Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/L148x-sxt8VNx6fHnXaGEMVn1zs.roa
File: L148x-sxt8VNx6fHnXaGEMVn1zs.roa (raw, json)
Hash identifier: pepOyD/sM1pzsME1NwYwPR2HHcqr9PtYaoyRKOUTvxk=
Subject key identifier: 2F:5E:3C:C7:EB:31:B7:C5:4D:C7:A7:C7:9D:76:86:10:C5:67:D7:3B
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018F9650A4F1C7B156D8F16F96C0CC540345
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/L148x-sxt8VNx6fHnXaGEMVn1zs.roa
Signing time: Mon 20 May 2024 14:03:38 +0000
ROA not before: Mon 20 May 2024 14:03:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198691
IP address blocks: 178.20.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:50:a4:f1:c7:b1:56:d8:f1:6f:96:c0:cc:54:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: May 20 14:03:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5e3cc7eb31b7c54dc7a7c79d768610c567d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:76:ed:f3:c7:c9:eb:dd:6f:2e:dc:43:7e:
a5:64:70:51:b9:f8:43:21:9a:2c:a7:75:ba:e9:c2:
ba:83:8b:03:de:1c:71:80:d7:dc:d8:7c:1f:ca:eb:
4f:f7:19:d8:ab:90:1a:b5:fe:3f:43:4d:82:8f:6a:
63:91:9b:c4:cf:ee:fd:87:c5:d0:8b:f6:6c:bb:b5:
ee:d6:30:c7:df:d5:4c:21:3a:57:e1:a5:2b:1f:c6:
d2:dd:02:c4:47:ec:4e:7e:34:c5:27:46:59:8a:ff:
f9:bf:86:8c:83:3a:de:cd:c0:69:1a:1b:c0:06:02:
77:19:00:24:ed:b5:03:21:77:49:18:10:c3:92:d2:
e2:39:dc:e2:88:45:fa:d5:c3:76:35:70:b4:25:b6:
13:91:1f:f3:55:1b:e7:8c:ea:d0:dd:a7:c0:55:aa:
ed:d3:3c:0d:98:a8:47:d6:5c:b1:69:37:3d:fa:54:
37:73:74:97:60:fa:df:c2:26:43:3e:25:9f:41:1a:
c1:50:49:a2:30:35:4d:97:06:76:b0:40:92:db:6e:
fb:4e:98:18:ea:28:05:fc:e8:14:f5:23:4d:51:c8:
62:97:53:8d:e7:02:f8:52:bf:29:e5:ed:6e:db:ae:
f3:9a:74:48:51:7b:c7:69:32:2c:35:7b:18:d4:ed:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:3C:C7:EB:31:B7:C5:4D:C7:A7:C7:9D:76:86:10:C5:67:D7:3B
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/L148x-sxt8VNx6fHnXaGEMVn1zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.207.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4b:8e:9a:9c:91:4f:29:8f:ad:ee:61:8c:99:e6:c2:b2:84:
25:3a:1e:29:27:1b:d9:de:9b:3f:3d:1f:a2:65:f3:61:bd:a9:
fe:09:5e:08:cd:aa:aa:78:b0:72:f5:1d:01:fc:cd:15:35:9c:
ba:49:60:d0:21:a5:43:28:73:42:28:8e:a6:cc:35:25:8c:d0:
63:76:cb:5a:35:82:48:21:f6:ed:7c:87:8c:41:6a:95:e1:52:
9f:6c:24:58:4f:29:a1:c0:47:da:d2:76:b5:2f:44:29:5f:46:
5f:da:71:01:84:51:0a:71:f4:09:cf:5a:3d:20:a4:ed:4a:45:
0e:a5:2b:e3:47:b2:6e:f1:7b:00:7c:58:85:f2:76:dd:3c:e9:
80:72:2f:0f:69:03:70:50:ed:5d:dc:00:75:1c:ed:2a:43:43:
d0:74:6a:a7:89:95:21:34:7f:b5:5e:ba:a3:fb:d7:cb:2b:03:
65:d0:f4:16:96:fb:f0:02:b4:b9:42:c1:0c:e9:2a:0a:37:1d:
63:46:44:fa:10:65:b7:b4:8d:82:75:cf:e1:b4:97:d6:f1:f9:
7c:9e:bf:9b:07:b2:0a:25:b8:c9:aa:b7:7d:d2:34:b3:d8:57:
bf:5d:d5:54:3d:7f:4a:59:b1:90:56:0a:b1:a3:f9:5c:b1:fa:
6e:21:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:43 2024 by rpki-client on console-fra.rpki-client.org