Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa
File: 1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa (raw, json)
Hash identifier: 8kDULxw9z3gXp/AD8a9Ag0dsti3Un/ZQcx/ea3XVp2o=
Subject key identifier: F8:3D:A6:51:8E:E1:F0:80:B1:72:CB:1E:21:FD:1F:D9:9F:E8:3B:89
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018CC34966F00A459913703C8C6F95ADB935
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205297
IP address blocks: 178.236.138.0/24 maxlen: 24
193.32.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:66:f0:0a:45:99:13:70:3c:8c:6f:95:ad:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f83da6518ee1f080b172cb1e21fd1fd99fe83b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:7d:68:23:b5:ba:1b:47:7b:8a:4e:82:78:
4b:34:8a:3a:4b:5b:77:50:dc:37:a8:e8:80:07:f3:
72:25:b9:86:ef:e7:45:2b:a0:2b:fa:06:98:65:18:
11:d9:1d:dc:17:5a:f2:78:a8:52:0d:3c:03:08:da:
9e:47:24:2a:f7:31:87:0a:5c:ee:ae:45:04:e7:3f:
32:41:91:20:5b:3e:99:c3:1b:7f:ea:40:1e:82:4c:
9d:d5:e7:5e:ab:de:f3:14:d7:7f:9e:b4:25:a2:6f:
90:4d:6b:10:07:dc:b8:cb:f4:59:fa:68:c7:fd:72:
7d:b3:7e:c1:40:6e:62:d8:56:94:c3:f7:4a:8f:42:
bb:77:45:a5:a5:4e:ff:78:f7:e7:67:cd:5a:7b:0e:
e2:54:e2:19:42:0e:08:3e:22:18:fd:90:f7:c2:18:
d7:c9:66:ee:92:b0:0e:85:35:2d:36:a3:7c:ed:d1:
ee:96:7d:02:d4:84:c5:db:df:75:53:17:f4:63:81:
1f:19:a0:cb:73:4b:b9:c8:8c:f1:6d:22:22:8a:67:
11:95:03:e0:3d:e0:38:b0:f5:fc:ba:83:93:05:75:
fc:5e:3d:81:63:a2:94:b1:f2:3d:9f:f2:b3:9c:6b:
54:f9:e8:b4:96:e8:1f:f3:92:de:57:d3:ed:1e:4d:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:A6:51:8E:E1:F0:80:B1:72:CB:1E:21:FD:1F:D9:9F:E8:3B:89
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.138.0/24
193.32.200.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7d:04:07:c0:26:53:c8:c5:c6:a2:8b:82:a6:c6:d5:03:ec:
09:3b:49:bc:92:c7:e4:a8:a9:9b:86:3e:e6:ed:20:15:9f:d8:
a4:f4:05:48:b3:35:b6:b6:01:18:8e:72:6a:af:f8:a0:de:a0:
e8:65:8d:30:8e:3c:05:dd:77:1d:79:07:85:3c:ae:e0:89:05:
a7:e8:e5:ac:4e:e3:41:ca:40:14:c1:63:0c:75:62:ef:44:52:
f1:1c:7e:cd:2a:4b:2f:39:c5:02:b2:75:21:71:a0:18:4f:08:
0f:1f:b7:b2:76:83:42:30:e9:1e:94:6c:fe:24:42:a7:8d:5a:
f5:88:75:a0:b9:b6:4a:a3:39:97:c5:d6:f0:b0:7d:dd:2c:4f:
d8:dd:a7:b8:67:42:dd:62:87:bf:a7:ee:e5:3a:b2:9b:00:01:
45:a0:e3:0c:c0:b2:c3:d4:84:e4:80:79:c6:55:c0:94:db:c9:
91:52:c5:c2:5b:f2:3b:c8:67:c2:db:b7:46:9d:ae:95:11:d5:
cc:81:77:9d:d8:cc:d5:b7:3a:a6:17:1c:c3:8a:d8:68:a3:1c:
a0:ae:0d:b9:89:8b:cc:7b:df:1d:f0:55:b7:64:47:be:19:f9:
18:37:3f:aa:0d:34:85:f2:a5:48:35:d3:8c:e1:23:98:5a:2a:
58:01:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:50:35 2024 by rpki-client on console-fra.rpki-client.org