Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/FtVzVJRW7jJz3kyP4fKYpwjW8fA.roa
File: FtVzVJRW7jJz3kyP4fKYpwjW8fA.roa (raw, json)
Hash identifier: +uyEEHv5sOAydA/dOv7sELMV1VTwDHjVwI89n0tCD5M=
Subject key identifier: 16:D5:73:54:94:56:EE:32:73:DE:4C:8F:E1:F2:98:A7:08:D6:F1:F0
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 018CC2DB0F0E41EA89BF033070612C9C4AA2
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/FtVzVJRW7jJz3kyP4fKYpwjW8fA.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49860
IP address blocks: 176.96.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0f:0e:41:ea:89:bf:03:30:70:61:2c:9c:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16d573549456ee3273de4c8fe1f298a708d6f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:e2:d4:64:7a:5b:ce:4f:ae:9a:09:5a:8a:
b7:21:ec:f5:ab:85:35:01:89:6f:8b:67:2c:1a:2d:
59:31:29:50:5d:67:27:75:15:03:3a:bd:b9:70:4e:
c8:d1:b8:28:63:6e:a6:60:1b:a1:76:bf:e3:1e:f0:
04:4c:5d:74:b1:6b:21:eb:34:03:0e:20:3e:8d:b9:
7d:27:ea:45:28:4a:f1:f5:74:12:32:1e:ea:69:4b:
ea:9d:2b:4f:a7:bf:9c:6f:bb:9b:e5:1f:ea:50:e5:
15:ae:e5:9f:1e:62:0c:b7:f4:39:fb:e2:e1:fd:5b:
e2:d4:6f:09:3a:85:fd:6c:37:36:b2:d6:12:f6:af:
7f:86:dd:82:c7:d8:22:1b:e3:23:fe:22:d2:8b:41:
d4:a0:4d:fc:c3:c3:b5:0c:48:b0:01:fa:ed:fc:f4:
c0:d0:53:5c:b1:f3:bf:a4:cf:0c:fa:f5:2c:c0:67:
4d:b4:1b:9e:c0:59:c3:c1:00:e9:8b:60:60:b2:2c:
80:6e:2a:20:8e:ad:b6:1e:b6:01:16:0e:ec:21:b3:
5b:10:f6:ef:67:ba:ce:08:4e:a4:d9:ea:bb:d4:2e:
f4:6c:b2:37:e3:49:5f:5a:ca:5f:9f:a3:0c:ff:11:
4a:c6:11:86:9d:a0:d2:f2:d6:d5:8e:e2:a3:94:86:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:73:54:94:56:EE:32:73:DE:4C:8F:E1:F2:98:A7:08:D6:F1:F0
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/FtVzVJRW7jJz3kyP4fKYpwjW8fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:21:22:41:00:21:64:2b:62:4c:82:21:d7:65:a2:d0:33:28:
a2:e1:58:1b:6c:40:f7:24:36:bd:f9:c0:48:1e:99:50:7b:01:
02:15:7a:0c:f7:b5:f7:d5:0e:b4:13:ac:e0:12:54:25:5e:a1:
8b:48:1a:56:7f:13:26:cf:f8:74:64:fb:c2:44:8a:88:bc:3b:
20:11:fd:3f:a2:99:54:5a:08:16:f0:f7:03:ba:af:49:fe:68:
b7:6a:69:e3:e0:80:bb:6e:a3:2f:a6:48:6b:c4:04:e0:b4:05:
18:21:1c:cf:89:8f:1f:b5:ea:6e:b7:84:83:aa:fb:ab:85:8a:
74:4b:02:b7:99:8d:0a:a2:64:32:71:69:c4:61:25:3d:a4:42:
28:c9:e4:5b:68:01:48:b4:93:77:1d:06:a1:0c:49:51:fc:c5:
84:0f:f5:ab:02:4f:e4:75:bf:4c:fc:9e:f3:d1:33:42:fc:17:
17:c4:0e:cf:f0:44:39:96:c3:aa:e4:27:34:27:64:76:e5:23:
fb:27:4a:16:de:b9:e1:70:51:ee:96:d1:2f:7e:56:c0:50:1c:
82:02:89:a3:eb:02:3d:b0:60:ca:2e:bf:f0:26:1f:fa:7b:d6:
95:d4:bd:1a:c2:b4:d1:93:8e:c1:42:97:2d:6c:f1:c1:82:24:
8e:26:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:19 2024 by rpki-client on console-fra.rpki-client.org