Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/Cr6kj8xBXwkakbHwD4TMez2eATA.roa
File: Cr6kj8xBXwkakbHwD4TMez2eATA.roa (raw, json)
Hash identifier: jeQY3s1SId/n3SCGZA3S8peuEAOrYM7NEzSkpvLTznk=
Subject key identifier: 0A:BE:A4:8F:CC:41:5F:09:1A:91:B1:F0:0F:84:CC:7B:3D:9E:01:30
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 018F53DBACCBD8F47D60825ECDA5DF3A4081
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/Cr6kj8xBXwkakbHwD4TMez2eATA.roa
Signing time: Tue 07 May 2024 16:20:56 +0000
ROA not before: Tue 07 May 2024 16:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.78.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:db:ac:cb:d8:f4:7d:60:82:5e:cd:a5:df:3a:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: May 7 16:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0abea48fcc415f091a91b1f00f84cc7b3d9e0130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:97:8c:08:b0:b6:be:0f:fa:8f:1e:da:a3:
94:6f:9f:c9:3b:53:e1:c1:0f:10:a9:ec:93:c3:98:
80:c7:7e:bf:48:f9:77:3a:50:08:0b:99:5e:77:32:
92:15:cf:f7:6b:aa:b7:6b:da:71:56:de:2e:50:c5:
4f:96:d9:9d:e3:3c:32:a9:e8:2c:81:cc:3e:1e:e3:
04:d5:a6:bc:3f:c0:d7:2f:27:89:ee:7f:9a:78:61:
58:93:49:b1:61:ae:f3:d1:14:19:4f:05:29:47:c4:
6c:ac:94:88:71:0d:16:34:7e:38:37:bd:c4:13:be:
46:1d:57:5c:4e:ac:95:a9:40:c2:27:d5:76:13:f9:
5a:0c:03:98:de:9d:ac:b8:2a:82:f1:67:d5:7d:5a:
d2:e2:a8:b8:a7:25:18:86:b5:03:78:fb:aa:a0:ea:
de:b7:18:01:9d:d6:d4:a9:c9:27:db:23:03:e9:fe:
5b:42:d9:0e:97:3f:7d:10:15:d7:5c:fd:3a:a6:b5:
06:b0:1e:52:eb:3a:a9:4c:2e:55:6a:af:d6:9e:5b:
b5:a7:f1:8d:58:77:1a:c6:e9:a3:ba:cc:b1:89:18:
7c:64:2b:73:e8:bc:01:4f:8d:1d:7f:fc:dc:b0:e8:
19:36:de:34:c9:b2:06:c7:52:6b:a2:4f:c6:6b:43:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BE:A4:8F:CC:41:5F:09:1A:91:B1:F0:0F:84:CC:7B:3D:9E:01:30
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/Cr6kj8xBXwkakbHwD4TMez2eATA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ef:31:b8:22:9c:4c:b7:a9:d5:26:f7:16:1d:ec:57:4e:f3:
88:27:6f:a2:ed:45:fd:cf:3b:69:b1:29:fa:3e:30:2f:94:38:
84:65:eb:a7:e2:7c:2b:49:b3:d4:92:04:ba:c9:35:26:35:b6:
0c:c3:d3:21:b4:e5:03:e6:9d:e7:c6:42:35:ba:2e:ee:b4:a5:
8a:ca:dd:95:cc:a9:b7:a2:82:77:8a:9b:37:9f:3a:7a:8b:b3:
d6:e5:e5:72:89:f0:ae:2e:04:34:57:b8:f3:2f:f5:fb:8e:b5:
72:03:4e:44:93:f2:74:52:12:de:59:3f:28:2b:5e:77:bf:f2:
d5:40:09:25:81:c9:44:4b:29:d0:e8:25:de:64:35:56:10:4d:
87:a0:f2:01:70:77:18:cc:f5:92:fa:54:64:69:41:25:f5:45:
67:6e:68:00:7e:3d:3d:e1:b5:3d:a7:ef:49:db:5c:8f:42:79:
a6:9f:23:a3:c5:20:57:2d:06:4e:57:bf:62:15:d4:40:77:8a:
a9:9a:8c:f3:cf:5b:2f:d3:42:93:fe:e1:48:9c:cc:2e:1d:71:
76:e7:1c:51:1c:64:93:10:b4:f0:52:f2:43:07:c9:aa:f1:39:
29:bf:7b:48:16:9d:15:00:e4:a0:20:95:bc:59:31:17:88:e5:
2c:0e:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:03:48 2024 by rpki-client on console-fra.rpki-client.org