Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa
File: b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa (raw, json)
Hash identifier: JJCStBdPAOZM9cRkK3ShwxPKN9CUxJTbQTAHmBvAH/c=
Subject key identifier: 6F:43:F9:09:7E:1B:1B:2E:DE:B2:45:8B:07:45:B2:D3:0A:7B:C9:95
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 018CC500151887901DDF93A81F33F52FEF1B
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48642
IP address blocks: 178.217.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:15:18:87:90:1d:df:93:a8:1f:33:f5:2f:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f43f9097e1b1b2edeb2458b0745b2d30a7bc995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:20:67:b9:6f:40:55:da:7f:ad:61:60:43:
b9:03:26:71:7b:37:7a:57:2c:f4:38:e1:f8:a9:d5:
f3:9d:c3:21:28:58:1a:16:c6:fd:6f:a0:96:b9:d0:
5d:8e:47:77:63:6f:4c:df:e7:2f:f9:9d:ac:6e:c2:
4c:4d:cb:71:e8:28:1c:e8:d4:50:76:e7:f9:51:ba:
9d:04:ac:dd:f5:e0:6c:46:6e:40:8f:f7:d8:0f:84:
1e:63:f2:d8:40:5e:e2:aa:7c:7b:1b:93:8a:b1:d5:
10:47:33:d5:1b:8a:7f:ee:84:61:6d:50:fc:09:c6:
2b:d5:53:d7:94:b9:a0:85:6d:29:ef:91:1c:94:98:
9c:78:1d:78:f1:fd:b9:38:2d:2b:31:2d:e9:23:b2:
0b:15:cf:d5:bc:89:88:1d:6d:57:e4:a6:c3:ac:7d:
c5:4a:88:b7:c4:55:97:bc:27:65:41:f2:bc:31:3e:
70:25:bf:dc:5b:a0:47:cc:a9:d9:7c:bd:c0:37:b6:
eb:18:1a:13:55:4e:be:f2:11:e3:c1:a8:c1:e3:b9:
f4:b7:8e:0f:7c:7c:c3:4b:9e:26:f2:72:91:e6:a8:
c7:27:cb:57:f5:52:b6:ad:17:6e:e6:3e:85:3f:09:
1a:09:72:ed:05:06:20:25:a3:32:fa:93:c1:3b:d9:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:F9:09:7E:1B:1B:2E:DE:B2:45:8B:07:45:B2:D3:0A:7B:C9:95
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.224.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:29:1d:91:a9:b1:96:1a:c4:f8:b7:a9:d2:c6:67:ce:ef:60:
f7:46:4f:a2:2b:31:4b:36:fd:8e:ac:8b:9d:59:b5:3e:ed:0b:
ca:f4:d8:6e:be:61:0d:a4:8f:06:88:45:6f:b0:17:2e:14:7c:
43:e5:7c:bc:e0:16:25:06:c5:91:86:a2:4a:f2:e9:78:ed:bb:
0a:cb:6c:da:70:31:cb:7f:dd:39:ca:96:e3:d5:cd:a1:81:64:
94:61:04:f4:3e:b3:34:51:c2:d8:8b:c0:b4:b3:23:db:5c:5f:
2a:86:c6:0a:7f:97:e6:51:c2:86:ef:b2:a2:c1:2c:61:fd:b1:
18:72:0e:a8:5d:b1:4e:8c:3d:fa:7e:ab:7b:52:41:4d:a3:bb:
25:73:df:05:8b:7e:1a:12:f3:90:b0:dc:03:2a:fc:7a:fe:4a:
77:62:1d:19:27:92:f1:03:6f:09:a6:e9:db:60:ed:9c:3d:fd:
b4:c9:86:a7:30:28:46:da:3b:ef:1d:6f:bb:f7:a8:9c:56:f0:
b4:f3:fd:ff:5e:26:f4:b2:c8:e2:c4:c4:d4:88:d6:08:a4:c6:
2c:f7:a8:24:3a:5e:66:93:c1:0b:28:cf:8b:40:e8:99:8d:6f:
36:39:d8:d9:7b:a8:b8:0b:6b:f5:f2:9f:42:0a:a4:39:66:9d:
09:56:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:42 2024 by rpki-client on console-fra.rpki-client.org