Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/IuhJcqJvgHmHMzzzdN9BFD_1FXI.roa
File: IuhJcqJvgHmHMzzzdN9BFD_1FXI.roa (raw, json)
Hash identifier: U0BqejsvrCY/OKs7v52HnpAsJD06MhmjFGmJgrRf9xI=
Subject key identifier: 22:E8:49:72:A2:6F:80:79:87:33:3C:F3:74:DF:41:14:3F:F5:15:72
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 0191B3948C1B1C9BA0C8D6472EBC2FCCB862
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/IuhJcqJvgHmHMzzzdN9BFD_1FXI.roa
Signing time: Mon 02 Sep 2024 16:32:22 +0000
ROA not before: Mon 02 Sep 2024 16:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 176.124.202.0/24 maxlen: 24
176.124.203.0/24 maxlen: 24
176.124.204.0/24 maxlen: 24
176.124.205.0/24 maxlen: 24
176.124.206.0/24 maxlen: 24
176.124.207.0/27 maxlen: 27
176.124.220.0/24 maxlen: 24
176.124.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:94:8c:1b:1c:9b:a0:c8:d6:47:2e:bc:2f:cc:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Sep 2 16:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e84972a26f807987333cf374df41143ff51572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:ce:29:69:a1:46:4e:cf:7c:4d:3b:0b:96:
89:40:6a:75:c3:8f:ca:8f:80:d5:60:40:b1:e4:2d:
1b:00:60:6f:f0:71:41:ca:34:d6:27:38:41:f2:61:
7d:a5:5e:5a:bd:66:0f:2d:0e:ea:59:06:33:d5:67:
5a:ed:ac:0d:21:13:b9:59:e6:b5:c4:83:7f:bf:76:
e8:d8:04:75:db:c3:02:d6:f9:1c:b1:fe:40:2a:e3:
e8:52:40:2d:77:90:dc:c2:f0:e9:09:6d:58:3f:99:
4a:5a:6b:35:5a:1b:de:3c:36:e1:4e:0b:f5:b0:08:
99:ab:c0:28:73:42:86:b3:ec:90:3c:02:80:40:3a:
d1:9f:82:f0:36:88:88:da:ad:d0:32:8c:7d:af:dd:
6f:f9:6b:9a:ab:dd:ea:8b:d2:09:6f:3c:b5:08:de:
ea:91:ea:8c:d7:f2:51:5d:49:18:3d:0b:b0:0d:8b:
a1:d2:6b:85:a9:79:d8:82:89:07:c5:29:4b:24:f1:
fd:5e:37:6c:3d:f2:1f:b8:54:f0:87:fa:1e:4d:f6:
0a:c4:b0:1c:82:5e:e4:5a:1e:8d:80:b4:00:3b:f5:
f9:db:0d:63:97:6a:70:a3:b2:3b:75:09:2e:46:35:
69:00:b9:b9:29:0d:b3:13:8b:43:4c:ec:8c:11:15:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:49:72:A2:6F:80:79:87:33:3C:F3:74:DF:41:14:3F:F5:15:72
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/IuhJcqJvgHmHMzzzdN9BFD_1FXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.202.0-176.124.207.31
176.124.220.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5a:77:bb:8b:d1:b2:5e:2f:2b:da:28:2d:d9:c4:9e:df:a2:
d2:10:7e:70:f4:5a:bc:61:23:dc:33:ae:79:96:82:2b:48:21:
9e:3e:a0:be:38:a6:b6:38:52:c1:98:f6:c8:17:32:df:c4:cf:
61:7d:29:42:c1:bf:47:7c:dd:42:86:05:75:48:24:1a:3c:a4:
0f:56:b1:6a:0b:63:6d:16:2e:7f:d8:3c:3a:74:ca:de:44:8d:
bb:9a:66:99:15:9a:72:d0:34:49:32:22:45:d9:c5:f7:fe:68:
6b:85:16:3c:ba:cf:3a:bb:1f:37:27:02:9d:97:78:a5:f1:ea:
5f:3b:d0:cd:f2:4f:e1:cf:c3:5a:0f:bb:13:26:56:20:0f:cc:
e2:30:27:a3:62:b8:c3:76:62:5f:95:9f:4d:76:d8:5a:ae:a7:
6c:4b:f0:5e:eb:a9:40:e8:94:1d:10:af:b7:1f:f4:1d:bb:72:
1a:24:5f:22:a9:0e:27:57:df:b8:6d:b9:81:32:8d:7d:4d:23:
0d:81:83:de:7f:42:cf:47:8b:7c:6c:6b:ce:52:3b:e7:9b:75:
e5:d1:e4:43:12:bf:33:e1:f4:6f:2a:33:91:e2:dd:e8:88:0c:
a4:13:4d:a5:d8:b7:ee:75:79:b4:c7:c2:98:3f:50:40:0a:ef:
a8:e0:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:05 2024 by rpki-client on console-fra.rpki-client.org