Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/3SnHWq26Imq2tsN69-GufrCokQ8.roa
File: 3SnHWq26Imq2tsN69-GufrCokQ8.roa (raw, json)
Hash identifier: 7jcmBDHfuEOe6AvYd3IQcuYbf9c6avDpbyvJuR3Ggq8=
Subject key identifier: DD:29:C7:5A:AD:BA:22:6A:B6:B6:C3:7A:F7:E1:AE:7E:B0:A8:91:0F
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE54D1DA9206736E1D62DC8146F67
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/3SnHWq26Imq2tsN69-GufrCokQ8.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15362
IP address blocks: 78.130.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e5:4d:1d:a9:20:67:36:e1:d6:2d:c8:14:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd29c75aadba226ab6b6c37af7e1ae7eb0a8910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:35:73:4e:c9:b9:fe:a4:ba:81:cc:a5:8e:
20:99:52:62:bb:ef:86:72:b9:82:e2:4e:38:4a:b9:
9d:52:44:2c:30:9e:36:25:c9:ce:9a:39:23:d6:3c:
c3:28:42:81:45:3c:51:56:85:7e:c0:27:68:e2:a8:
6d:cf:96:e6:f9:43:56:8f:c8:d4:0d:43:78:0d:6f:
5d:c2:27:1c:8e:4d:b8:d8:1e:0a:3e:73:cf:a0:bc:
d6:e3:88:c6:ea:e4:ac:d3:3c:ae:4e:57:2a:ab:da:
21:70:cf:39:9b:e7:9e:7c:88:c9:1e:b4:5b:9c:ff:
26:e1:d5:26:e2:a8:a3:3f:c5:a0:5e:ab:f3:36:6e:
70:61:95:76:04:43:7b:a1:3f:3d:cd:84:bb:0e:25:
8e:ec:b2:cc:a4:6c:94:c8:86:8f:04:6b:14:af:e2:
c8:94:7b:f6:79:14:39:e7:5a:26:61:e7:29:32:44:
3d:65:58:56:95:3a:91:f8:ae:ba:db:33:d9:ff:53:
f6:0e:ed:18:15:46:ba:63:28:fe:7f:83:b5:b2:66:
a3:26:1d:79:59:a5:4d:e7:15:a7:b4:2a:3f:7e:87:
2c:b5:7c:d2:2e:80:aa:e9:29:20:5d:95:89:48:d6:
99:0c:74:ab:3d:cb:cb:e9:83:a3:c4:c5:dc:72:50:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:C7:5A:AD:BA:22:6A:B6:B6:C3:7A:F7:E1:AE:7E:B0:A8:91:0F
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/3SnHWq26Imq2tsN69-GufrCokQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
80:19:8d:4e:25:ad:50:c3:2a:7a:1f:44:15:45:10:28:7f:ba:
18:78:73:28:a1:f4:eb:15:d1:4b:ab:1d:fa:58:da:7e:05:45:
b7:51:7d:5a:9a:66:c6:68:a0:71:67:94:5a:35:f9:b5:12:b4:
02:d6:72:a8:b7:fc:92:b2:39:4b:c6:3c:d4:18:4d:49:d9:5a:
c2:f8:33:1a:08:18:2f:cd:5c:43:62:58:42:22:de:45:f0:bf:
94:29:86:71:20:d8:11:a8:c8:31:7c:28:ca:36:31:46:63:e6:
38:a3:28:00:ae:c4:5c:ad:e4:02:c3:6b:fa:7f:e7:15:b3:eb:
12:33:9d:4a:79:68:19:fe:83:94:e0:27:39:f2:6d:05:55:d1:
8d:c0:89:b4:e3:db:96:eb:f0:e0:99:1b:54:64:87:d0:d9:76:
17:0f:41:05:ea:b6:9e:a0:cf:16:26:e5:32:26:c4:0f:92:63:
eb:d7:67:0d:6f:26:a7:0d:68:2b:68:9c:86:70:28:18:2e:fc:
72:2c:3a:d6:ad:6f:07:e0:e4:da:9f:6c:c9:2b:90:ef:bd:ae:
96:b1:ec:ad:d3:59:ad:83:45:e2:8d:a1:93:28:19:61:79:33:
14:47:c0:2a:a2:a8:44:1f:9c:4d:cb:97:90:3a:45:2c:5c:c0:
9a:d3:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:55:54 2024 by rpki-client on console-fra.rpki-client.org