Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OfPy0pCRuVFc6SxF7yPGK6sQwYg.roa
File: OfPy0pCRuVFc6SxF7yPGK6sQwYg.roa (raw, json)
Hash identifier: t7Is9cBFUc86dkWvFlD9PpTlDV5TUlXmLWOP+ZjqcPk=
Subject key identifier: 39:F3:F2:D2:90:91:B9:51:5C:E9:2C:45:EF:23:C6:2B:AB:10:C1:88
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AAF6BDD16250B5728381CE9E45BB7
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OfPy0pCRuVFc6SxF7yPGK6sQwYg.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198697
IP address blocks: 185.177.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:af:6b:dd:16:25:0b:57:28:38:1c:e9:e4:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39f3f2d29091b9515ce92c45ef23c62bab10c188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:99:20:24:23:94:51:c7:8f:70:48:8c:52:
a9:59:45:a8:1d:5f:dd:c7:47:34:8b:04:22:ac:be:
0f:75:47:57:59:cd:3d:7e:60:c8:19:29:36:23:0d:
ec:52:da:d4:0e:d3:63:d9:56:6e:f9:b6:b5:be:9a:
1f:3c:4b:07:3b:35:ad:24:5b:8f:75:d6:68:e5:cb:
82:2f:39:95:59:cd:f5:a3:32:f5:c1:31:87:37:5a:
b4:66:79:b7:32:d3:dc:2a:0b:a1:f4:a3:f0:e3:06:
39:d7:21:2c:6a:a6:1f:ba:c9:7c:fb:f5:4d:b0:9c:
ef:9c:18:e7:12:50:f1:60:6b:8b:a5:bb:30:70:d7:
01:ce:8f:2d:70:cf:e3:6c:ef:b7:e6:8a:0a:6d:a9:
fa:5b:1d:a9:27:9f:b6:ba:78:7c:1f:2d:8f:12:4b:
fb:be:26:8f:32:2c:64:22:e4:cc:a5:4a:92:83:21:
22:02:f4:66:1e:a7:af:8a:1d:27:8f:86:2d:e1:92:
76:85:dc:4e:8c:3c:e3:af:cc:22:3b:3c:b7:ce:14:
d0:20:d6:ea:f6:dc:4d:c1:1b:65:74:34:01:b5:af:
71:92:01:97:de:9b:dc:3e:ef:aa:25:eb:3e:d2:87:
11:32:ef:0f:16:0c:10:b6:ab:00:08:83:f6:1f:04:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F3:F2:D2:90:91:B9:51:5C:E9:2C:45:EF:23:C6:2B:AB:10:C1:88
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OfPy0pCRuVFc6SxF7yPGK6sQwYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ec:c8:26:e5:44:78:d4:ec:bd:01:62:8e:eb:95:ac:75:f6:
ad:15:7c:1b:7e:85:4e:42:37:df:56:a9:9b:2d:fa:6d:bd:6b:
25:88:0d:af:40:14:56:03:14:8c:64:c6:8a:cd:24:cd:a2:cc:
de:6a:d7:01:67:f7:4f:50:ad:7d:a5:fd:4e:24:a2:1c:2d:5f:
41:18:4d:57:74:e0:85:bf:70:e1:68:cf:2b:26:5b:16:07:50:
71:b9:d8:fd:3a:f5:3f:d9:98:32:6b:dd:36:2c:04:dd:ab:ff:
18:dd:ec:b0:4a:27:93:86:6b:19:31:49:e5:f9:a7:05:24:6f:
16:7d:02:4d:e9:50:71:4c:31:64:d8:a5:6e:18:4f:7b:47:e4:
43:14:bb:8d:1a:2f:9c:3c:29:81:91:98:b4:5f:76:7d:eb:c5:
bc:99:70:56:29:b2:f7:44:81:95:c8:9c:58:c9:0d:08:91:a3:
99:1e:12:a7:e4:05:4e:39:e9:8a:ee:90:12:27:b7:81:55:da:
49:4e:a3:9c:9d:e3:62:f5:1e:62:68:21:60:82:48:f9:6c:d0:
b4:35:7a:d0:cd:c5:21:75:0f:8c:d7:28:d3:1f:be:b7:be:bd:
1b:91:14:68:76:cf:a8:06:b6:97:0d:49:cf:83:31:45:79:49:
64:5c:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:35:30 2024 by rpki-client on console-ams.rpki-client.org