxi1BmI6Va4d_ZICywU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c5:d9:f2:b5:3c:1b:6a:d0:5a:93:d9:90:5f:1e:2c:4c:17:
4d:91:4d:e6:cf:db:93:e8:5e:92:40:6d:aa:ac:04:f2:88:14:
02:4f:ea:f5:c8:a5:19:af:31:13:4e:ad:a8:89:34:0f:54:28:
e1:ca:ec:33:64:94:b6:96:fb:d5:69:d0:49:dd:85:a3:88:86:
ec:0e:3c:0a:f5:1c:24:87:e1:c9:ae:63:e3:41:9e:8a:77:9b:
f3:54:60:ba:d1:26:4a:c1:19:de:1d:2e:8d:8c:cc:2c:a3:b4:
6f:0b:0b:02:d8:b9:d7:ef:b8:03:e7:70:c0:e4:b7:e3:d2:9b:
56:57:7c:c3:2b:2e:12:dd:ce:3d:45:5c:50:bb:ec:db:96:25:
20:5f:aa:e5:ba:5d:46:2b:15:32:55:f4:58:c5:62:18:34:2e:
98:f0:c0:a5:5c:8c:6e:63:c8:71:b9:68:ff:7e:2c:83:09:b8:
eb:d7:e9:21:9e:7d:d4:cc:35:99:91:9a:6c:ad:2f:96:7d:9e:
bf:5b:78:dc:19:a1:b0:bb:9f:6f:7d:9f:3f:7d:8d:17:a2:54:
e8:2e:de:c8:cf:94:56:68:dc:9f:d7:e6:50:19:b1:b1:c4:92:
40:4d:dc:cf:3c:23:0d:df:95:67:63:9d:4b:95:4b:56:d1:98:
14:18:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:44:14 2024 by rpki-client on console-ams.rpki-client.org