Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/98wCE8tW7DnCKZAuPv3iWlXdjMc.roa
File: 98wCE8tW7DnCKZAuPv3iWlXdjMc.roa (raw, json)
Hash identifier: 7oAYS5KEjsbt12HOQYolKxnGo91vH89bZ9pCcMAGt4s=
Subject key identifier: F7:CC:02:13:CB:56:EC:39:C2:29:90:2E:3E:FD:E2:5A:55:DD:8C:C7
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 0191B39AF536332E3D71C2C15CA3634619D2
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/98wCE8tW7DnCKZAuPv3iWlXdjMc.roa
Signing time: Mon 02 Sep 2024 16:39:22 +0000
ROA not before: Mon 02 Sep 2024 16:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 176.124.200.0/24 maxlen: 24
176.124.201.0/24 maxlen: 24
176.124.208.0/24 maxlen: 24
176.124.209.0/24 maxlen: 24
176.124.210.0/24 maxlen: 24
176.124.211.0/24 maxlen: 24
176.124.212.0/24 maxlen: 24
176.124.213.0/24 maxlen: 24
176.124.214.0/24 maxlen: 24
176.124.215.0/24 maxlen: 24
176.124.216.0/24 maxlen: 24
176.124.217.0/24 maxlen: 24
176.124.218.0/24 maxlen: 24
176.124.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:9a:f5:36:33:2e:3d:71:c2:c1:5c:a3:63:46:19:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Sep 2 16:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7cc0213cb56ec39c229902e3efde25a55dd8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:c2:8c:a4:db:32:c4:af:38:7b:7c:17:07:
37:d0:7a:f1:f1:38:bd:e7:8a:3b:fe:99:79:8d:a9:
e7:96:00:e6:bf:cd:2f:4e:f4:2c:17:30:31:f4:64:
fa:33:79:e5:13:bc:85:27:ce:43:b6:8d:3d:62:a1:
23:91:40:73:7c:e1:95:ad:44:9a:16:2f:7e:fb:ef:
21:97:c2:c0:f4:14:a1:6c:dc:99:bc:98:78:2d:03:
14:c6:a3:b3:57:f0:9b:b9:78:d6:b8:0b:2e:91:26:
11:14:b4:2c:8d:17:2e:3d:c9:84:2f:86:16:7f:2b:
1c:ac:23:38:c4:66:a6:29:4d:0f:3f:3e:ed:34:f3:
0d:9b:5b:e3:10:47:be:ad:20:cd:a4:8c:28:07:cf:
13:d8:82:f7:e9:f7:7e:ae:e5:01:2b:d9:d2:b2:e1:
a3:49:54:24:52:72:1d:9b:55:5c:bc:fb:a7:ef:60:
3b:b2:06:a6:7a:84:65:88:11:4d:dd:ea:b9:58:27:
cc:b7:af:27:47:70:81:b9:1b:80:37:a7:b4:5d:07:
5d:5b:e7:0c:6e:89:af:07:56:c5:5d:83:09:90:3e:
c7:ad:1a:fe:57:bf:8b:cc:b4:20:93:02:e7:37:25:
04:97:3c:e1:a2:e6:21:df:7d:97:ad:0a:04:35:6d:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:02:13:CB:56:EC:39:C2:29:90:2E:3E:FD:E2:5A:55:DD:8C:C7
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/98wCE8tW7DnCKZAuPv3iWlXdjMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.200.0/23
176.124.208.0-176.124.219.255
Signature Algorithm: sha256WithRSAEncryption
3c:97:5b:a5:30:e5:67:91:32:d6:4b:0b:f0:b5:19:84:e7:c5:
65:67:c9:2a:db:fe:49:3f:3f:81:db:8f:ef:02:de:e2:35:2f:
cd:50:d0:b0:4a:54:aa:82:3e:4f:f9:ff:63:dc:19:c0:f3:76:
c7:5f:ca:b6:52:93:74:c8:9d:a0:e6:40:05:da:12:7d:88:e6:
16:3c:dd:25:78:36:3f:4b:f0:eb:02:0d:8c:89:9e:15:c9:5e:
00:87:8d:3a:06:c5:cc:3e:29:09:23:c9:de:9c:d5:85:7f:1b:
1f:67:f7:6c:72:6d:fc:5d:78:b1:ad:bd:08:3f:24:16:a6:6d:
09:72:4a:c2:75:7b:7c:4c:6f:67:d9:28:0d:70:02:f3:8a:08:
b0:ac:cb:11:c1:ab:25:56:9b:7f:54:67:40:bf:06:92:49:a6:
42:ee:5a:c1:85:ae:96:d0:a4:ae:9d:46:8b:46:a6:5c:6f:cc:
a5:87:a1:da:6b:1b:19:55:a0:af:64:be:80:06:d2:b4:14:6e:
7f:76:20:11:8b:2b:df:9c:01:11:89:a9:ae:f8:0e:bf:31:8b:
29:4b:66:90:0b:b0:0e:ac:41:c5:5d:7d:bc:69:86:20:ee:5b:
fe:48:4e:b4:ad:bc:58:59:45:95:51:72:d3:07:7c:2c:08:99:
9f:7d:05:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:00 2024 by rpki-client on console-fra.rpki-client.org