Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/L0C8LPGvt6hkfSwQ9ldQ6NGxlkg.roa
File: L0C8LPGvt6hkfSwQ9ldQ6NGxlkg.roa (raw, json)
Hash identifier: fU/BqriVpSb/44EdONNjo43Obe8GMI74xsNrnzbhNOU=
Subject key identifier: 2F:40:BC:2C:F1:AF:B7:A8:64:7D:2C:10:F6:57:50:E8:D1:B1:96:48
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018CC8DF2698BA4A70B2991765D180DF40CB
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/L0C8LPGvt6hkfSwQ9ldQ6NGxlkg.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211279
IP address blocks: 178.175.162.0/23 maxlen: 24
178.175.160.0/23 maxlen: 24
178.175.175.0/24 maxlen: 24
178.175.174.0/23 maxlen: 23
178.175.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:26:98:ba:4a:70:b2:99:17:65:d1:80:df:40:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f40bc2cf1afb7a8647d2c10f65750e8d1b19648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:e2:03:27:90:93:5c:96:1a:c4:69:e9:46:
23:a7:84:2a:d3:c6:4e:25:a5:49:05:81:a2:7c:c4:
26:5b:4c:f1:f2:79:b2:75:a3:bf:1d:1a:37:b0:f0:
7c:73:73:f6:13:dd:ed:3c:9b:8f:58:87:8e:39:db:
25:6b:19:7b:51:85:28:aa:86:9f:7f:89:49:7a:a2:
03:0f:b1:77:39:81:2c:c2:5d:aa:ef:4e:6b:09:ec:
b1:83:63:a7:6d:95:0a:3f:6c:4c:3f:c0:a2:74:54:
5b:ef:7b:d2:b2:1c:2b:d0:ba:01:fb:79:3b:5c:23:
1f:28:fb:f1:de:83:ac:0a:64:57:0a:61:26:8a:56:
a4:97:7d:4c:29:f3:d5:c7:cd:e5:44:00:f6:4d:24:
56:12:4b:8f:d2:0b:8e:ef:ed:dc:8a:f2:a3:c5:55:
bc:a3:35:63:92:45:df:e1:90:13:40:96:c3:01:e8:
30:96:23:fc:8c:e4:8e:36:c4:04:a7:bb:cd:fc:b1:
34:d1:8d:52:a1:02:5e:c1:ac:fb:a1:cf:df:8f:a7:
f2:a5:ee:21:2a:f0:1a:01:eb:5c:f5:c5:af:15:d0:
8f:45:af:12:0c:46:67:f7:00:c5:e4:f3:43:1e:fc:
34:b2:c7:8c:b5:f2:40:1a:b9:62:e6:e5:b9:07:40:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:BC:2C:F1:AF:B7:A8:64:7D:2C:10:F6:57:50:E8:D1:B1:96:48
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/L0C8LPGvt6hkfSwQ9ldQ6NGxlkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
178.175.174.0/23
Signature Algorithm: sha256WithRSAEncryption
42:9a:81:58:72:79:8c:5b:86:fb:7f:4c:8c:ea:c7:1d:da:0f:
5f:56:7b:b5:1e:39:fd:fd:39:95:e9:10:79:4a:4d:ea:f7:cb:
c4:09:58:48:eb:b5:84:c6:ac:c1:28:ca:4f:cd:f8:3a:40:b6:
1a:c3:78:e1:a7:e1:e5:bb:33:af:f3:67:7c:c7:4d:26:8e:98:
13:d3:08:ab:bf:2e:07:c6:26:d5:1e:86:0f:b1:30:3e:f0:37:
ad:3e:e5:28:c8:4e:b6:91:e9:02:33:90:06:9c:68:15:95:d4:
fa:5d:87:e9:69:f5:06:c7:da:f7:2f:b5:1f:07:b2:ae:e8:5f:
33:25:bf:8c:60:fb:9d:4c:f1:5a:34:1c:e8:47:57:f1:1e:45:
23:92:c7:91:72:24:e4:ad:d4:b3:c3:2c:70:89:60:80:90:ee:
e8:0d:00:b5:f8:8c:08:fa:82:a9:bb:ce:3e:77:24:dd:ad:3d:
74:dc:97:e7:ad:02:20:b0:42:5e:b3:57:0c:2d:d3:54:76:cc:
d0:2d:54:4f:59:17:6a:32:ac:93:9d:dc:35:f2:0b:c1:63:ac:
64:8c:00:0c:2b:8e:00:dd:b5:e6:90:a6:07:e5:27:f5:fd:36:
af:91:b3:a5:08:8d:24:d6:84:06:fb:02:5e:ea:c5:57:81:42:
3b:09:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:07:51 2024 by rpki-client on console-fra.rpki-client.org