Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ReOqikXEoJfj3jacfFjUz76Qq0.roa
File: 4ReOqikXEoJfj3jacfFjUz76Qq0.roa (raw, json)
Hash identifier: SrDICgpJy/8lwwA+Zy0bU/bpHT1csmu5Sg2b813n8NM=
Subject key identifier: E1:17:8E:AA:29:17:12:82:5F:8F:78:DA:71:F1:63:53:3E:FA:42:AD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BD3D6F28E121265A76F53F122D07
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ReOqikXEoJfj3jacfFjUz76Qq0.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bd:3d:6f:28:e1:21:26:5a:76:f5:3f:12:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1178eaa291712825f8f78da71f163533efa42ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:a3:ef:5d:6e:06:e6:9e:47:f3:3f:2e:73:
d9:6b:0f:26:3a:c9:9b:a9:a3:59:2b:a3:d7:64:8f:
e1:06:35:16:58:72:51:de:2a:4f:be:47:6a:6a:43:
99:10:06:3c:c9:d1:b0:ec:63:df:47:8e:78:23:51:
fa:05:8f:45:25:50:a3:6c:e0:27:28:cc:52:5a:20:
eb:e1:56:8c:27:98:c7:ed:71:d0:3f:ff:f9:86:c0:
fd:8d:81:29:8f:7b:d7:f9:8d:7c:ec:28:df:9b:8f:
27:7c:7b:69:be:78:d1:66:22:7c:de:a3:8d:c5:f8:
11:ac:93:86:a1:f2:d3:e9:4f:3d:7c:61:41:c8:23:
7d:0b:98:2f:5c:76:02:46:4f:76:93:23:21:b0:b6:
ae:d9:9b:2d:03:71:ff:d6:bd:62:63:8e:a2:94:29:
fc:e7:f3:0a:71:42:5b:58:91:6b:e5:f1:71:3c:91:
7b:7f:87:df:6c:16:54:8c:74:2d:ad:3b:0d:8f:23:
c7:84:c1:0e:99:0b:31:86:35:9a:66:e4:7c:14:75:
89:a5:fb:57:54:56:91:05:0c:16:8b:60:f1:5e:9b:
b1:c5:c2:f3:d4:29:c8:83:36:14:6a:34:9f:7f:da:
ac:be:e7:01:bf:e1:f2:c7:fc:87:65:4b:04:5f:6d:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:8E:AA:29:17:12:82:5F:8F:78:DA:71:F1:63:53:3E:FA:42:AD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ReOqikXEoJfj3jacfFjUz76Qq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d9:a5:a1:8d:ba:1d:85:f9:0c:a0:2c:54:0e:a6:ba:f2:df:
57:39:96:cc:1c:0b:c1:1b:c6:22:75:f2:91:6f:aa:9f:e1:17:
42:75:10:a0:b0:a5:5b:ed:86:77:7f:35:d1:9b:d8:29:17:1c:
37:bf:21:ee:2b:37:9b:12:42:8c:81:9e:13:88:3b:cb:d6:f8:
4a:a0:ab:c7:c3:ee:6c:b1:e3:1c:c7:f2:4e:b8:bc:c0:db:fb:
15:9b:0d:03:4a:63:66:d6:22:53:45:4f:47:89:ab:6d:ea:93:
14:05:09:1d:6c:c4:c6:f4:75:12:6c:6f:4d:5b:09:d0:4e:4e:
08:57:b0:12:2c:0f:59:a5:8f:79:39:51:d5:57:a6:86:8e:1e:
fd:0a:93:15:71:83:ef:a8:1b:f1:d2:54:bc:56:cd:05:fc:8d:
f7:32:9f:0b:97:cd:d8:30:22:7b:d5:ce:56:d9:d2:11:83:d6:
27:d3:32:c5:0c:80:54:e1:a1:41:9f:99:6b:68:0a:6f:0e:96:
b1:27:c9:20:5a:40:10:0d:f1:39:a9:32:ed:58:c9:1c:b4:a6:
41:52:b3:93:5d:a4:c1:f4:bc:3b:2c:84:99:90:66:b3:27:88:
0e:19:ff:14:16:c7:f6:05:ec:bf:5d:6b:e7:55:4b:55:b2:14:
46:53:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:23:38 2024 by rpki-client on console-fra.rpki-client.org