Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w6iAoBrih5Qj4q5MYVKIWej5fY0.roa
File: w6iAoBrih5Qj4q5MYVKIWej5fY0.roa (raw, json)
Hash identifier: IM8saOwnpnuNES4PfXQKCvmU5kzk9VaQ0NBlO1QUmu0=
Subject key identifier: C3:A8:80:A0:1A:E2:87:94:23:E2:AE:4C:61:52:88:59:E8:F9:7D:8D
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018E1A2FC2AC215DAF9D26C32562CE6A4F43
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w6iAoBrih5Qj4q5MYVKIWej5fY0.roa
Signing time: Thu 07 Mar 2024 18:32:01 +0000
ROA not before: Thu 07 Mar 2024 18:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 176.126.106.0/24 maxlen: 24
193.37.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:2f:c2:ac:21:5d:af:9d:26:c3:25:62:ce:6a:4f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 7 18:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3a880a01ae2879423e2ae4c61528859e8f97d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:b1:d0:3d:e0:da:3b:09:70:e0:27:0c:50:
c6:00:f0:ca:0f:0f:2d:23:80:67:cd:98:4b:1b:bb:
50:ac:89:36:49:13:1c:0b:51:f7:1c:8f:53:68:7b:
34:02:e4:00:7f:d6:cc:ed:09:1a:4c:3d:62:4c:27:
cb:d6:bc:20:0e:ea:79:14:80:1c:ab:2b:a6:35:df:
2c:f5:a4:0d:07:32:e7:a6:77:6f:5a:9d:01:b1:ef:
b3:32:ad:c9:04:6a:c0:5d:30:8e:61:a1:63:4e:59:
af:56:97:06:d9:91:9b:10:9a:f6:b3:70:bb:76:10:
79:08:b2:a4:82:1d:55:a7:63:16:84:3c:24:4f:a9:
44:20:75:94:be:d6:9c:c1:52:50:c7:7f:c9:99:b8:
7e:05:8c:b6:44:13:11:fd:b4:ec:93:eb:bf:c4:10:
60:57:47:c4:3b:f6:2e:32:9f:a7:79:f3:fc:b2:6d:
4f:74:7a:62:29:76:e5:f0:a9:9a:75:71:d4:c9:45:
23:7e:f3:8a:2f:93:37:32:b0:1c:e4:f3:d0:12:01:
0a:8c:73:a2:b8:07:86:59:24:02:eb:88:96:79:af:
da:8f:8e:c3:4e:ef:94:34:a5:48:09:d1:2e:5c:71:
d0:e6:fc:19:6c:bb:ca:8d:79:34:b7:56:5d:c4:d7:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:80:A0:1A:E2:87:94:23:E2:AE:4C:61:52:88:59:E8:F9:7D:8D
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/w6iAoBrih5Qj4q5MYVKIWej5fY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
193.37.197.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2d:93:52:41:e7:c9:fb:e6:58:6d:b8:0a:26:29:74:b0:09:
23:19:b0:b7:d0:b1:ba:74:a3:23:13:0a:88:0b:ea:d2:78:57:
79:69:e7:f8:9e:1a:a4:7b:e2:48:96:73:1a:11:70:0d:be:fd:
3f:ba:a7:19:2c:8d:a9:48:5b:25:69:ae:42:f3:20:19:53:32:
02:63:82:1b:a4:a4:6a:c4:35:82:31:62:05:c6:6c:71:4c:a3:
7d:f4:81:b3:52:68:be:5e:2e:b0:60:ae:c4:50:ee:f9:66:64:
fd:1b:3b:2e:01:aa:f0:12:78:b2:61:1e:00:f5:6c:76:d6:96:
45:33:6b:eb:f9:04:4a:34:84:19:3c:cc:27:fb:57:ae:f0:fe:
88:99:7b:f4:d1:97:5a:c3:51:15:fd:bb:ae:15:fe:7d:44:7c:
a0:e5:98:13:86:e9:a7:48:31:45:2b:cd:94:96:95:36:ab:df:
e3:03:11:c4:97:ce:2e:0d:70:c9:0d:a5:b6:25:9d:a1:78:fb:
2e:e1:7c:aa:95:02:60:b6:0e:07:70:f5:2c:72:7b:58:26:ab:
3f:62:55:b8:5d:2d:50:31:ec:66:5a:55:5f:b2:91:80:60:c1:
d5:8d:d5:a2:3c:27:06:67:c4:7d:7e:4d:ed:5d:f0:d6:e5:51:
d2:7b:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:19:15 2024 by rpki-client on console-fra.rpki-client.org