Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/O7HT1pkr_1BIMBTudTYt-ILbXVM.roa
File: O7HT1pkr_1BIMBTudTYt-ILbXVM.roa (raw, json)
Hash identifier: PB3VUEwhbe2kOhB4puwrkotqrEmLCfflFCzx0ibb3Bk=
Subject key identifier: 3B:B1:D3:D6:99:2B:FF:50:48:30:14:EE:75:36:2D:F8:82:DB:5D:53
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE83F7F768DFACEF56E85099C3659
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/O7HT1pkr_1BIMBTudTYt-ILbXVM.roa
Signing time: Tue 02 Jan 2024 08:32:55 +0000
ROA not before: Tue 02 Jan 2024 08:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47647
IP address blocks: 78.130.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e8:3f:7f:76:8d:fa:ce:f5:6e:85:09:9c:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bb1d3d6992bff50483014ee75362df882db5d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:14:5f:ad:b8:83:ca:65:e8:7f:d3:3c:ae:
92:c1:4d:37:28:15:6e:7f:cb:97:2c:02:12:f5:48:
f8:57:e6:0a:66:35:00:77:12:52:5d:e3:24:1c:71:
4e:8d:bb:cc:45:af:76:5f:d8:88:a7:a9:18:44:a3:
46:01:e1:67:f9:dc:37:b6:bb:2e:4d:86:3e:16:5e:
52:0f:91:a0:b6:71:3a:78:10:23:e3:86:f3:68:50:
71:54:bb:3b:b5:fe:cc:2d:a5:79:11:07:a8:be:c7:
57:41:82:da:75:ce:bc:ed:a7:49:71:c8:65:90:e5:
09:0b:92:b5:ec:28:b8:62:b4:89:03:d2:80:49:85:
bf:c1:b6:9b:aa:50:6b:27:08:86:c4:19:68:8b:29:
1e:4d:7b:65:65:b8:45:2c:d4:b0:11:5a:d4:3b:0d:
8b:ba:f1:6f:95:27:c3:74:32:8e:78:b6:da:be:13:
b8:3e:09:6a:5a:ff:47:9d:17:0d:da:6a:ce:d4:db:
f2:8a:1f:01:d2:e4:2d:9d:b9:67:15:c0:24:6b:97:
66:38:fe:b2:cf:9a:49:00:2a:8c:2d:5d:9f:90:27:
2a:9f:a2:7b:ed:5b:bb:87:ae:59:e0:c0:a9:af:66:
e9:50:6b:2d:46:af:5c:e4:e0:70:1a:ba:71:0d:e4:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:D3:D6:99:2B:FF:50:48:30:14:EE:75:36:2D:F8:82:DB:5D:53
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/O7HT1pkr_1BIMBTudTYt-ILbXVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:70:e2:4a:fd:f5:4f:f8:b6:ab:4e:9a:15:89:8a:1b:8b:b6:
02:2e:b2:cd:0d:ae:6b:28:6a:99:e1:2e:8e:16:8f:52:64:82:
ef:7b:e0:22:26:3e:7e:59:14:6a:4a:32:d8:b8:f9:8e:f1:ac:
60:f0:4b:10:4d:38:cf:8b:eb:82:94:4a:06:98:b2:2e:05:8d:
52:78:e1:0a:8b:ec:91:0f:e6:f0:31:35:a3:74:b6:cd:46:10:
ef:41:b6:0b:11:14:bc:df:f1:a4:e1:61:4e:ec:24:b2:9b:5f:
41:f5:70:cc:74:2d:ed:68:79:6c:26:6c:0b:1b:8c:e5:42:3a:
a4:19:42:85:25:2c:e1:18:f2:17:7c:44:e2:29:7a:1b:17:46:
40:b0:18:9f:4d:dc:05:7f:af:69:ed:b0:9e:a7:18:ff:ad:f8:
da:81:cc:4b:dc:79:c5:d2:3c:32:80:e6:e2:74:8b:c7:0b:1b:
6b:f2:44:7b:eb:be:05:fd:e8:04:40:47:1e:a1:6f:10:f8:c3:
c7:22:b0:e9:d2:56:d1:4e:c6:b8:23:db:25:9f:35:40:0f:18:
dc:f8:d9:a9:1b:50:4d:bc:f0:81:17:f0:e1:f8:8e:8c:1f:51:
d5:f6:74:3c:7a:55:a1:a8:8c:b2:d1:d8:2d:d6:d5:4b:02:a9:
19:09:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:55:54 2024 by rpki-client on console-fra.rpki-client.org