Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/e6yI88lkYZcPuPgdjaPVrn_V544.roa
File: e6yI88lkYZcPuPgdjaPVrn_V544.roa (raw, json)
Hash identifier: QhnRtNgGI+xPenaKPqGudP/V2y4OSP364JpWI+EZ1VQ=
Subject key identifier: 7B:AC:88:F3:C9:64:61:97:0F:B8:F8:1D:8D:A3:D5:AE:7F:D5:E7:8E
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 018DECAABAA70B4F05D0003531EE630CF20F
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/e6yI88lkYZcPuPgdjaPVrn_V544.roa
Signing time: Tue 27 Feb 2024 22:23:48 +0000
ROA not before: Tue 27 Feb 2024 22:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 260
IP address blocks: 78.40.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:aa:ba:a7:0b:4f:05:d0:00:35:31:ee:63:0c:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Feb 27 22:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bac88f3c96461970fb8f81d8da3d5ae7fd5e78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:0a:27:84:81:a1:7d:a5:5a:6d:af:a2:86:
b5:47:e0:1e:d9:ca:ac:93:48:34:b3:91:25:4c:00:
37:ca:f4:0d:07:ba:0d:07:c9:60:49:90:79:f4:d2:
9e:2f:18:fe:85:13:0a:71:6c:5d:a2:89:16:19:b6:
dc:1f:cb:cc:45:8a:7a:5e:cb:35:22:4f:84:e1:eb:
95:2a:07:b4:ec:58:ab:15:50:d5:ea:1d:7d:38:72:
05:2a:50:98:c0:cd:05:33:32:0f:2e:48:31:7c:c4:
a3:4e:9e:52:54:7b:8e:d5:72:07:d2:e5:3b:dc:c8:
d4:c8:7e:6f:67:3c:44:ac:74:48:53:2c:09:7e:e8:
71:6a:7a:5b:0d:d2:1d:be:05:22:18:6a:c6:0b:5b:
3a:ec:89:34:22:66:66:5b:a3:69:bc:b2:41:c2:25:
c2:b7:f4:80:93:22:42:5c:3f:95:84:2c:50:ae:51:
90:9a:8d:95:47:7f:b1:0e:ca:e2:78:35:0a:ec:1d:
da:64:3e:73:ce:18:36:b0:7e:6c:79:bb:62:53:ec:
f4:83:12:b9:8d:6f:17:7a:e1:38:72:96:da:f3:06:
36:3e:fb:fe:27:95:8e:c1:94:f8:a1:1a:78:9a:3f:
a9:28:2b:11:41:5c:5f:4b:c3:e8:cb:50:8f:1f:5c:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:88:F3:C9:64:61:97:0F:B8:F8:1D:8D:A3:D5:AE:7F:D5:E7:8E
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/e6yI88lkYZcPuPgdjaPVrn_V544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:d5:d1:e8:75:92:f7:8b:7d:d2:ac:89:17:fa:d6:ae:65:33:
84:7e:87:f9:25:e5:18:f9:32:28:c8:9d:bc:59:7a:83:41:b3:
98:b3:5d:1a:ce:a2:b8:0e:01:c4:d4:9e:67:a6:ca:4e:93:3b:
eb:27:39:1d:97:3a:1f:e5:67:03:04:e9:38:c6:2a:bb:70:a5:
f8:60:fd:be:e5:44:d2:ff:ea:be:3f:2d:80:5c:89:e2:15:44:
c0:2b:62:47:bc:e9:7e:1c:ec:84:a0:b3:a0:dd:06:08:36:40:
62:b7:b2:a5:fa:58:c7:c8:9b:eb:00:11:d0:0d:f8:27:84:8c:
68:29:06:9c:91:75:17:75:af:ef:64:4b:33:7e:68:a0:fa:1a:
78:22:36:7f:50:e6:6f:18:af:42:42:40:fd:e2:44:75:9e:fb:
da:60:b8:ad:45:3d:aa:f7:b9:33:d0:ac:6c:73:eb:0b:55:9b:
fd:7a:e6:f8:cb:10:a5:87:c2:eb:95:90:c9:45:84:c0:36:92:
c2:29:4f:80:73:8a:51:c1:a1:49:fd:34:92:25:38:92:c7:0b:
9f:4e:bf:9f:86:68:a1:6f:ed:c4:e0:f2:44:e4:2e:9d:12:ae:
a6:d4:07:9c:4d:e1:12:ab:0b:fb:02:25:ce:a0:f0:8a:a2:18:
3a:00:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:40:07 2024 by rpki-client on console-fra.rpki-client.org