Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/sBf3VYHtqyszdr67TB15TWbc-4s.roa
File: sBf3VYHtqyszdr67TB15TWbc-4s.roa (raw, json)
Hash identifier: uoE8GdV6zWJj2t4S/xEuE9QGR8TTD9/I3lhCjiC2SAg=
Subject key identifier: B0:17:F7:55:81:ED:AB:2B:33:76:BE:BB:4C:1D:79:4D:66:DC:FB:8B
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 018E3A21EA435014FB603703389BC5275461
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/sBf3VYHtqyszdr67TB15TWbc-4s.roa
Signing time: Wed 13 Mar 2024 23:24:44 +0000
ROA not before: Wed 13 Mar 2024 23:24:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60700
IP address blocks: 176.120.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3a:21:ea:43:50:14:fb:60:37:03:38:9b:c5:27:54:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Mar 13 23:24:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b017f75581edab2b3376bebb4c1d794d66dcfb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:b0:7d:05:61:6c:d1:84:0b:3c:d2:05:7e:
b7:d6:9e:40:91:7e:d8:12:78:e2:74:b6:35:d3:da:
05:1e:21:e3:84:c9:2f:ca:e4:87:ce:a2:1c:0b:84:
99:85:a9:9a:b9:00:81:86:72:6c:8d:5a:a7:12:39:
12:21:74:9e:33:7f:ef:a6:e2:a2:9c:9b:9d:08:f7:
6e:c6:2f:1b:14:03:85:86:39:d9:e4:0c:0d:e5:8f:
4f:09:68:54:cf:da:9c:82:1f:2f:2f:33:58:f4:8f:
7f:bc:31:b3:93:a8:85:32:b7:ee:d5:06:cc:50:05:
19:4b:4f:96:a6:47:9c:97:0f:d6:c7:89:1e:75:56:
a1:c3:23:e5:e6:53:20:06:b6:c5:11:59:7d:da:eb:
d4:ff:50:08:a3:54:13:e8:89:37:c6:10:98:e5:6a:
56:79:f5:7d:7c:99:fb:f6:8b:cb:26:fd:da:59:2d:
da:3f:29:8a:09:ae:52:ff:60:91:4e:00:f7:24:c5:
40:34:95:ce:c6:d1:43:8f:f4:c4:ae:60:f4:c9:e9:
7a:50:fc:7f:4b:21:d9:47:19:5a:80:66:f1:11:1d:
85:ff:17:06:7e:a1:43:26:f9:e1:7c:0c:b2:85:3a:
d7:1c:69:0f:ad:e5:c4:ac:3b:6c:a6:e2:19:0d:ec:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:F7:55:81:ED:AB:2B:33:76:BE:BB:4C:1D:79:4D:66:DC:FB:8B
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/sBf3VYHtqyszdr67TB15TWbc-4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e7:91:06:73:e3:20:24:4b:19:44:8d:40:2b:87:1d:f7:a9:
2d:48:07:3b:d6:a3:db:57:4c:2f:a3:12:74:11:5d:a9:c4:74:
c4:a3:bb:3a:7e:ab:83:93:84:0a:92:af:0d:eb:c3:c3:5a:7f:
88:67:21:00:2a:ec:51:74:de:be:04:c3:f3:f4:ed:f7:e2:1d:
56:f4:98:d1:dc:03:fc:1e:9c:06:46:09:80:79:c6:f3:50:a9:
dc:44:44:17:07:2e:6b:f0:1a:d8:12:5e:5d:34:36:15:b5:46:
9c:7a:9b:5e:f6:1b:1b:22:9c:50:2c:ea:05:96:76:a6:2c:11:
92:12:bb:93:1b:0f:2c:4c:a7:e7:65:2d:cb:2d:1b:c8:de:98:
19:e5:95:69:dd:a6:b5:30:a5:f7:55:87:82:79:f3:1f:5f:aa:
6c:57:1e:d9:b6:c7:84:99:b1:19:14:4a:74:24:67:5e:d6:07:
65:5e:6a:98:e4:64:ac:58:51:a6:c9:78:c1:92:8c:4f:f4:7d:
50:73:f2:1c:27:b5:30:dc:12:60:54:86:82:f4:01:58:ac:6e:
77:c7:b9:89:45:a5:72:76:e4:e1:21:a5:21:0e:02:c2:68:29:
7f:66:c2:e3:19:13:83:fe:52:e3:4c:b0:64:15:f9:ea:e5:22:
4b:1b:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:14:38 2024 by rpki-client on console-ams.rpki-client.org