Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ryjIduWQSHc0DZB2TI9224KBtfY.roa
File: ryjIduWQSHc0DZB2TI9224KBtfY.roa (raw, json)
Hash identifier: LZhF45Q4GY5CXdoP58hunbeR6mRqQJSznCSv2LveoPI=
Subject key identifier: AF:28:C8:76:E5:90:48:77:34:0D:90:76:4C:8F:76:DB:82:81:B5:F6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4255898509B497BB79EC398DCA728F9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ryjIduWQSHc0DZB2TI9224KBtfY.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27176
IP address blocks: 78.108.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:58:98:50:9b:49:7b:b7:9e:c3:98:dc:a7:28:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af28c876e5904877340d90764c8f76db8281b5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:38:53:e6:c7:90:58:d6:6c:ba:8d:24:88:
5d:77:b9:fb:37:88:b7:76:59:85:97:36:68:98:8d:
6e:80:d1:fd:14:d8:a7:09:43:a8:f3:eb:33:75:8b:
5d:9a:75:d0:83:cd:3b:41:7c:3a:6d:4e:de:cc:af:
dd:2e:15:44:45:9b:71:56:7b:96:4e:2b:7c:c5:15:
61:1b:33:4a:bb:1d:95:aa:d9:d2:fd:eb:51:5b:cf:
56:26:3a:4a:23:76:5a:43:3d:9e:5a:e8:75:9d:bd:
6f:f2:5b:59:32:73:74:b4:0f:cd:39:8b:c5:90:81:
e6:54:68:ca:07:42:9f:d0:b9:01:2d:17:a0:17:bb:
50:8b:4d:e5:a9:52:23:2e:ab:f4:8a:e1:7b:1a:f0:
99:2d:b5:02:39:64:a2:ff:99:4a:51:1a:b7:11:42:
79:72:4a:6c:e2:37:9d:37:ff:39:d2:50:5d:3f:79:
39:5d:19:5e:c8:3d:8c:ff:e6:c8:74:eb:85:97:e8:
6e:4f:1a:05:0c:67:b6:0f:6b:95:81:95:be:41:3d:
90:30:7e:c8:30:f4:cf:ec:b7:b6:e7:bd:22:e1:6d:
13:e7:7b:70:47:09:d2:ef:90:65:88:70:92:ed:85:
cd:fa:0b:9a:07:cc:29:d8:77:62:4f:50:74:56:91:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:C8:76:E5:90:48:77:34:0D:90:76:4C:8F:76:DB:82:81:B5:F6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ryjIduWQSHc0DZB2TI9224KBtfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c5:78:84:09:6e:ca:7e:d9:f0:b6:96:f2:05:28:7f:91:1d:
ac:c5:32:74:76:96:c5:be:fd:1d:5f:f0:4e:8c:52:56:39:64:
0f:55:26:19:0b:90:de:22:42:bc:30:ac:f9:90:72:62:a8:28:
8e:30:75:31:70:0f:e1:94:94:d5:d4:24:a4:c0:df:2d:e0:51:
42:12:01:cc:1f:90:42:2c:07:1f:0f:a0:25:c9:99:9d:6d:82:
d5:e7:b3:05:af:49:a9:cf:7d:71:46:dc:86:25:6a:ab:47:c9:
7c:5f:87:0e:01:eb:ff:2b:3e:98:bd:5a:15:0d:2e:f8:64:fd:
b4:81:24:d2:bf:fe:0d:d3:f8:41:ff:02:01:74:d3:c5:52:4d:
71:e9:41:55:66:9e:e1:15:e9:85:2e:be:0b:e7:e9:1e:89:74:
01:3b:c9:c8:44:b5:12:d1:16:81:a0:3e:2b:cf:90:45:46:cd:
91:53:31:45:9f:3f:f1:5b:b9:9a:77:6a:54:3d:db:a8:4b:96:
17:53:da:5a:f7:61:21:ef:91:b9:6f:d1:71:aa:0f:9b:dd:a5:
d0:2f:aa:51:6b:46:bb:f5:0a:32:9f:31:00:db:7b:9b:55:08:
55:fc:c5:33:e7:68:cb:b3:c3:71:c2:37:1c:a7:46:26:2d:66:
59:89:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:49:23 2024 by rpki-client on console-ams.rpki-client.org