Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/s-Wsv7TovzAl56f0K_oGzQGqhEg.roa
File: s-Wsv7TovzAl56f0K_oGzQGqhEg.roa (raw, json)
Hash identifier: L3mhYjPcyWGGh7pdq6w30+XReu6MbFFfvTV6X1ZBk3A=
Subject key identifier: B3:E5:AC:BF:B4:E8:BF:30:25:E7:A7:F4:2B:FA:06:CD:01:AA:84:48
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 018CC8DD986FF2CB83D68009AD4B536C88BF
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/s-Wsv7TovzAl56f0K_oGzQGqhEg.roa
Signing time: Tue 02 Jan 2024 06:30:14 +0000
ROA not before: Tue 02 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203201
IP address blocks: 147.78.184.0/22 maxlen: 22
2a09:840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:98:6f:f2:cb:83:d6:80:09:ad:4b:53:6c:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jan 2 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3e5acbfb4e8bf3025e7a7f42bfa06cd01aa8448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:21:80:c2:f7:d5:f5:a4:ab:e5:45:a3:8b:
59:bc:88:ba:8e:9d:c3:fe:83:8e:d2:49:18:8b:59:
98:6a:99:1d:d6:cc:59:db:fc:08:56:db:e3:a4:ad:
84:05:87:22:ec:b1:11:cc:7d:77:af:08:01:87:23:
3f:3b:b3:2a:4b:8f:1b:51:cb:87:a8:90:03:0c:9e:
2a:a6:af:97:60:b7:7e:02:63:3c:46:ac:02:07:6a:
17:33:e1:07:fb:f9:7b:86:f4:a8:66:7b:d1:82:0d:
2a:32:ce:e6:de:d6:e2:3e:5e:98:a9:7f:c3:5a:62:
23:8e:f6:13:4e:fc:1a:48:83:13:11:b7:86:64:9e:
33:77:d2:59:cf:82:8c:f9:76:35:69:96:ee:52:93:
cf:05:8c:79:f6:17:45:f8:85:c9:3c:4b:8e:ee:cf:
f0:0e:29:c1:98:b7:64:71:1c:38:d7:bc:aa:90:3e:
21:fe:41:36:f3:44:4c:41:4c:7c:2e:40:93:d2:19:
16:10:bb:b5:b8:11:15:11:a3:b1:17:09:9e:8f:cf:
8d:f3:e3:29:2b:50:cc:fc:d7:81:02:50:62:67:72:
79:02:43:2b:c1:c5:17:0b:64:8e:c5:1d:3d:f1:6e:
19:3b:a1:e5:a3:76:67:20:85:4d:fb:14:f6:ab:32:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:AC:BF:B4:E8:BF:30:25:E7:A7:F4:2B:FA:06:CD:01:AA:84:48
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/s-Wsv7TovzAl56f0K_oGzQGqhEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.184.0/22
IPv6:
2a09:840::/32
Signature Algorithm: sha256WithRSAEncryption
48:ae:1c:50:e3:0b:6d:08:fb:1a:e0:98:cc:a3:e7:0f:46:29:
25:a0:33:66:07:70:aa:35:f9:27:90:fd:c0:cf:0f:ad:71:5a:
9c:68:c3:01:fd:06:7a:29:f2:d0:cc:81:74:4c:07:69:99:6a:
58:b8:de:0a:d6:0a:a1:82:25:d5:d7:0c:2a:ea:5b:7d:1c:4e:
76:f6:63:21:7f:69:14:fe:73:60:b2:42:09:8e:35:ac:65:b7:
ba:cf:01:ef:73:f7:a4:57:af:cd:32:fc:cb:d5:b9:d2:a4:40:
16:dc:3e:55:27:a9:13:32:dd:fd:a4:0c:c2:85:9c:20:ff:c6:
5f:3a:12:a7:28:70:61:f4:56:80:ce:90:b3:23:c8:ef:c4:2a:
a9:16:95:dd:ec:44:62:0e:4d:c8:83:79:5e:74:4c:8e:c8:aa:
f0:08:3d:49:87:07:dd:5e:2c:39:39:6a:1d:be:5c:eb:05:51:
f2:b5:b3:1f:06:51:13:e7:6d:f7:7b:53:9b:67:13:20:a1:17:
0d:98:1a:6b:95:20:23:46:7b:3e:0e:d9:0d:6a:67:b7:65:09:
73:8e:39:9f:0f:d6:a4:46:fe:7d:a1:b2:ad:6a:dd:09:ce:8c:
6c:7b:3f:d2:86:46:f5:90:a7:cc:de:a2:5b:c5:65:54:a7:8a:
26:31:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:49:55 2024 by rpki-client on console-fra.rpki-client.org