Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/pXoGjpljzvnzuCfg74waoB_ek_0.roa
File: pXoGjpljzvnzuCfg74waoB_ek_0.roa (raw, json)
Hash identifier: J9e84tHx4YOorhubrLupVEu9hos8PU08Qt2TxPWBp7Y=
Subject key identifier: A5:7A:06:8E:99:63:CE:F9:F3:B8:27:E0:EF:8C:1A:A0:1F:DE:93:FD
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 018CC86F8CAC87876D6F846433F8EF3D6D49
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/pXoGjpljzvnzuCfg74waoB_ek_0.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 176.56.136.0/22 maxlen: 24
176.56.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8c:ac:87:87:6d:6f:84:64:33:f8:ef:3d:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57a068e9963cef9f3b827e0ef8c1aa01fde93fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:30:bb:fe:c7:22:da:77:01:ef:09:d3:4f:
61:68:01:29:9b:89:e8:2e:33:d2:9e:92:5f:2b:46:
14:d3:06:b9:7e:1e:da:e0:15:86:06:5b:85:4e:a9:
ef:af:19:27:fb:68:c0:25:dd:a6:20:37:6c:3f:a1:
1d:4c:4d:20:77:28:8c:8f:7c:f9:44:35:7b:56:fc:
4d:92:51:26:0f:01:39:ab:f1:67:eb:8a:4b:0a:90:
69:e5:97:83:99:30:90:cf:dc:25:85:f8:76:e7:71:
ce:11:67:b4:2c:12:65:5c:17:f5:51:a7:3a:85:33:
a7:4b:b5:12:e6:78:e1:f7:2b:dc:33:99:b8:b7:f2:
85:2e:f9:c1:a3:c6:5b:eb:70:aa:cf:32:1b:4b:7c:
c1:39:ea:05:bb:7b:b1:ab:5f:a2:4a:38:b8:7f:f1:
64:1e:5e:66:98:d2:4b:b6:8f:1c:42:1b:de:96:57:
5d:9a:49:47:ac:44:74:64:ef:d0:ec:1d:65:eb:39:
3f:1e:ed:50:84:44:41:b7:25:ba:12:5a:64:9f:63:
6e:64:76:f3:a6:d8:1a:9c:a0:fa:fe:45:0d:d0:b8:
d7:13:f4:23:05:c8:f4:af:86:09:44:c7:45:8c:52:
dc:bd:de:6c:37:b9:d0:3d:70:c9:c1:4c:cf:9e:60:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:06:8E:99:63:CE:F9:F3:B8:27:E0:EF:8C:1A:A0:1F:DE:93:FD
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/pXoGjpljzvnzuCfg74waoB_ek_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.136.0/21
Signature Algorithm: sha256WithRSAEncryption
51:b4:98:c3:4b:ed:75:71:2c:c3:5e:48:8f:b2:d9:fb:06:d1:
bc:e3:c1:fb:18:45:55:09:a8:33:3e:73:a2:b6:8f:4f:81:f7:
0a:61:01:8f:3f:64:fc:f7:00:51:bb:30:78:4e:a0:88:04:a4:
63:30:db:1d:43:b4:4b:8b:8d:59:48:77:c6:a0:91:29:e2:22:
1b:0e:9d:55:d9:2f:70:36:97:c2:5f:88:ce:fe:fa:d5:3b:24:
8a:5c:f3:a4:55:3a:92:f6:cf:86:a1:f0:31:a4:55:7f:7c:17:
6f:ab:26:82:a6:d7:fb:2d:63:c3:a8:fd:76:cd:7d:a9:7e:44:
f4:36:4f:9c:8c:a7:1f:7c:fa:3d:ea:8b:48:d0:d3:b2:75:ce:
49:fd:a8:e3:bc:0e:d5:87:c9:5e:5b:d7:0b:49:1f:d9:35:15:
1d:a2:47:2d:95:9c:6e:92:9a:19:fa:61:5e:19:73:da:20:83:
48:ba:7a:32:a4:bb:78:56:4a:00:86:1b:29:17:72:f0:37:eb:
9e:5d:b2:28:4f:21:59:e0:79:d0:28:a3:45:36:74:19:cf:52:
bd:90:48:02:1a:72:5a:be:51:12:96:15:a6:4a:d7:fa:60:02:
01:85:b5:70:40:b5:b1:86:df:84:b5:d8:f1:32:b9:33:28:90:
dd:4e:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:10:17 2024 by rpki-client on console-ams.rpki-client.org