Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2Es1T8Q5xL7i6c82wtbhUeNO8eE.roa
File: 2Es1T8Q5xL7i6c82wtbhUeNO8eE.roa (raw, json)
Hash identifier: D1+2m+1I22LdmI/ZXmZe6RyhixlB5UTC+ZzhzMiFhDE=
Subject key identifier: D8:4B:35:4F:C4:39:C4:BE:E2:E9:CF:36:C2:D6:E1:51:E3:4E:F1:E1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B874E6CFEA9D3A0FC94D8DCA6668C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2Es1T8Q5xL7i6c82wtbhUeNO8eE.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56872
IP address blocks: 178.16.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:87:4e:6c:fe:a9:d3:a0:fc:94:d8:dc:a6:66:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d84b354fc439c4bee2e9cf36c2d6e151e34ef1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:13:5a:3e:ba:ea:b4:df:98:5f:83:cb:53:
b5:f6:34:29:e5:fe:a6:f4:5f:12:39:a0:b4:18:ef:
35:86:16:76:1d:24:95:72:68:49:dc:15:03:7f:ff:
09:eb:03:55:78:58:52:df:61:e6:14:df:93:f4:95:
81:87:dc:44:df:ae:e8:e4:e5:b6:80:96:76:28:9c:
67:27:4d:cf:0b:41:05:43:04:9e:92:c7:45:bd:46:
a8:cd:a2:1a:c2:39:53:80:02:b3:db:0a:c0:49:ed:
60:23:56:ef:9e:8c:72:28:33:20:94:24:71:6d:dc:
33:98:78:b8:3a:ad:0b:10:45:ea:72:a8:85:a2:2c:
70:16:0a:71:36:40:4f:8c:ff:3d:9e:9a:ef:bb:42:
b7:63:0d:33:af:32:01:dd:c1:59:60:eb:a3:33:1f:
81:f1:ec:b4:02:11:bf:28:ab:1a:fb:8a:b2:63:f0:
90:e7:8a:c3:17:10:11:a6:54:7d:90:62:3f:a3:8b:
fa:b1:be:44:44:99:98:e8:0f:41:3a:5b:c0:4c:b5:
c0:63:d7:32:da:c2:81:9d:47:61:86:e6:fb:55:80:
ca:f2:a5:fd:96:64:ba:40:3d:35:67:29:9f:ea:56:
85:5b:34:32:db:eb:12:15:4f:70:20:06:3f:a1:bc:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:35:4F:C4:39:C4:BE:E2:E9:CF:36:C2:D6:E1:51:E3:4E:F1:E1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2Es1T8Q5xL7i6c82wtbhUeNO8eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.125.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7e:f3:5b:9d:2d:f7:bf:08:a6:a9:cb:dd:82:c2:07:1a:e9:
4b:59:51:a9:44:1a:e2:84:5e:55:e9:23:66:cd:9d:ea:83:69:
3c:aa:47:12:f5:25:eb:3d:f1:2a:fc:8e:75:55:0f:f3:4a:3a:
0f:65:1c:db:be:b5:af:b5:37:13:9d:45:99:42:8b:45:4e:a6:
35:d2:86:0c:65:17:06:20:84:d8:13:41:7a:17:4d:77:c8:3f:
91:0a:1f:73:22:96:5e:96:b1:81:de:74:d4:2b:cd:72:06:32:
23:57:50:3e:ee:4c:53:06:3b:ef:0b:99:e7:59:ae:c9:ae:0a:
56:05:9a:ba:c8:59:2c:60:c4:45:de:ef:49:bc:df:d7:ed:c8:
33:28:33:f1:6d:2f:a3:86:0b:5e:99:54:30:95:eb:cb:40:23:
40:20:6d:92:e5:db:f0:e9:4c:36:67:02:57:65:95:e3:a5:32:
9c:3f:5e:6a:13:09:87:64:be:7f:e1:f4:e3:e3:73:5d:74:75:
1e:78:76:fe:14:ad:0f:d9:de:3c:97:6c:a9:87:2a:12:40:1c:
8f:4d:5c:02:09:eb:86:7c:37:ff:c5:d2:ed:ae:59:0a:ac:0f:
2c:6b:0a:43:70:4f:1a:25:a8:b6:5c:84:15:09:1d:eb:24:4c:
9e:c1:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org