Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/rPuXy-ioJmWHwxUUeyXyDZFFv5k.roa
File: rPuXy-ioJmWHwxUUeyXyDZFFv5k.roa (raw, json)
Hash identifier: R0a+a2FGDA/F9wA5CVMpj2jwf/dC6RKzswo0uLbIC8A=
Subject key identifier: AC:FB:97:CB:E8:A8:26:65:87:C3:15:14:7B:25:F2:0D:91:45:BF:99
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 018CC3B72A3E467130B563D5E88DF81D7602
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/rPuXy-ioJmWHwxUUeyXyDZFFv5k.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203981
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:3e:46:71:30:b5:63:d5:e8:8d:f8:1d:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acfb97cbe8a8266587c315147b25f20d9145bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:7c:4d:c5:4d:36:20:0f:f5:51:5e:08:50:
0e:08:74:12:86:18:52:9a:20:31:77:f4:e5:be:ce:
17:e3:77:b4:52:00:65:17:85:3b:10:2c:08:a2:23:
5a:18:8f:8a:44:79:5f:94:2f:ad:1e:ea:ff:d7:56:
f7:38:42:b1:66:41:97:f5:b2:01:02:73:61:7a:ae:
f6:39:ba:bc:6e:96:4e:86:29:d5:ed:93:5f:72:5f:
a1:b4:be:bc:cf:26:13:03:18:52:3c:d3:b8:18:d4:
96:00:49:e4:73:f7:4c:dd:50:f4:36:43:60:68:ec:
65:d9:c5:08:41:67:00:f1:ce:dc:23:51:7d:05:5d:
6d:56:6c:8d:2f:37:a3:ea:fe:24:39:d6:d0:1b:df:
7a:0e:e1:0e:d3:e4:92:0e:35:1d:82:fb:8f:00:30:
3d:32:f3:1b:b5:01:e8:99:51:02:e7:ac:7d:7b:69:
f1:bc:9b:45:77:c9:1f:e0:26:ec:cd:70:e9:7c:af:
5b:f5:40:79:78:b2:f1:3e:9f:af:97:bf:e4:d1:5c:
b5:be:5e:ae:0a:19:c2:ab:32:ab:cd:c3:51:57:c0:
f1:75:60:4b:80:a9:eb:c0:4b:18:a3:1a:9c:09:be:
b7:af:39:b5:a9:4f:75:e0:5b:15:40:0b:0b:ad:87:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:97:CB:E8:A8:26:65:87:C3:15:14:7B:25:F2:0D:91:45:BF:99
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/rPuXy-ioJmWHwxUUeyXyDZFFv5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
74:38:59:28:d6:4e:80:85:a3:6b:da:3c:77:fb:03:b8:99:19:
fd:e2:71:6f:de:82:a8:f5:af:1f:14:0d:3f:2b:16:2c:1f:cf:
38:ff:bf:52:9b:e8:8f:1a:07:a7:d7:d1:eb:7f:32:58:a3:e7:
0a:97:3b:f6:2e:35:9c:44:28:29:af:e8:e1:d8:32:ec:5e:e0:
2e:1a:d0:21:3c:11:64:c3:fb:c8:b6:d9:e5:34:15:00:f6:ad:
78:cb:ce:9f:af:84:d7:da:a6:a9:8f:9d:d1:b8:f1:6f:81:7c:
33:0a:16:c2:3d:bb:78:c1:d2:4e:a5:3a:f0:4c:0b:d8:cb:19:
ae:05:f0:fd:fb:9c:6e:b2:a8:c0:da:87:d2:39:44:22:82:8b:
f6:23:95:6f:b9:16:fe:ef:34:03:88:b9:38:53:4e:37:10:62:
bb:e9:14:73:8c:11:9c:52:0f:87:d0:86:86:94:52:98:5a:67:
e6:17:2a:ad:fe:28:e0:a6:a9:26:3c:d9:8e:48:54:33:b7:fe:
40:84:e4:e4:15:00:2a:4a:1d:6e:f6:d3:f1:2b:14:e6:10:14:
ea:ee:8f:2a:52:cb:0e:14:75:bc:69:4b:87:cf:0e:80:ae:65:
b2:24:53:7b:cb:bc:21:01:2d:c8:7d:90:90:5e:ba:e4:e1:78:
05:34:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:09:49 2024 by rpki-client on console-fra.rpki-client.org