Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jUFgdBX5rD3MENENkgXqm3SJhuY.roa
File: jUFgdBX5rD3MENENkgXqm3SJhuY.roa (raw, json)
Hash identifier: EaGUZevQmOD82G6c0ayf5iJgSzABS2sIBnSZQ3UMVbw=
Subject key identifier: 8D:41:60:74:15:F9:AC:3D:CC:10:D1:0D:92:05:EA:9B:74:89:86:E6
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802CD0FC2CF39601A640EC1A9BA1A38
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jUFgdBX5rD3MENENkgXqm3SJhuY.roa
Signing time: Tue 02 Jan 2024 02:31:15 +0000
ROA not before: Tue 02 Jan 2024 02:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57746
IP address blocks: 176.223.96.0/23 maxlen: 23
176.223.96.0/22 maxlen: 22
176.223.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:cd:0f:c2:cf:39:60:1a:64:0e:c1:a9:ba:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d41607415f9ac3dcc10d10d9205ea9b748986e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:bf:3a:e8:8f:12:cc:3a:85:90:a2:9b:b6:
7a:84:29:e1:f5:b3:66:18:65:b0:f4:58:e9:4f:fb:
38:63:a5:98:f9:9a:97:65:16:bf:52:06:6e:58:15:
fc:bd:9b:d7:08:8b:8a:f2:49:cd:b9:33:88:af:7a:
f5:5c:ae:89:f1:ee:95:d3:4a:b3:1b:55:f7:bc:f4:
d2:44:b8:09:7c:69:ea:d3:24:ba:d1:a6:fc:58:f0:
c0:58:e2:f8:e3:06:e5:1c:b8:0f:d0:ee:7a:37:f1:
8d:be:2c:83:04:f9:f7:85:f9:95:bd:fe:70:fa:8e:
cd:59:60:0b:4a:ab:04:f8:23:50:02:4a:59:2c:74:
44:1f:be:fa:02:72:95:bd:15:0b:5b:e8:d7:10:41:
0b:bd:b2:76:0d:38:3d:fd:35:5f:3c:b7:f9:df:aa:
16:c2:ac:3d:61:49:f3:46:45:d4:49:3a:20:54:99:
d1:5c:06:42:a2:78:e7:20:80:72:b5:36:c8:fa:be:
fb:bd:92:bd:0f:cc:28:55:88:1f:54:10:2c:71:4a:
ed:0a:56:12:d5:c3:ff:ed:60:40:b2:1f:b0:7d:b5:
0e:23:98:70:f6:22:45:45:74:91:f9:96:dc:30:88:
8d:ce:41:47:0f:b7:9b:05:d9:80:ca:f4:5d:4d:42:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:60:74:15:F9:AC:3D:CC:10:D1:0D:92:05:EA:9B:74:89:86:E6
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jUFgdBX5rD3MENENkgXqm3SJhuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.96.0/22
Signature Algorithm: sha256WithRSAEncryption
83:bb:63:f7:1a:4d:c9:34:18:87:5c:b0:47:15:e4:84:ee:a8:
83:49:3e:a2:55:1d:fd:71:6b:ca:88:28:5d:d5:e9:ed:8b:46:
6c:6a:bf:1f:33:b9:3b:63:7e:c4:58:40:9a:db:1a:ab:27:db:
2d:86:fe:44:ca:18:31:5d:d9:7f:f2:c8:c4:b1:27:2d:9b:aa:
79:27:d6:c4:8c:05:8f:a1:c8:d1:d0:24:91:d7:ff:ff:29:c4:
0c:b9:ea:ef:fc:c6:c8:3d:fb:27:9e:45:24:e1:6b:f7:60:7f:
ca:09:0b:86:75:85:ed:3b:ca:53:3f:91:ba:e7:b4:e1:9e:04:
68:87:54:13:97:66:8a:65:bc:fd:ed:fb:a8:18:81:41:c1:40:
84:5c:e6:44:28:f5:7b:a2:16:6b:26:5e:a1:69:98:aa:a0:97:
a6:d3:05:71:1e:71:ab:3e:3a:bc:61:c9:c0:48:14:05:bc:2a:
d6:6c:d4:a2:3b:50:93:e2:0a:42:fa:01:e7:be:7d:c7:e2:5e:
6e:27:c4:8f:6a:18:1b:51:9b:b1:82:0a:06:6c:10:52:d7:26:
36:6a:22:09:8b:6d:4b:ba:b3:ae:67:f7:38:2f:ca:06:cc:23:
91:02:f3:1f:4a:3d:d5:bd:72:51:81:3b:e7:38:02:49:95:44:
c1:a8:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:29 2024 by rpki-client on console-ams.rpki-client.org