Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CXXPHNrAzsrAuWHXukow5Zo4dqk.roa
File: CXXPHNrAzsrAuWHXukow5Zo4dqk.roa (raw, json)
Hash identifier: CasrP9+4Do6JCB6yzMnBiY5inUQJNbNSYYmiPbrarEE=
Subject key identifier: 09:75:CF:1C:DA:C0:CE:CA:C0:B9:61:D7:BA:4A:30:E5:9A:38:76:A9
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0191F3FAD9EACD82F40E888F5146005C9869
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CXXPHNrAzsrAuWHXukow5Zo4dqk.roa
Signing time: Sun 15 Sep 2024 04:39:48 +0000
ROA not before: Sun 15 Sep 2024 04:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f3:fa:d9:ea:cd:82:f4:0e:88:8f:51:46:00:5c:98:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 15 04:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0975cf1cdac0cecac0b961d7ba4a30e59a3876a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:45:d3:ae:2e:87:f8:c9:57:fd:ce:3d:37:
3a:58:06:76:89:2e:24:ea:0c:42:a4:8b:19:98:78:
96:a1:92:7e:5c:7e:f5:d1:df:c7:52:f6:46:a0:f5:
ac:f7:00:13:95:7a:70:7d:65:0d:46:91:0a:e2:74:
bb:76:12:45:83:cc:91:25:73:88:5c:07:6e:bd:90:
38:9f:f2:d9:b5:2a:3b:c3:03:f8:32:2c:8f:fa:92:
e2:25:c0:74:7a:26:e6:89:de:b7:1e:e3:15:e0:d9:
cb:0e:a2:66:5b:e5:ee:0d:44:b2:6d:6d:46:96:c2:
ea:0c:7f:8a:89:6d:fb:7d:87:a7:5b:9b:77:db:9d:
fd:c9:42:d1:fa:af:16:07:12:78:be:59:e7:85:fa:
ab:55:40:17:68:e4:07:d5:55:38:36:07:0a:90:78:
24:b4:a7:7f:be:d1:61:74:1f:1e:83:2f:68:95:79:
15:30:3e:5c:d9:f4:3a:22:4f:94:b2:fe:e4:34:10:
02:c2:77:79:ec:ca:cd:54:f2:ae:21:f1:45:24:00:
55:eb:6a:90:85:fd:4c:19:f4:b1:a6:19:b1:4a:50:
e4:ac:1a:74:aa:c6:5e:f3:e9:dc:bc:e4:75:84:c3:
89:bc:96:2b:d1:a9:4c:9b:94:8d:26:10:8f:1d:ee:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:CF:1C:DA:C0:CE:CA:C0:B9:61:D7:BA:4A:30:E5:9A:38:76:A9
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/CXXPHNrAzsrAuWHXukow5Zo4dqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6b:af:c5:da:61:39:c3:b6:d8:bb:10:ca:41:f3:c6:06:70:
93:bc:a8:d9:29:f1:e2:02:da:1e:81:14:fa:d5:b5:eb:dc:2c:
a0:ea:c4:84:f0:82:03:c4:fe:d9:35:07:70:d1:5d:01:96:49:
19:2d:c1:02:fa:29:66:b7:33:35:05:14:fd:45:93:c9:8a:16:
19:e8:04:2e:51:a6:bc:df:a9:20:34:7f:d1:44:0a:85:71:10:
e9:a4:ad:2c:d2:0b:a0:a2:f4:83:68:c9:cc:13:08:b2:e9:ef:
2f:f7:69:52:aa:06:8b:ca:20:4b:75:81:4a:30:f8:4c:57:82:
b6:3a:97:db:c8:7b:39:41:55:0d:82:a4:5d:2c:f8:ea:3c:50:
8c:57:20:0d:53:88:41:18:b5:22:f6:15:58:e2:cc:a1:69:ac:
52:94:6a:c2:2c:59:0e:bb:38:51:9a:b0:09:d4:9a:c4:ac:f5:
bb:26:e3:4f:0b:f4:c4:c4:60:c6:3b:6c:6d:7d:bd:60:e6:a0:
69:55:38:35:e1:72:53:90:7b:aa:04:f5:27:be:63:f9:07:f3:
44:1e:16:40:c2:a6:fb:61:6a:a4:df:89:2c:d9:af:6a:a6:6e:
ba:88:93:1d:f9:a7:8b:1d:7b:58:15:38:40:08:bb:f8:4a:a3:
cb:ff:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:13:54 2024 by rpki-client on console-ams.rpki-client.org