Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa
File: xW6nvlSjAM87LjUyhasEH1_9Q3k.roa (raw, json)
Hash identifier: AzYFHEdSmLcwpRbvjPkaXxN7DtkaLDj02R52p8kFiuA=
Subject key identifier: C5:6E:A7:BE:54:A3:00:CF:3B:2E:35:32:85:AB:04:1F:5F:FD:43:79
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CD308F3607EDEB7314326CB1E7D62F0A0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa
Signing time: Thu 04 Jan 2024 05:53:48 +0000
ROA not before: Thu 04 Jan 2024 05:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202673
IP address blocks: 176.105.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:08:f3:60:7e:de:b7:31:43:26:cb:1e:7d:62:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 4 05:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56ea7be54a300cf3b2e353285ab041f5ffd4379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:b5:58:ab:cc:88:28:15:92:76:0d:06:85:
ae:34:05:13:3c:1f:a0:03:71:09:6a:e4:78:a5:80:
51:18:1d:90:61:d0:cd:32:55:23:fc:78:a2:9f:dc:
33:a8:b2:b2:c8:3b:14:2a:05:8c:4a:d0:e0:e0:da:
98:48:85:4f:59:db:da:25:ed:cd:3a:17:8e:ad:69:
6b:f8:81:af:1a:92:6a:fd:8f:29:cb:1e:b1:f8:5b:
4d:e6:45:23:58:1a:ac:0c:dc:93:6a:7f:74:21:6b:
bc:54:da:9e:54:e0:20:f9:36:69:1c:20:b1:88:c4:
a4:0d:43:1e:13:46:f6:10:2d:1a:86:ae:22:2e:ab:
8e:1e:8e:7a:e1:61:4f:d5:20:90:a7:88:43:07:e4:
fa:76:d2:ad:a9:af:53:87:f7:41:79:7f:dc:8e:f9:
1f:53:e1:94:5d:60:38:f9:40:42:05:7f:49:f6:a8:
b8:6c:9f:6d:6e:a5:dd:b5:6b:d0:df:a7:de:b9:f1:
38:1f:10:eb:48:0a:66:d9:74:34:90:b7:3a:a4:51:
f8:42:35:a0:be:2e:2a:b8:18:e7:54:90:7b:1c:67:
dd:44:d1:d8:7b:00:5d:71:87:35:52:25:22:87:67:
5a:90:ea:ae:cf:19:98:e4:9e:be:2b:a7:8f:f2:f1:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:A7:BE:54:A3:00:CF:3B:2E:35:32:85:AB:04:1F:5F:FD:43:79
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xW6nvlSjAM87LjUyhasEH1_9Q3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0b:47:05:d3:cf:7f:11:04:2d:66:27:49:b5:73:36:fa:f2:
c4:38:a6:44:9f:02:1d:02:79:6b:14:4e:7f:58:a7:1c:94:c9:
da:08:f4:0e:c5:e8:f0:ef:13:d9:d4:65:6b:0b:ab:f2:ae:d1:
6f:6c:4d:97:d8:fe:de:8c:23:28:1f:9d:42:b0:38:1c:44:73:
6f:21:b8:06:38:19:8f:6c:0b:52:f3:f4:6d:8b:ef:9b:e6:1e:
6f:9f:fd:f6:4f:98:b9:5c:6c:33:b6:d7:3e:cc:ae:7d:57:39:
4c:88:1d:24:53:08:26:09:f1:1c:2c:80:d8:d4:f3:50:8a:df:
17:fb:e7:21:43:f9:cd:5d:83:d5:89:f3:d4:52:33:b0:ac:ce:
e4:a8:5e:5e:de:78:8e:dd:f8:97:a2:8a:f1:0a:dd:1c:c4:80:
00:fb:24:72:f0:39:2f:67:0b:09:b4:b0:65:02:82:1a:25:d7:
91:10:08:c5:49:aa:7f:86:ef:9d:a7:cc:1d:d2:2c:27:e8:bc:
a1:1a:bd:15:a1:f8:33:22:2f:d0:47:47:32:4e:7f:04:c6:54:
b0:c4:98:42:ac:13:8b:38:c2:14:f7:22:ac:70:08:c9:35:da:
27:9d:ec:df:f8:e1:98:c1:1a:9a:0d:de:d5:86:9f:7c:ce:41:
7a:25:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:04:05 2024 by rpki-client on console-ams.rpki-client.org