Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/RBUzozDXVmq7Ivqy5Wd4rJu-ou4.roa
File: RBUzozDXVmq7Ivqy5Wd4rJu-ou4.roa (raw, json)
Hash identifier: hRDPiiI2fC/OjUXs2ORDiO7lwrqqJeA20fiAeM7w6Ks=
Subject key identifier: 44:15:33:A3:30:D7:56:6A:BB:22:FA:B2:E5:67:78:AC:9B:BE:A2:EE
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 018CC2DB0FC6090336011A96FC0013110C0D
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/RBUzozDXVmq7Ivqy5Wd4rJu-ou4.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198483
IP address blocks: 176.96.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0f:c6:09:03:36:01:1a:96:fc:00:13:11:0c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=441533a330d7566abb22fab2e56778ac9bbea2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:6d:03:e2:e8:3a:27:04:51:e9:56:88:36:
97:34:eb:58:3b:68:e4:40:b9:12:5f:ab:70:97:6d:
7a:4c:26:07:58:5c:68:81:f9:d1:0d:a8:c5:44:5d:
99:11:62:91:72:02:5d:3b:c3:27:e3:37:9d:0e:28:
68:76:64:38:b5:fb:74:ab:87:ae:ba:85:68:68:a5:
85:31:8c:4a:a3:ce:41:9e:09:c6:1a:c0:08:4d:67:
4f:7e:dd:63:be:84:e0:85:e9:27:1f:fe:3f:7f:9b:
9f:71:df:84:49:e4:cf:c3:fc:07:94:20:c1:a3:7d:
86:7d:6d:d5:6a:0f:cb:45:62:41:7d:ef:3d:07:ca:
cc:cb:4d:f0:5f:5a:8a:91:06:51:e0:36:51:5b:1f:
e8:40:ca:79:01:81:b0:4c:db:6a:14:0f:79:60:fe:
0c:f2:bd:2d:d4:b0:78:c7:cb:26:89:db:4f:30:9c:
ac:de:6d:fc:b4:ad:5d:13:46:7e:9b:61:aa:3a:01:
ba:ee:e1:bd:d6:4b:1f:49:11:f5:71:53:48:fc:64:
6e:77:b6:43:9f:91:36:49:d5:ef:22:71:b1:d3:7a:
e0:75:41:0d:b6:2e:44:57:d2:2a:36:f4:09:4f:0b:
f1:ea:43:31:7b:ae:dd:f5:fd:ab:2d:5c:20:34:27:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:15:33:A3:30:D7:56:6A:BB:22:FA:B2:E5:67:78:AC:9B:BE:A2:EE
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/RBUzozDXVmq7Ivqy5Wd4rJu-ou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:a6:16:31:40:95:26:ea:92:02:f5:3b:33:ae:c2:ec:8c:
29:d8:2d:56:22:54:44:99:71:e3:60:ad:29:d7:4e:f8:a5:50:
4f:21:15:a2:34:cb:10:dc:2e:8f:91:2d:a5:43:8a:ed:75:a4:
bb:29:af:d7:76:6b:3f:5d:60:16:31:8d:a5:ba:06:d7:91:ef:
55:9c:fc:3d:84:ef:3e:e9:a7:ce:5d:4e:f0:e7:f4:92:f0:a7:
87:33:a6:da:18:69:c9:20:a0:a6:61:b3:f7:b7:c8:9e:82:93:
7f:99:18:b3:81:47:54:4e:a3:05:44:45:30:75:e4:5c:e9:55:
ec:a6:4c:b6:2d:a8:41:2e:22:7b:82:24:56:7a:da:e3:80:a6:
15:f7:1a:5d:2b:aa:29:e0:4f:16:ca:15:8b:71:a7:bb:07:ba:
97:45:2f:44:97:75:23:f6:ba:50:29:f1:a1:cb:4d:d3:5d:e6:
44:fc:0d:d7:49:b2:c5:11:8f:09:d5:6b:2c:90:fe:40:79:b9:
0f:bf:89:5a:77:1b:e0:93:f6:df:a4:20:da:c3:e3:0f:29:0e:
61:b0:8d:ef:a4:e7:8f:ce:6f:20:ce:9c:6a:5f:bb:0f:c5:42:
7b:ca:0d:fa:5b:2d:49:ba:e9:25:17:82:fd:e8:cd:ea:96:28:
86:77:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:37 2024 by rpki-client on console-ams.rpki-client.org