Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/H0w04s-mNCCCPX0R4OKI_puELps.roa
File: H0w04s-mNCCCPX0R4OKI_puELps.roa (raw, json)
Hash identifier: hfYmEBuOU+JwepJCuiH8xN6qVETBSoHy4AeqeLObWiE=
Subject key identifier: 1F:4C:34:E2:CF:A6:34:20:82:3D:7D:11:E0:E2:88:FE:9B:84:2E:9B
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 018CC7276060AFA50ECB8B56F4BA963BC6B1
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/H0w04s-mNCCCPX0R4OKI_puELps.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41000
IP address blocks: 176.124.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:60:60:af:a5:0e:cb:8b:56:f4:ba:96:3b:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f4c34e2cfa63420823d7d11e0e288fe9b842e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:97:39:e8:4c:d8:8b:e1:25:03:a4:21:1f:
2d:2d:75:e2:0d:04:b5:0d:36:a2:fd:56:43:11:43:
93:e0:4d:d2:53:71:e1:f3:a2:c0:50:c6:b7:16:62:
c0:13:67:6e:00:b7:fe:95:9f:af:7e:6a:bc:ea:a5:
9e:30:96:c7:10:f1:67:83:7d:e2:52:39:c9:fe:75:
f3:8b:e0:60:db:c8:c0:0b:4b:fe:b3:0f:50:5d:46:
ab:8e:92:c2:5f:ab:c7:e5:ab:a7:cc:bc:e5:14:1c:
82:d6:6a:f2:59:a4:8d:36:8c:9e:17:6a:03:f9:fd:
e2:d3:a5:c1:41:42:b5:5d:13:cc:b3:6b:fa:61:bf:
7e:d7:f2:bd:dc:8a:7c:2b:85:9b:ac:93:5d:ce:6d:
a0:d9:dd:a7:ef:9a:fb:47:9d:fc:35:41:08:9d:c3:
8b:98:9e:a2:2d:ac:dc:1b:78:ab:49:9d:11:39:42:
4e:94:d7:25:2a:cb:bd:53:b2:dc:0b:8d:86:ff:34:
78:ee:a9:fa:2f:63:84:8c:37:df:9f:93:d2:a4:51:
3c:3d:de:70:77:83:0e:c0:41:dc:1c:3d:99:d1:9d:
f7:c0:ca:e8:9b:96:c3:fb:54:f0:8d:b0:a6:40:eb:
e5:a8:d0:c0:dc:f4:05:8f:c3:bc:c1:c9:78:08:83:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:34:E2:CF:A6:34:20:82:3D:7D:11:E0:E2:88:FE:9B:84:2E:9B
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/H0w04s-mNCCCPX0R4OKI_puELps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:35:71:c3:33:16:a5:57:e4:fc:af:a8:25:eb:ca:61:33:cc:
2b:0e:7d:22:31:65:de:0a:5b:1b:03:23:9d:37:69:5b:b2:69:
c7:8a:1d:1c:30:dc:56:a4:50:dd:72:12:00:ef:f8:88:6f:d2:
41:16:c5:a4:1e:a7:c2:20:2c:67:11:27:dd:15:e6:56:16:3b:
e6:b0:69:5a:03:3a:26:6d:25:b8:f2:df:29:6f:2d:8f:96:4c:
2d:8a:a9:5d:e3:57:fe:82:e8:6d:ea:23:42:5f:fa:cb:64:22:
b7:a9:31:1f:56:d5:ca:93:1b:82:d1:44:7a:d0:ba:70:61:50:
13:96:12:89:0f:0d:05:db:cc:d1:cc:cb:2c:ea:a5:b8:2c:0c:
e4:d2:10:b5:d0:74:24:26:f8:1e:e3:53:36:7b:67:8b:11:d6:
e4:4e:6a:29:56:ec:98:a0:49:10:f2:50:22:be:45:f2:5a:ae:
d0:f1:e7:d9:78:3c:b7:f6:e8:b0:86:35:e4:86:69:f8:04:ea:
9a:c8:5d:f7:88:7d:8a:7d:04:4b:df:3b:02:41:2b:9b:0e:d2:
50:dd:c0:df:46:a0:1d:28:7d:06:25:0b:4f:70:6b:f2:e4:87:
97:72:9c:b6:98:9c:a7:65:98:44:30:47:0a:31:c9:58:d1:b6:
95:26:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:33:39 2024 by rpki-client on console-fra.rpki-client.org