Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/egrXnCZznlXwJughdiEQDM2cFc0.roa
File: egrXnCZznlXwJughdiEQDM2cFc0.roa (raw, json)
Hash identifier: IIQsIQIMXT60bw7unkgXDKkkFQDCtWRp6RFWlJEgsXI=
Subject key identifier: 7A:0A:D7:9C:26:73:9E:55:F0:26:E8:21:76:21:10:0C:CD:9C:15:CD
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018CC6B834DAA8B73B6F11E790EB532A7869
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/egrXnCZznlXwJughdiEQDM2cFc0.roa
Signing time: Mon 01 Jan 2024 20:30:10 +0000
ROA not before: Mon 01 Jan 2024 20:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 78.142.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:34:da:a8:b7:3b:6f:11:e7:90:eb:53:2a:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 20:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a0ad79c26739e55f026e8217621100ccd9c15cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:71:8a:b7:dd:67:41:bb:68:ed:2e:cb:c2:
ed:ff:5b:1c:cf:c3:14:a8:50:31:60:15:94:fe:f2:
be:87:a6:4f:ad:6e:f1:1d:e2:b1:fe:54:2b:db:8f:
9c:26:10:e9:4b:8c:56:6c:a9:2c:d0:2c:07:3d:08:
db:06:91:c4:de:1c:24:de:55:77:a0:ba:db:61:59:
5d:8a:67:b5:5a:37:a8:aa:25:c9:e9:34:8c:f5:57:
8c:cc:cd:24:4e:8c:79:fe:a5:13:b2:51:93:09:55:
47:3d:ad:b0:52:42:90:16:bf:56:13:0f:24:91:ee:
46:d1:e3:f3:7c:65:df:d3:ed:b2:26:a1:04:47:82:
8d:71:43:dc:4d:fa:93:62:ef:b8:1b:70:f8:88:09:
40:b8:47:d7:4c:a0:ea:0d:4a:dd:47:f1:c5:8b:91:
da:10:33:0c:71:c8:47:16:68:ab:a2:24:e7:56:c3:
4a:ff:de:6f:5a:c0:c2:d1:ac:b2:a5:df:e2:28:d1:
0d:1f:c9:6a:e6:23:b1:0c:90:6e:17:a0:8c:69:cf:
28:35:11:68:60:a7:6d:7b:93:89:0e:22:6d:b4:77:
f6:63:0e:27:64:c8:01:b9:03:0e:3e:a1:a3:f4:54:
7b:80:6f:e8:28:17:5c:44:5b:b0:39:bd:d3:8e:c3:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:D7:9C:26:73:9E:55:F0:26:E8:21:76:21:10:0C:CD:9C:15:CD
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/egrXnCZznlXwJughdiEQDM2cFc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2d:08:68:9a:54:9c:c7:f9:4d:69:96:76:59:dd:17:8e:a3:
0e:d4:85:77:a3:c7:cc:5a:ec:2b:de:d4:07:02:ed:e2:e1:8c:
db:62:07:85:32:93:07:d6:80:5b:a6:aa:13:30:40:f8:8a:f4:
12:1c:1d:ed:52:78:aa:19:e5:44:20:86:15:99:25:07:07:52:
12:de:ba:58:69:3d:12:f6:df:3c:72:63:63:29:a7:b4:df:b0:
86:19:16:ff:7c:dc:51:ba:2b:a4:94:c6:23:ec:3c:82:10:6c:
c3:79:98:81:66:ae:ba:38:3c:11:95:88:c6:c0:91:c4:66:31:
9f:17:9b:cf:9b:b8:2a:a3:d6:7b:98:77:33:7a:ee:2a:fd:1e:
77:6a:7c:c4:3b:a2:90:ee:5b:99:18:a5:4f:9d:90:f3:9d:51:
e2:b3:94:c2:d3:74:5c:d6:cf:16:79:bb:00:0d:49:3c:4f:23:
6e:93:93:0e:e1:5c:54:d4:a9:d9:d2:36:f0:bc:81:3e:37:28:
ac:86:63:8b:cc:90:69:d9:78:1e:b5:2c:27:f3:4f:b0:82:8f:
24:e9:ab:01:00:cb:69:4d:42:e9:04:93:88:54:3a:ab:e7:6e:
19:4b:68:0f:70:c3:86:8f:13:da:0b:b3:c3:e0:a6:6c:94:86:
7f:0c:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:40:11 2024 by rpki-client on console-fra.rpki-client.org