Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/qH329yt5ljsK2zei8KxSecpo3yI.roa
File: qH329yt5ljsK2zei8KxSecpo3yI.roa (raw, json)
Hash identifier: CcfGk4nrc4YPajkrUbg1C76li4/LT66qvkLmeCVIpe0=
Subject key identifier: A8:7D:F6:F7:2B:79:96:3B:0A:DB:37:A2:F0:AC:52:79:CA:68:DF:22
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 018CC500CD07691DF9673EDB6FAEFA6103AA
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/qH329yt5ljsK2zei8KxSecpo3yI.roa
Signing time: Mon 01 Jan 2024 12:30:13 +0000
ROA not before: Mon 01 Jan 2024 12:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43277
IP address blocks: 78.109.96.0/24 maxlen: 24
78.109.104.0/22 maxlen: 22
78.109.108.0/22 maxlen: 22
185.90.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:cd:07:69:1d:f9:67:3e:db:6f:ae:fa:61:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jan 1 12:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87df6f72b79963b0adb37a2f0ac5279ca68df22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:b5:dd:2c:fe:ac:53:ca:ed:0f:ef:80:65:
76:13:2c:5e:ec:3b:ee:44:88:20:88:b7:96:88:54:
be:8d:df:6b:f9:01:59:a3:dd:ab:e8:8f:e7:e6:7c:
7c:08:32:a9:7b:c8:18:50:a5:58:2c:b9:2b:78:05:
1b:89:47:91:a9:c3:9e:bd:d3:84:0f:de:1f:f9:6f:
c6:3f:99:45:fe:01:3e:25:60:ae:35:6c:ed:a6:6f:
0a:08:0f:7c:5a:6a:7e:5c:53:45:00:c8:2f:ef:8f:
24:53:4e:7b:f1:3d:82:bc:75:b3:93:38:ac:55:66:
98:29:8f:b7:cc:b0:4c:3e:1f:06:80:7e:3b:6d:8d:
cf:cd:e0:f9:9a:74:d1:17:17:b3:4a:a9:27:ea:e6:
64:33:bf:8b:a8:99:6c:f8:3b:38:8c:c2:85:2f:42:
e4:a7:f9:03:04:ab:df:44:48:73:e1:d9:f6:58:2f:
d2:1f:04:03:f9:76:d4:f2:89:03:a6:b6:59:90:72:
c1:93:c7:24:54:12:e1:6c:1c:0b:7d:9a:57:eb:00:
35:bd:73:31:5f:1b:b7:d2:d9:3d:f1:7a:6b:6e:13:
9e:fe:f0:4b:f1:9a:3c:33:97:5d:73:e9:1b:93:79:
55:cd:8d:96:ba:79:de:0f:1b:83:77:bc:96:72:05:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:F6:F7:2B:79:96:3B:0A:DB:37:A2:F0:AC:52:79:CA:68:DF:22
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/qH329yt5ljsK2zei8KxSecpo3yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.96.0/24
78.109.104.0/21
185.90.132.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:c4:aa:ee:3d:ae:3c:62:1f:ba:81:ff:65:19:90:af:c4:82:
08:97:19:0d:95:cb:0c:d3:b7:97:58:a1:94:70:d9:95:a2:a0:
1f:04:b7:78:77:b1:14:89:58:bb:d7:bf:56:c3:9c:af:45:28:
3a:14:b7:79:3d:01:cf:f9:36:0f:04:aa:5e:4b:cf:a3:2e:bc:
e4:78:d0:74:d0:f4:c8:82:a2:ab:48:6f:7b:ca:de:37:0c:e4:
78:15:43:95:56:62:6e:4e:81:ec:26:72:62:dd:a4:d9:9e:2b:
cb:9f:e9:0a:e7:02:f5:3c:cd:da:db:f0:d5:56:ce:85:ce:ff:
dc:f3:66:3a:fd:7d:9d:a8:8c:37:90:0b:6a:6f:ef:6b:39:b1:
e0:97:41:36:42:31:6c:ab:14:99:57:3a:80:b0:81:d0:fe:fb:
99:28:d3:9f:ce:de:d4:e6:c9:3d:c2:fe:7f:73:ee:25:0c:29:
cd:a1:dd:3b:36:36:2e:2a:bf:96:3e:3f:dc:77:33:09:2a:5e:
16:f5:12:56:db:2d:22:d5:de:be:29:94:84:e0:0d:d4:e3:12:
7e:45:6a:e7:70:70:91:fd:ba:97:80:08:92:9d:4e:03:38:af:
72:dc:bf:51:c4:a2:87:66:41:a0:9d:58:b7:e1:2e:f6:2e:70:
16:96:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:39:25 2024 by rpki-client on console-ams.rpki-client.org