Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/0HZUutfXlO5QY9aJ0ZXq3HBK880.roa
File: 0HZUutfXlO5QY9aJ0ZXq3HBK880.roa (raw, json)
Hash identifier: 8k2PTYNkeQZkKU0zN4o8KOqmqvHQjtzq73doO94x30A=
Subject key identifier: D0:76:54:BA:D7:D7:94:EE:50:63:D6:89:D1:95:EA:DC:70:4A:F3:CD
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 018CC9BCC4E93F286B2B8A4DF7EA93261D9D
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/0HZUutfXlO5QY9aJ0ZXq3HBK880.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42216
IP address blocks: 185.165.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c4:e9:3f:28:6b:2b:8a:4d:f7:ea:93:26:1d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d07654bad7d794ee5063d689d195eadc704af3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:e0:30:14:f2:cf:cf:1b:6a:9a:82:5f:2c:
19:b1:1d:4f:29:18:29:75:56:a2:e5:88:37:02:32:
5d:4e:7d:9d:fb:da:46:d6:7c:bf:51:e0:d4:94:a5:
21:a8:02:4f:6c:9c:ec:52:e2:2d:62:07:50:2d:ca:
a8:fd:25:ac:01:bb:5f:93:3c:6d:e3:14:b2:b6:ba:
8c:fd:ce:f4:4e:b4:82:23:c5:0d:f4:04:9c:79:32:
e9:c8:87:a5:f9:7d:3a:b6:52:bc:b0:c2:de:bc:09:
81:53:3d:1c:46:57:73:df:9b:43:07:ca:84:6d:43:
1d:f1:f2:4e:8d:bb:b3:22:51:3e:86:1e:08:5d:2f:
f7:a4:23:5a:d3:82:ce:24:16:8f:30:7f:dc:0e:1d:
2e:2a:f0:d1:3a:27:0d:81:fa:1e:69:8b:6f:36:c8:
9e:d3:2a:6c:4c:6f:18:0f:f0:f2:1f:53:a9:13:b9:
71:91:da:8a:b1:a4:f2:bd:33:d9:11:3a:56:63:74:
82:8b:69:7b:9c:20:66:06:63:0d:e4:6a:fc:2b:92:
2e:c0:b7:de:24:4c:13:93:cf:aa:85:ce:53:27:5b:
8d:16:57:af:bd:f3:32:81:03:40:f4:d4:6f:17:24:
37:2f:e6:80:f2:71:77:ff:59:b3:8a:98:1d:dd:0e:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:54:BA:D7:D7:94:EE:50:63:D6:89:D1:95:EA:DC:70:4A:F3:CD
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/0HZUutfXlO5QY9aJ0ZXq3HBK880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.76.0/24
Signature Algorithm: sha256WithRSAEncryption
48:98:ac:12:1f:1d:15:ab:69:c8:29:5c:ec:c5:6a:11:4a:ec:
9b:de:6b:95:f4:f0:1f:b5:59:ae:94:33:e9:5c:c4:d2:64:3f:
12:17:4f:c2:c8:0d:37:c6:1d:ed:e7:de:c0:14:72:24:dc:cc:
cd:a2:7e:9b:7c:af:6f:89:0c:c6:cd:6e:d8:99:ee:78:85:a0:
23:23:87:ce:69:ad:f0:e0:06:a1:3e:40:35:b6:9d:3b:fd:7f:
bc:a2:77:7c:5c:85:a4:23:e1:22:e7:df:2f:2c:b3:e8:6e:17:
81:35:83:54:42:9b:50:9f:20:00:ce:a6:f1:f6:f0:fd:27:fc:
19:4a:10:50:e2:42:0e:7d:6a:be:88:b2:a0:8b:f8:ec:73:6c:
2b:ca:6b:b0:4b:33:ac:4e:f2:0a:a3:21:30:24:0a:66:d6:06:
b1:5e:60:98:f8:5a:ba:3c:78:97:33:ce:f9:b7:32:81:a8:d0:
c8:c3:a3:3a:d9:40:70:b9:46:81:23:20:11:b5:52:17:ae:49:
4b:f7:b7:f4:09:d0:31:16:b5:b5:e6:ee:f4:68:da:a6:df:4d:
db:bb:40:94:ea:cb:9e:d8:a1:2d:1b:bc:8a:72:d1:a6:a2:40:
55:bd:ca:a9:3d:ae:92:6f:bc:a2:6c:6f:8e:0c:ec:c0:c8:64:
5c:b9:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:42 2024 by rpki-client on console-ams.rpki-client.org