Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/hDP-cUnn7_d-EZupSBhT_CqDa0Q.roa
File: hDP-cUnn7_d-EZupSBhT_CqDa0Q.roa (raw, json)
Hash identifier: P82TtYY4/D3G+8428WwWOAr9CSGraJv5QO+eZjPwHRY=
Subject key identifier: 84:33:FE:71:49:E7:EF:F7:7E:11:9B:A9:48:18:53:FC:2A:83:6B:44
Certificate issuer: /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Certificate serial: 018CC3B689131C942F5934C9A379FBAABF9B
Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/hDP-cUnn7_d-EZupSBhT_CqDa0Q.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197825
IP address blocks: 176.10.56.0/24 maxlen: 24
176.10.57.0/24 maxlen: 24
176.10.58.0/24 maxlen: 24
176.10.59.0/24 maxlen: 24
176.10.60.0/24 maxlen: 24
176.10.61.0/24 maxlen: 24
176.10.62.0/24 maxlen: 24
176.10.63.0/24 maxlen: 24
2a06:2083::/32 maxlen: 32
2a06:2087::/32 maxlen: 32
2a06:2080::/32 maxlen: 32
2a06:2086::/32 maxlen: 32
2a06:2081::/32 maxlen: 32
2a06:2085::/32 maxlen: 32
2a06:2084::/32 maxlen: 32
2a06:2082::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:89:13:1c:94:2f:59:34:c9:a3:79:fb:aa:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8433fe7149e7eff77e119ba9481853fc2a836b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:83:bd:3e:29:a6:32:a2:5b:0c:85:56:f1:
ad:5a:a2:b3:90:78:b3:37:b1:c0:9e:ef:f4:68:39:
e1:8f:e5:ef:4e:73:d3:fe:fc:03:38:15:33:84:c2:
82:d3:97:af:0e:5a:81:35:92:e8:e1:5a:80:3b:63:
fd:58:e3:50:f9:bc:e8:d3:43:0c:6d:fc:a5:ea:34:
e2:8b:e4:5d:3a:c8:bb:51:f1:55:f9:fd:cc:36:30:
ca:df:96:17:b0:67:45:48:bf:cd:e9:d8:12:2e:7a:
f4:90:56:8a:03:87:78:c7:a7:04:f8:b6:c6:92:ca:
1b:59:f9:2b:18:82:c3:53:47:27:7a:74:9f:da:ac:
67:f5:60:f5:32:30:df:57:92:c9:2c:fe:38:61:86:
ef:36:d9:72:c9:6d:51:51:6c:44:13:11:b1:27:5f:
fe:15:9e:b3:1a:ed:87:f1:0c:31:8d:93:3a:c8:fb:
14:fb:0c:03:1f:0b:41:1f:d9:33:67:85:e4:a2:c9:
24:6b:ea:14:d2:c2:62:86:c4:ca:0f:ac:9d:fb:c1:
fe:b2:c0:3a:7d:91:e0:f3:97:54:5a:f2:ce:ba:24:
9a:e4:e7:b0:e4:db:ff:85:1d:a3:4a:59:6c:4a:a9:
75:b5:7b:c8:d9:39:c1:28:e6:7b:af:2f:9d:53:c5:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:FE:71:49:E7:EF:F7:7E:11:9B:A9:48:18:53:FC:2A:83:6B:44
X509v3 Authority Key Identifier:
keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/hDP-cUnn7_d-EZupSBhT_CqDa0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.56.0/21
IPv6:
2a06:2080::/29
Signature Algorithm: sha256WithRSAEncryption
07:af:0a:07:72:52:76:9b:22:32:bb:61:51:25:83:54:2d:08:
85:a8:b7:0c:9e:d7:94:e5:14:72:cf:fb:48:9f:78:bb:a6:7c:
e8:bb:55:33:fd:a0:40:29:54:19:ef:4a:cb:0b:04:42:f2:99:
ac:6a:20:dd:47:04:11:97:e8:87:48:05:7c:fd:90:88:c6:a1:
58:b5:98:7f:a6:f6:5b:d6:f3:86:fa:46:cb:5a:2e:30:14:e1:
27:97:36:d0:c0:76:ca:46:e1:21:d1:c8:6c:d3:76:0a:e1:1f:
a4:0d:de:99:89:5d:a3:9f:a1:32:65:3d:1c:4d:5a:b0:b3:60:
d2:74:49:04:ac:28:58:08:db:52:83:bf:4f:b3:1a:ad:91:3a:
54:1a:1f:ab:fd:e4:27:ce:e3:0f:38:02:e8:d9:e5:95:6d:e0:
75:69:84:90:67:4d:e1:fd:10:b7:c2:e0:0d:82:92:57:5f:7b:
8c:6e:32:a5:47:7d:fe:23:ca:12:22:9a:15:17:ed:3a:ff:75:
ad:b1:48:8e:b7:08:0c:61:de:93:ae:b5:52:d3:66:10:82:f7:
e3:7c:ba:22:21:41:c0:79:f6:df:fe:92:9d:93:09:94:d8:5b:
ae:68:7b:ff:ab:1b:4c:68:47:99:b9:5a:f0:6a:07:b7:39:76:
59:bf:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:22 2024 by rpki-client on console-ams.rpki-client.org