Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/OarbDUDhKItL63OO4A2RMjB4ius.roa
File: OarbDUDhKItL63OO4A2RMjB4ius.roa (raw, json)
Hash identifier: lI+xRv2gMphdwp/HOh7yCYGTes1IjaaTU+L6uZAbmdE=
Subject key identifier: 39:AA:DB:0D:40:E1:28:8B:4B:EB:73:8E:E0:0D:91:32:30:78:8A:EB
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018CC3492A382F06838E53ED87D87E30F547
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/OarbDUDhKItL63OO4A2RMjB4ius.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212522
IP address blocks: 178.132.70.0/24 maxlen: 24
2a03:2380:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2a:38:2f:06:83:8e:53:ed:87:d8:7e:30:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39aadb0d40e1288b4beb738ee00d913230788aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:40:ec:bd:b6:ed:be:ee:a7:2e:d7:85:51:
16:32:db:59:04:73:8e:e9:72:17:07:02:8f:67:4b:
d7:55:dc:1c:72:cb:9f:2f:6f:6a:12:7a:9f:81:55:
b6:37:88:48:39:90:84:43:9e:cc:c8:77:d7:6f:a0:
b6:65:a3:b2:f0:f7:26:e0:94:f8:20:0e:3f:b4:8e:
e1:6e:51:e0:94:37:c9:2f:29:af:a8:d7:c9:36:77:
8e:5a:40:80:8f:5f:4b:e9:0e:d4:4c:e3:99:a3:46:
e5:15:2a:05:e8:0b:07:91:88:a0:d3:16:94:8f:6c:
1f:99:3a:99:cb:be:7d:37:e3:88:ae:02:b4:75:5e:
8a:f1:89:38:17:2d:02:72:b8:5a:40:61:b2:a0:ea:
9d:5b:f5:b3:15:2c:2a:fe:2e:9a:67:c9:b3:e8:e5:
18:7b:ab:a0:85:67:18:f0:c3:56:97:f2:3d:e3:20:
fc:27:bf:40:79:0d:93:c3:bd:b9:61:5d:35:04:d0:
b2:4c:0c:86:61:dd:78:6f:dd:64:cc:6a:e5:ac:48:
7e:b1:b6:39:cc:1a:65:45:08:28:ec:94:e6:8b:84:
85:e8:ed:7d:f6:e4:4b:48:5b:4d:f5:56:bb:01:6a:
38:1c:e7:1e:9e:6b:d2:dc:09:69:aa:25:10:22:e7:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:DB:0D:40:E1:28:8B:4B:EB:73:8E:E0:0D:91:32:30:78:8A:EB
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/OarbDUDhKItL63OO4A2RMjB4ius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.70.0/24
IPv6:
2a03:2380:5::/48
Signature Algorithm: sha256WithRSAEncryption
73:f3:44:22:d7:8e:4a:77:5c:f7:fa:3a:3f:ff:70:ea:10:7c:
09:9b:0c:07:7e:f1:e4:72:de:5a:78:3c:0f:cf:c0:29:7d:e9:
10:d9:be:66:4e:9f:92:bc:1f:a2:78:68:11:20:8d:5b:d0:22:
b0:37:d3:08:c1:ec:25:7b:b8:73:be:9d:5a:be:c5:b7:af:8c:
f1:6d:15:20:83:f1:a4:37:ed:3c:c1:bf:e6:a6:ce:fa:1a:93:
80:92:c6:a9:7e:bb:8f:b4:bd:3f:e4:a4:7c:1e:7d:de:87:07:
ab:57:a4:a5:fb:93:36:20:6a:ec:25:58:54:c0:08:d7:9a:a2:
00:d7:c4:27:da:77:f8:d9:98:ab:c7:a8:7f:f5:14:59:52:a6:
b0:ad:2a:13:ef:8e:7f:c9:2d:54:13:66:5b:8d:b9:99:94:7e:
0a:ca:15:53:fd:6c:6a:c4:7a:e9:41:7c:19:d6:f1:07:23:e9:
d0:b3:a2:e9:46:d9:64:78:a3:01:0a:42:54:1a:63:7e:84:ae:
45:e3:2c:8c:99:de:b9:dd:ef:fc:a0:7d:22:a9:cc:26:be:b6:
d1:0a:58:be:10:6f:98:b1:01:a0:21:a6:38:13:e0:7a:b0:92:
1c:6e:b2:c2:aa:9f:52:52:1f:34:80:36:9c:68:34:61:a5:85:
c2:01:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:37:09 2024 by rpki-client on console-fra.rpki-client.org