Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y-hT9R3pbk03mZW-ANuscWK3Nvc.roa
File: y-hT9R3pbk03mZW-ANuscWK3Nvc.roa (raw, json)
Hash identifier: OP2uAeKj4f8RacrHh95eCdvTNyMP8WtG/q9Bj6MtbVU=
Subject key identifier: CB:E8:53:F5:1D:E9:6E:4D:37:99:95:BE:00:DB:AC:71:62:B7:36:F7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01919984305D604CA76D5B20464B2A32F203
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y-hT9R3pbk03mZW-ANuscWK3Nvc.roa
Signing time: Wed 28 Aug 2024 15:04:22 +0000
ROA not before: Wed 28 Aug 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210715
IP address blocks: 78.108.218.0/24 maxlen: 24
193.31.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:84:30:5d:60:4c:a7:6d:5b:20:46:4b:2a:32:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Aug 28 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbe853f51de96e4d379995be00dbac7162b736f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:7e:75:e2:5a:32:1f:82:70:79:de:0f:21:
e3:f9:6f:39:40:6c:05:04:12:09:d4:c0:dc:a8:fe:
cd:87:70:cf:87:6e:83:40:43:9a:08:e4:58:19:c3:
94:bf:e0:17:e2:f6:6a:50:c7:6f:09:01:41:f9:cd:
36:e5:63:70:18:18:8a:76:fc:43:39:d2:ec:89:01:
08:1c:64:2b:08:1f:e6:86:f0:1e:5b:73:ea:a8:e0:
bb:7f:5f:19:d0:4f:9f:f4:18:55:a3:f3:1c:3b:a2:
4a:00:b8:dd:75:5b:34:46:77:10:39:3d:26:f3:d2:
22:bd:a6:79:d4:d9:6d:49:1b:1a:6e:7a:2a:2c:5d:
4a:ad:5e:54:ac:8b:b9:97:c4:63:54:07:79:26:f1:
94:c3:97:b7:79:0c:7d:b9:4f:1e:b0:4b:1a:6d:f0:
45:40:3c:c7:51:df:1f:37:c8:b4:26:8f:ee:12:cc:
e5:7c:1e:e8:1e:30:e0:58:0c:02:e0:ca:20:d8:9c:
81:88:ed:fb:4e:b9:58:7b:b2:64:b5:a0:fa:4c:a8:
c2:16:aa:92:ee:bf:fb:d7:7a:5e:a0:ce:6c:20:cf:
52:77:8d:dc:d6:b4:36:1f:0b:20:17:e9:a0:9f:d9:
7a:82:0d:f7:78:35:34:37:d9:74:b3:4b:06:ee:12:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:53:F5:1D:E9:6E:4D:37:99:95:BE:00:DB:AC:71:62:B7:36:F7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/y-hT9R3pbk03mZW-ANuscWK3Nvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
193.31.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b2:19:c3:3b:21:6e:74:3e:a7:75:6a:f7:eb:1e:a0:26:76:
10:9c:81:fb:50:38:1e:00:c0:aa:30:92:ed:7e:7e:d6:55:1c:
02:ca:e4:93:3e:e7:4e:06:39:f1:77:8d:de:41:94:90:1b:2d:
e9:fd:7a:75:b4:1a:11:d4:73:3c:2e:4f:5a:e6:1a:f6:c4:70:
62:c6:e6:1c:af:18:f4:39:a5:df:61:9f:84:9b:10:82:5d:f5:
e6:b7:b4:38:f0:d1:8e:60:e5:58:e3:3e:5d:0e:15:49:ee:b8:
a5:e6:18:50:8d:0f:3c:4b:20:b4:5d:64:f3:b9:56:cc:5b:9f:
e6:f3:eb:14:73:7a:72:53:40:23:9d:89:f3:2c:4d:ea:63:d7:
d5:38:b0:5c:4e:f2:38:e5:c2:c7:cf:ae:2d:be:0e:eb:4b:75:
52:c3:7f:13:64:c8:aa:d8:53:b4:dd:77:40:84:3e:46:93:58:
76:b7:94:51:ff:5c:b0:97:59:bc:e0:d9:f4:e5:18:44:70:4e:
e9:7e:45:d5:04:de:f3:bf:6c:bf:5e:eb:c8:b1:6e:cf:c5:a0:
3e:94:92:62:4b:04:4b:57:6e:07:bb:72:28:d6:d6:89:87:93:
3b:68:53:7d:43:81:aa:d2:7d:f2:f6:68:a6:6b:a2:12:ef:b4:
04:bd:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:28 2024 by rpki-client on console-fra.rpki-client.org