Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/DWLeYmX5f-fWHhL05l-KWzAic2s.roa
File: DWLeYmX5f-fWHhL05l-KWzAic2s.roa (raw, json)
Hash identifier: 7RWizA1O6rhLjSSz+kbfm4XogEqQ/5ISZ+wqmXXTPPU=
Subject key identifier: 0D:62:DE:62:65:F9:7F:E7:D6:1E:12:F4:E6:5F:8A:5B:30:22:73:6B
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 018CC348A66B1B971F5D5B2BCF6A78283684
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/DWLeYmX5f-fWHhL05l-KWzAic2s.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57906
IP address blocks: 178.213.78.0/24 maxlen: 24
193.238.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a6:6b:1b:97:1f:5d:5b:2b:cf:6a:78:28:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d62de6265f97fe7d61e12f4e65f8a5b3022736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:ab:05:d6:75:c5:8e:ee:13:d6:2b:20:68:
d1:da:3e:14:b2:79:c0:d3:92:d7:c5:22:1f:55:05:
40:d4:7f:6e:bd:66:d9:a4:8e:1f:7a:80:27:50:17:
89:ac:88:fc:0c:13:84:85:41:06:c8:8e:6a:e4:d4:
1c:11:86:e4:60:76:02:e0:23:43:fb:69:f3:4c:cc:
74:ea:37:0e:be:18:48:de:44:67:83:83:69:85:55:
2a:ee:cb:5e:9a:ab:7e:6c:9c:6b:7e:0e:39:67:58:
e6:48:e9:60:49:0e:0b:29:af:f6:23:b6:a0:35:b9:
50:6a:7d:2e:8b:47:67:e9:eb:47:93:ab:bc:86:c4:
31:1d:fe:69:39:e9:19:0a:3c:8a:aa:25:31:7c:90:
34:f7:73:a2:87:1b:9f:62:7b:f4:9f:da:d8:08:df:
3f:78:98:24:e1:67:67:71:0d:1b:55:76:c4:c1:5c:
c7:10:d8:bd:d6:83:ae:fa:a5:10:f8:af:c0:5c:49:
97:e4:85:2c:79:7b:0d:d1:a6:e0:c7:6e:c0:57:cb:
0e:65:04:5c:c6:8d:48:9f:aa:75:5e:d6:ae:09:35:
03:15:c5:80:f3:a1:8a:44:af:a9:84:3d:05:ea:77:
03:f3:df:b4:c5:db:46:25:af:37:6f:9d:5f:0a:56:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:DE:62:65:F9:7F:E7:D6:1E:12:F4:E6:5F:8A:5B:30:22:73:6B
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/DWLeYmX5f-fWHhL05l-KWzAic2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.78.0/24
193.238.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:49:7a:cc:d2:27:14:24:e7:5b:01:31:97:99:f7:9e:c8:cf:
19:f8:d5:dd:47:1e:ff:98:d1:42:a7:30:23:13:96:0b:c8:80:
58:7a:37:61:91:18:53:56:45:9b:4c:3f:eb:74:24:bb:aa:d9:
10:54:75:7c:f9:62:a2:95:57:ce:15:4a:3d:ae:f1:18:1f:77:
6f:7a:ac:f9:a4:26:5a:2f:91:8e:21:34:9c:fe:01:3d:87:cb:
c2:21:8c:15:32:70:4e:6f:38:f5:99:e3:5e:95:cf:67:a0:46:
36:d3:b4:f8:e1:d8:c4:52:34:fe:0d:db:8f:3b:4a:4d:17:d2:
68:34:bc:fc:d9:e0:ae:2e:ca:c8:05:a3:f3:df:78:a1:05:8b:
1e:74:40:87:af:b1:c1:e1:66:72:dd:f6:57:80:9b:4c:ad:11:
71:a7:fe:8c:c1:88:09:72:2d:72:25:c2:9f:94:86:03:26:fa:
b4:86:a8:b6:94:69:cf:c3:6f:44:57:b3:55:18:77:e2:77:ac:
40:2a:2b:7d:59:fd:d1:02:f5:6d:b3:93:5b:a1:4c:37:86:af:
b0:4c:fd:0e:3f:6a:70:ae:f4:a0:19:6b:5e:85:48:f3:14:91:
3e:74:6f:8c:f3:12:d9:83:04:99:7b:74:9e:8f:42:05:9d:9e:
07:de:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:33:54 2024 by rpki-client on console-ams.rpki-client.org