Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ccRRhKrMVjSjQouHIjhDfuG5FL8.roa
File: ccRRhKrMVjSjQouHIjhDfuG5FL8.roa (raw, json)
Hash identifier: Ld2+B/q8aAw4l6IlatN0XPLL9J0BqpVjMD91nc3tjxY=
Subject key identifier: 71:C4:51:84:AA:CC:56:34:A3:42:8B:87:22:38:43:7E:E1:B9:14:BF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB1EF6E595905B85C4D406F710764
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ccRRhKrMVjSjQouHIjhDfuG5FL8.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200030
IP address blocks: 178.156.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b1:ef:6e:59:59:05:b8:5c:4d:40:6f:71:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71c45184aacc5634a3428b872238437ee1b914bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:40:b7:97:24:ef:d9:95:16:91:fd:02:c3:
64:24:e0:9d:65:c2:8d:77:ff:5a:b2:ae:d2:36:10:
c4:18:a2:b4:57:5a:a0:10:12:7e:c5:a2:3c:e7:c4:
fc:59:03:d8:84:01:55:1f:a7:1c:59:9e:b4:fd:65:
92:6e:f9:11:8b:a8:42:96:1b:0b:19:9c:8b:ab:1d:
ca:e6:e3:61:7d:14:ce:71:52:7d:65:b3:cd:e8:ae:
8c:b4:b5:78:f3:c2:ad:12:29:bf:c8:2a:25:8b:c7:
13:5f:24:ea:4d:fa:b6:66:79:ec:bf:e9:d3:d6:f2:
27:fa:01:79:b4:93:e4:f4:48:82:0a:f1:6f:fa:1a:
60:2c:83:38:7f:d5:82:17:9d:39:58:95:a6:7f:a3:
1d:b6:40:c0:7f:09:14:a1:6c:43:2e:b3:a0:99:fd:
52:a6:8c:cf:8b:cb:a7:93:4f:14:ef:3b:43:de:29:
f0:6c:0e:c8:46:f6:d5:ac:88:cc:58:fb:88:6d:32:
07:90:c5:b1:9a:a2:47:42:b5:21:b9:29:4e:ff:24:
19:02:c7:ad:7b:23:64:6d:2d:c6:8d:60:67:e4:ee:
2d:b5:3f:9a:9d:7b:5f:84:52:4a:9b:92:e0:14:ed:
07:ca:b8:fa:11:1e:d6:76:b1:c2:f4:72:9b:0b:ff:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:51:84:AA:CC:56:34:A3:42:8B:87:22:38:43:7E:E1:B9:14:BF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ccRRhKrMVjSjQouHIjhDfuG5FL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1d:9d:e1:7f:bd:2c:f5:15:5c:3f:8a:6f:9b:da:32:ef:9d:
f0:37:c3:c9:af:48:3e:64:dd:ae:28:5f:2a:83:70:e8:8c:ef:
45:1d:4e:b4:cc:f8:d9:a6:d2:38:c9:7b:17:ec:e8:6b:2c:01:
9f:2e:40:18:75:2e:90:69:0d:13:9f:57:12:ad:78:a7:1e:d8:
32:c9:9a:02:a2:33:f4:b7:86:1b:93:24:79:77:05:fb:0b:4f:
0a:66:41:c2:73:6f:a8:31:6d:88:18:8a:bd:82:c7:0c:3f:18:
5c:d3:0d:ca:75:25:b0:5d:10:d2:b7:eb:29:c8:51:86:e2:3e:
f8:9a:80:c6:1f:4e:38:5f:5f:ba:c0:54:d2:9d:e3:c2:8b:e3:
0c:ad:c9:de:a0:43:86:15:4f:56:0b:c3:65:13:6c:c6:73:c5:
6f:ab:54:10:e8:cc:4b:2d:17:17:58:85:be:30:c5:22:c6:48:
47:3a:df:c7:44:b6:e2:d8:13:39:4b:16:c0:94:c2:83:0f:a6:
47:a3:29:88:c6:3d:6b:e4:b5:40:a0:f1:46:2d:b8:27:b3:7c:
56:a9:23:bb:e6:e1:2a:7a:1a:8c:9c:9a:e3:8f:a4:bc:eb:21:
71:02:bb:df:2c:fb:01:5c:d6:7f:12:4f:fa:44:87:b0:22:99:
e0:94:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:25 2024 by rpki-client on console-fra.rpki-client.org