Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/uNlMMjl4ZZ1byf4Z1-KLwOFt8GU.roa
File: uNlMMjl4ZZ1byf4Z1-KLwOFt8GU.roa (raw, json)
Hash identifier: Be1JH4DmyNgj8BZkynXpglv52McgijbEXisuB6StDCs=
Subject key identifier: B8:D9:4C:32:39:78:65:9D:5B:C9:FE:19:D7:E2:8B:C0:E1:6D:F0:65
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 018CC727148464B884F1DA13C82F3F670B7C
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/uNlMMjl4ZZ1byf4Z1-KLwOFt8GU.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12757
IP address blocks: 176.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:14:84:64:b8:84:f1:da:13:c8:2f:3f:67:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8d94c323978659d5bc9fe19d7e28bc0e16df065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:a9:39:1b:ad:01:0e:6d:19:57:44:6b:64:
dc:cf:43:13:b5:f4:9a:1c:9d:35:e5:25:af:0b:43:
8b:df:e7:f0:1c:9d:7d:50:52:71:ad:00:52:ab:70:
e5:20:c4:b6:60:17:ce:cc:2f:f2:96:a8:e3:6d:db:
48:c2:d3:46:5f:d5:47:e8:86:9e:33:4e:1c:7a:f7:
8a:c2:81:3a:88:09:a6:23:c1:f4:49:00:12:d2:f0:
fc:78:2a:df:8d:88:52:85:dd:d5:92:72:d0:5f:03:
e5:8f:db:a0:8f:4f:fa:1a:4c:66:02:8a:f3:49:b6:
d3:54:f5:16:a5:74:83:08:84:3b:50:1d:3d:10:79:
06:c8:50:1b:46:0a:f4:af:f0:52:12:c7:85:d8:7f:
fa:d9:1a:26:71:e3:28:a8:55:00:39:3c:b7:7a:dd:
f5:98:c2:f1:2a:21:8f:ca:1c:40:21:4c:9c:52:95:
fd:71:59:84:0a:90:75:3d:84:86:ad:b1:a4:3e:ce:
8c:e8:54:f5:fd:ce:bd:d4:b0:bf:42:c1:31:9c:62:
3d:69:6c:3f:50:ba:c4:ee:aa:b2:77:45:6b:be:a0:
b5:6f:6f:c4:a9:48:2b:a2:37:eb:77:65:41:1a:5b:
b7:91:4c:67:02:68:14:10:23:93:54:55:f0:68:31:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:4C:32:39:78:65:9D:5B:C9:FE:19:D7:E2:8B:C0:E1:6D:F0:65
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/uNlMMjl4ZZ1byf4Z1-KLwOFt8GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:83:0e:ab:3a:8e:3b:01:83:fa:64:2b:15:fe:97:43:b9:e6:
d6:de:ff:c1:08:9a:54:a3:8d:a0:cd:7e:33:57:2a:3d:8b:b6:
8c:9b:de:3b:ab:e1:05:da:ef:7a:b4:57:fc:c9:bf:24:57:d8:
b0:c1:0d:4a:e4:f5:eb:d8:a1:30:b0:0a:4c:94:e7:17:9b:3a:
9f:88:de:2a:10:dc:f5:8c:ac:ca:bc:ee:a1:6d:38:1e:e3:7c:
ff:34:56:fa:ad:32:b3:61:ca:9c:29:57:99:93:50:f5:ab:8c:
c3:be:56:37:f9:d2:4e:0a:c1:96:f5:d8:aa:34:16:b4:77:81:
33:79:23:89:b1:86:ab:09:2c:a7:0f:42:ef:16:40:96:ec:9d:
54:e4:d2:2b:61:d5:8f:b5:7f:67:3c:cc:76:c2:3b:40:cd:fa:
4a:6c:95:6d:f3:d1:9f:77:66:8b:5f:5d:39:b3:28:65:42:09:
dd:3f:7b:7d:39:9f:43:05:c9:23:06:39:1d:05:a5:12:18:0d:
5e:e8:a6:5a:db:5a:2e:78:01:19:7a:2c:50:f2:59:08:29:c2:
a5:9b:87:f1:9c:3d:e6:4e:2a:ef:43:6a:6d:f2:5a:c1:c3:29:
e0:c1:db:30:84:07:82:b8:eb:98:f9:98:16:3f:29:81:e5:a6:
9b:91:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:32 2024 by rpki-client on console-ams.rpki-client.org