Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uxcFBuO41vdhNTUqA_Ri5oOJldQ.roa
File: uxcFBuO41vdhNTUqA_Ri5oOJldQ.roa (raw, json)
Hash identifier: wsaGeYinPJvMyKuZOhZEMKlq6JG6fZsVJG4kslaMORg=
Subject key identifier: BB:17:05:06:E3:B8:D6:F7:61:35:35:2A:03:F4:62:E6:83:89:95:D4
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CFA006D2B44EC28016AD59B60D2CE88C2
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uxcFBuO41vdhNTUqA_Ri5oOJldQ.roa
Signing time: Thu 11 Jan 2024 19:29:41 +0000
ROA not before: Thu 11 Jan 2024 19:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 176.105.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:00:6d:2b:44:ec:28:01:6a:d5:9b:60:d2:ce:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 11 19:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb170506e3b8d6f76135352a03f462e6838995d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:e9:a0:1b:82:90:8d:28:92:5e:cc:81:39:
9c:ef:dd:7f:14:93:4f:a1:bd:7b:70:4a:0e:ee:8b:
18:6e:7f:3b:e2:b0:50:91:5e:60:dc:b6:9c:7b:fb:
84:55:39:ae:4e:ea:fa:2b:81:5f:71:6a:e6:cc:df:
56:bb:a6:6d:78:bb:6a:23:85:3b:dc:5e:9c:9e:a8:
3a:51:09:dc:93:20:20:f8:d9:18:a1:ed:ee:dd:0f:
aa:05:89:fe:d6:13:7d:a8:a7:b8:77:3d:fd:ef:0d:
ee:22:41:ec:fa:41:e1:7e:1b:9d:25:2b:77:33:be:
bd:ea:ea:78:71:79:c7:1c:78:6f:d7:49:2e:83:89:
11:62:47:ed:90:bd:71:f4:5c:d8:31:a8:65:2d:eb:
4c:f5:c8:d9:8c:8b:af:86:52:b0:47:05:35:d0:6d:
fa:d0:ce:2a:3a:92:a1:8f:89:58:5c:a6:82:a1:4b:
cf:2c:1f:1c:ff:e3:63:1d:41:53:bf:09:d5:09:e7:
db:56:2a:69:31:f5:50:53:07:c9:dd:52:67:1b:43:
58:c2:7a:26:ff:ce:4d:1e:a1:29:09:33:45:0c:7a:
3e:01:db:cf:fc:5c:6c:a1:99:09:86:6e:76:a7:a2:
42:ce:39:36:49:f1:75:e6:28:7c:9e:f5:8a:08:2a:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:05:06:E3:B8:D6:F7:61:35:35:2A:03:F4:62:E6:83:89:95:D4
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uxcFBuO41vdhNTUqA_Ri5oOJldQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:50:4d:4d:97:85:78:ca:7a:9b:8f:43:45:a6:4b:12:93:31:
c1:b2:70:2c:59:d2:b3:37:86:b9:f5:af:67:d9:81:77:b4:45:
ed:2c:3e:ae:49:4e:29:92:7f:09:db:a2:1c:8f:85:2b:3d:00:
e0:58:fe:75:99:52:c7:37:a6:a6:8d:95:f6:21:e1:5e:d7:19:
93:16:44:6a:32:36:14:ee:b2:cf:70:e0:27:4c:c2:d9:95:7e:
3a:75:d8:0d:99:07:80:ee:8c:7a:74:84:80:b5:7d:d6:6a:07:
a5:62:47:c0:ef:59:76:24:47:33:8b:1e:ea:5c:6c:65:c0:b2:
a0:af:fb:f2:f9:c2:05:92:6d:24:fd:9b:7c:a4:c0:4b:7f:8f:
b6:a1:08:9d:49:86:4b:f2:ff:cf:93:d0:5c:79:70:4b:40:0e:
dc:90:2f:48:da:f3:af:d0:d6:0f:50:4a:f7:3c:e3:b2:80:42:
26:4c:56:43:cf:6c:87:47:41:30:db:c8:25:1f:5e:9a:eb:d8:
47:49:85:ce:2b:60:98:6b:96:8c:27:bf:fc:f7:8c:bd:f5:c8:
68:65:76:0b:e2:07:0d:ce:7f:05:85:2c:19:59:76:73:f7:b7:
8f:30:69:b8:6e:93:a2:c1:e8:f1:a0:b0:a4:3b:fd:f9:88:de:
19:af:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:05 2024 by rpki-client on console-ams.rpki-client.org