Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/rV8Tde05Dn4Mdce5DPlpG5oeS7Y.roa
File: rV8Tde05Dn4Mdce5DPlpG5oeS7Y.roa (raw, json)
Hash identifier: PbTrvocowvPXLcqYIO4Yo6mqEPW+kmWX7L84U+hGTcE=
Subject key identifier: AD:5F:13:75:ED:39:0E:7E:0C:75:C7:B9:0C:F9:69:1B:9A:1E:4B:B6
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 018CC795269B8BFA07ED97F2004F601C96C8
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/rV8Tde05Dn4Mdce5DPlpG5oeS7Y.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56000
IP address blocks: 176.126.135.0/24 maxlen: 24
176.126.134.0/24 maxlen: 24
192.162.152.0/24 maxlen: 24
192.162.153.0/24 maxlen: 24
176.126.129.0/24 maxlen: 24
176.126.128.0/24 maxlen: 24
176.126.132.0/24 maxlen: 24
176.126.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:26:9b:8b:fa:07:ed:97:f2:00:4f:60:1c:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5f1375ed390e7e0c75c7b90cf9691b9a1e4bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:9b:17:0a:f6:00:b9:10:e8:06:9b:03:89:
80:ec:03:17:8d:e6:d9:55:f4:06:33:89:96:41:e3:
ba:74:18:82:f3:65:76:0c:64:4a:e4:9b:bc:03:1a:
dc:fc:04:fb:41:cd:fd:4f:fe:ef:c3:1e:b6:04:78:
6a:42:04:56:1d:95:c1:8c:da:bf:92:0a:2a:e5:6b:
db:d7:f9:c4:7a:ee:3f:b2:26:e5:f4:d1:ee:fc:8d:
9f:ef:63:cc:5b:7f:cc:ba:ff:90:d0:50:84:0b:e4:
88:19:f0:94:61:2d:d0:3a:47:3a:da:c1:b0:c3:92:
13:3f:c4:00:0f:91:7b:90:03:d9:be:11:5b:7b:46:
16:67:e2:07:1b:fd:af:a3:9b:89:88:bb:32:8c:72:
e8:1d:ed:f3:91:83:6b:cd:df:98:80:69:d7:28:82:
5e:6e:8f:90:2f:cd:5c:ac:a4:00:7a:e0:ae:c6:af:
93:c0:37:4c:60:c3:7d:93:b3:5f:11:d1:ca:f6:cf:
e9:3d:f6:64:67:0a:b2:d4:64:0b:bd:de:85:95:3f:
d6:f9:2c:87:fc:04:42:88:ef:54:0e:21:98:c1:32:
a6:d2:59:55:73:93:b5:fc:f3:8a:83:78:04:11:d3:
a6:29:08:14:ac:3b:4c:56:c9:58:0e:5f:e6:d5:4b:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:13:75:ED:39:0E:7E:0C:75:C7:B9:0C:F9:69:1B:9A:1E:4B:B6
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/rV8Tde05Dn4Mdce5DPlpG5oeS7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.128.0/23
176.126.131.0-176.126.132.255
176.126.134.0/23
192.162.152.0/23
Signature Algorithm: sha256WithRSAEncryption
71:e6:25:d5:50:2c:94:1a:a6:62:1f:f7:1d:72:87:91:1a:42:
12:71:74:5c:cc:04:06:34:5d:a5:14:46:a1:aa:0c:a5:fc:d6:
cb:54:b2:ff:0e:1c:86:03:df:bb:9c:50:06:6e:9a:86:5d:02:
e9:d1:dc:d0:de:0f:cc:d3:4c:61:13:09:7f:d7:be:69:25:6f:
13:03:08:d5:26:a8:fc:69:7f:48:df:e3:83:47:4f:8e:28:7e:
f4:a5:36:31:5a:b7:70:71:58:f4:f0:96:9a:e5:44:bb:de:72:
f9:f2:0d:7a:f6:29:ca:e3:24:30:8d:43:cd:41:df:c3:f2:b7:
db:8b:45:e9:5f:af:fa:f5:83:d2:0e:ae:a5:28:2d:ea:c0:3d:
b1:71:f4:e5:b0:cf:7e:93:31:fb:73:25:cc:15:b7:98:6d:35:
2e:4e:70:c5:11:c1:3b:b9:b7:a2:b8:39:9d:a8:08:65:39:18:
d1:98:2a:3c:c0:64:79:cf:61:1b:ac:f2:73:c1:dd:77:82:3d:
58:90:9f:bb:3c:f6:d5:62:1d:4f:44:3b:d6:a9:9d:4c:16:13:
d1:e4:05:b1:dd:49:a4:bc:ce:7e:04:c2:4e:3a:b8:0e:48:85:
24:77:75:b3:03:6b:42:69:e1:59:fe:be:b4:aa:f6:68:5a:63:
1b:8e:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:53:01 2024 by rpki-client on console-fra.rpki-client.org