Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa
File: 1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa (raw, json)
Hash identifier: VwHUlV0ZYJEWGnTj+5+h7kuAZnCdbJ8z9ls/DVYFoQ0=
Subject key identifier: F9:AF:47:0A:0B:42:F2:BC:27:19:24:1D:48:3C:F3:50:9D:52:13:19
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018CC3492994599F4CAD2578166F2FF0922B
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30766
IP address blocks: 178.132.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:94:59:9f:4c:ad:25:78:16:6f:2f:f0:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9af470a0b42f2bc2719241d483cf3509d521319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:70:0c:93:e6:88:36:3a:2d:c9:73:63:9b:
7f:3e:de:0e:f8:a4:95:d7:98:f3:e1:89:a4:2d:46:
6a:70:4c:0d:c8:2b:0e:63:c5:01:c8:8e:46:82:77:
d7:91:07:bf:4d:5b:2e:df:14:76:81:57:ae:e9:c5:
56:e3:ce:6a:e6:28:a8:0c:e7:99:5d:bb:10:7b:7a:
85:6b:af:c1:81:5a:3b:93:48:25:29:d2:e3:0a:bc:
87:a7:a3:45:51:c9:a2:62:ce:eb:c7:e7:8e:8f:04:
d7:0d:3c:c6:64:0e:58:f3:d0:66:b2:22:f6:db:c6:
72:72:0f:cb:ed:74:df:ec:0a:25:31:8e:04:e5:ad:
5a:5f:e8:f5:ee:bf:ea:d5:91:72:24:14:3d:3b:2e:
9f:8d:1c:4e:6f:01:0b:dc:00:84:2b:a7:cb:38:b4:
a6:9b:ad:46:5b:02:c5:1b:55:82:64:28:1b:9c:79:
53:39:39:fd:44:c7:38:65:44:0a:cc:db:25:6e:f1:
25:40:e1:09:53:1a:43:95:45:b3:7b:00:60:18:ee:
05:f4:23:50:34:e3:46:e3:17:2f:67:20:90:f4:bf:
2f:40:71:af:ee:15:67:63:17:a5:15:e9:f2:4e:92:
83:81:f4:cb:af:aa:6b:fb:6a:38:4a:0c:5a:5c:de:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:47:0A:0B:42:F2:BC:27:19:24:1D:48:3C:F3:50:9D:52:13:19
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/1-a9HCgtC8rwnGSQdSDzzUJ1SExk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.68.0/23
Signature Algorithm: sha256WithRSAEncryption
21:7b:80:c4:8d:29:aa:6f:d2:be:79:62:72:61:48:b1:1b:a9:
1d:11:04:bf:58:8f:1f:be:9e:08:75:be:a8:95:b0:b2:3b:4e:
22:2b:13:ba:a1:50:5f:68:8c:68:ad:82:17:0d:65:71:8f:e3:
56:c1:cd:83:58:a4:99:00:70:75:6b:55:63:f8:09:e9:0f:ed:
cb:9c:c8:e5:26:ec:53:b4:32:22:e1:0c:81:07:cc:79:98:91:
dd:5e:ee:d0:1d:ea:39:61:e4:45:ad:59:34:c2:c4:89:c1:18:
1c:d7:69:bb:ca:41:d7:8f:36:81:f5:29:71:a1:66:7a:f7:6c:
4a:e1:47:59:bf:83:bd:4a:bd:b9:ab:d1:c3:3f:8c:56:8d:1b:
f5:f0:47:fc:21:c3:77:40:c7:13:60:15:e1:0b:f6:a8:cb:31:
c8:a5:ca:ac:8b:df:89:5c:b4:a6:84:75:60:24:5c:1f:51:95:
26:3e:23:c7:c3:2a:a4:2a:4a:dc:b3:03:da:8a:98:3e:5f:da:
bf:b3:6e:23:22:0f:6a:1b:dc:02:90:c4:4a:46:50:ec:2d:d5:
b5:7f:c9:0b:dc:80:6f:a7:2c:64:fb:1d:21:3f:bb:e9:9f:d9:
e6:a5:d5:85:5e:72:d4:a6:2e:a3:b8:0d:bd:de:0e:96:67:ed:
35:5b:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:17:03 2024 by rpki-client on console-fra.rpki-client.org