Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/RbbThHC3BKLsv5XBEb-fC5bC2nU.roa
File: RbbThHC3BKLsv5XBEb-fC5bC2nU.roa (raw, json)
Hash identifier: 5gtnUy3Nv1+AK5Y2e4ZOvxqteMQLYtZFKqUM22ICA0c=
Subject key identifier: 45:B6:D3:84:70:B7:04:A2:EC:BF:95:C1:11:BF:9F:0B:96:C2:DA:75
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 018CC64B5AE88736B007B1168B7925E21423
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/RbbThHC3BKLsv5XBEb-fC5bC2nU.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198248
IP address blocks: 176.102.77.0/24 maxlen: 24
176.102.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5a:e8:87:36:b0:07:b1:16:8b:79:25:e2:14:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45b6d38470b704a2ecbf95c111bf9f0b96c2da75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:48:01:68:d8:9a:6c:30:8d:9d:3a:39:9b:
80:77:93:61:27:fa:10:fb:69:13:31:84:42:a3:2b:
76:5d:e1:5a:4b:1f:bd:9d:7b:07:2e:91:29:fa:3a:
f6:d0:f2:ea:23:54:52:19:f5:84:12:3c:cd:e7:18:
cd:8a:54:c3:38:59:f9:21:17:f5:33:3e:8e:86:ec:
d6:b1:ee:c8:75:17:09:1f:25:62:91:a5:56:02:00:
20:54:80:19:51:51:47:24:09:31:8f:4a:de:1a:03:
40:b9:ec:c8:ef:21:2a:66:f4:a4:10:f2:52:c8:c7:
fe:ae:7d:77:1a:d7:a9:ea:37:42:01:9f:f0:2a:11:
a5:97:c2:0d:70:8d:49:0b:64:36:60:04:73:28:f7:
14:e5:b2:d2:57:03:d8:37:c9:af:fc:76:2e:40:d9:
49:90:1c:72:5d:2a:14:8b:fc:94:ff:f7:15:3a:0d:
8c:63:aa:09:40:1c:29:7a:db:36:8e:89:07:e4:ad:
75:02:72:fd:cf:09:51:0b:a4:33:90:02:bf:11:91:
ba:ef:4e:31:c7:30:99:d7:4d:6c:8c:ef:9e:4d:8e:
df:36:71:3b:f9:3c:69:a6:c5:81:b8:23:5c:3b:c1:
48:df:3f:03:90:41:e3:25:42:d3:a2:b3:ef:dd:63:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:D3:84:70:B7:04:A2:EC:BF:95:C1:11:BF:9F:0B:96:C2:DA:75
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/RbbThHC3BKLsv5XBEb-fC5bC2nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
Signature Algorithm: sha256WithRSAEncryption
10:41:53:37:1e:95:31:16:88:a3:21:7b:5e:76:c0:e9:dc:ef:
38:eb:13:7c:47:98:c3:e8:bd:4f:b7:10:d2:81:1a:a5:6b:01:
e8:79:32:fb:5b:7a:7c:2c:4e:3e:e7:16:b5:1e:29:bb:8f:1f:
b1:51:3e:c9:19:eb:3c:fd:a8:e3:ed:5d:e3:07:78:bb:98:c7:
9d:9f:5c:ea:06:dd:80:98:83:1c:5b:18:01:c1:4d:5b:d3:52:
ff:1a:d3:b1:89:26:fd:be:d9:87:16:b1:20:cc:ac:a2:e8:7f:
38:e3:ea:0d:37:d1:98:71:d2:32:fa:b0:c9:6e:fa:b8:3f:71:
b7:d9:f6:b8:09:4f:4c:6c:9a:d2:69:5a:70:99:e3:89:03:11:
2e:6f:b5:a8:5b:eb:19:89:a2:21:13:26:e9:b9:8c:37:51:80:
11:eb:06:27:b8:a1:36:f4:f2:48:8d:36:42:bc:cd:08:e0:8c:
85:9d:a0:47:2c:f4:0b:9f:63:b8:8d:c9:6c:24:43:b5:94:fb:
28:57:6a:66:4b:2a:fd:12:3f:66:4a:69:ac:5b:ab:db:26:5f:
ce:49:66:8a:3a:85:a9:39:49:c1:91:66:07:e5:05:23:c9:7a:
5c:07:11:ba:9d:71:2c:26:16:89:8e:3e:52:c1:11:23:43:02:
93:e5:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:05:15 2024 by rpki-client on console-fra.rpki-client.org