Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/CAEBqCeQQKaZQxwXuUKfTAui-ho.roa
File: CAEBqCeQQKaZQxwXuUKfTAui-ho.roa (raw, json)
Hash identifier: MC9vXt0QY6CbqlRPG4LvPP3Kc2YfGF4RnraWWnJ9Lw8=
Subject key identifier: 08:01:01:A8:27:90:40:A6:99:43:1C:17:B9:42:9F:4C:0B:A2:FA:1A
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018DEB5D7A060F2E0136AE023BDF39A9B83C
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/CAEBqCeQQKaZQxwXuUKfTAui-ho.roa
Signing time: Tue 27 Feb 2024 16:19:48 +0000
ROA not before: Tue 27 Feb 2024 16:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:5d:7a:06:0f:2e:01:36:ae:02:3b:df:39:a9:b8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Feb 27 16:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=080101a8279040a699431c17b9429f4c0ba2fa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:ab:06:65:d6:78:3d:09:aa:b9:7d:c0:1e:
5d:0c:0a:ad:02:e4:4a:7a:cf:cb:f2:7d:bc:2d:bb:
16:b2:d8:50:53:fa:99:18:47:30:31:f1:d8:cb:35:
3b:14:a0:7f:9c:8c:f1:fb:1a:e5:a9:df:06:aa:7e:
28:80:e2:a0:34:6a:d0:54:4d:d8:02:c5:e2:e7:7a:
09:32:ea:8b:1d:70:13:ea:42:34:b7:7c:8b:71:92:
52:15:d9:29:6d:84:f0:30:cb:fc:ba:42:4d:6c:ce:
8d:3e:28:ed:bf:59:b0:98:2c:c5:33:30:60:69:55:
38:a1:4f:91:0a:63:6d:39:e4:e5:b8:53:a9:d6:ff:
18:70:e5:f0:ab:7b:b6:88:b8:0f:bd:07:74:c7:31:
76:05:e4:02:3f:ba:11:90:42:10:d6:64:1f:08:b2:
88:9a:c0:08:5f:6d:07:2d:66:58:f1:60:74:2e:b3:
1c:f1:b5:87:c8:b7:94:e2:70:4b:19:46:d7:d3:dd:
5f:dd:50:50:0d:e8:f6:70:cf:c4:c5:4f:1d:75:37:
51:d5:ca:c1:5d:a2:b0:82:ee:01:46:3b:f6:9b:c8:
3c:d3:89:cc:fc:b8:d7:ba:43:0d:d8:68:51:a5:d5:
65:69:c2:33:11:4a:4a:d3:c8:c1:01:6d:bf:eb:7e:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:01:A8:27:90:40:A6:99:43:1C:17:B9:42:9F:4C:0B:A2:FA:1A
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/CAEBqCeQQKaZQxwXuUKfTAui-ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bc:a4:54:14:2c:62:26:18:94:5b:c7:c6:6f:ec:58:ec:d5:
32:e2:94:c8:3a:66:9a:86:a7:a1:63:db:45:5f:92:29:a6:b9:
5f:da:99:16:b7:d6:46:3e:82:f1:9a:58:27:29:fe:73:87:ca:
00:38:b1:75:a8:a8:b3:61:0f:53:f8:b4:11:e4:b2:48:4b:7b:
0d:b8:3a:12:7c:30:b2:90:f6:1c:65:96:60:87:a2:e3:a2:9a:
b4:2d:31:ab:27:2f:35:21:3c:81:76:eb:aa:4d:12:df:ee:42:
00:13:a0:d0:2c:24:88:5e:5c:a9:02:4a:98:2f:8b:dc:f6:7b:
a7:4a:81:f6:93:21:a9:c6:b9:10:7c:31:e9:0d:dd:a2:df:27:
1f:2b:03:16:6c:9e:61:6d:b0:99:62:98:f7:7b:9a:87:64:e6:
23:69:41:31:3a:4c:af:14:4b:ed:2a:7c:82:a5:1d:c6:37:47:
02:a8:6b:d2:1b:42:d3:b4:e8:c4:9b:58:d1:62:98:f0:8a:74:
b9:3a:35:e5:31:81:75:f7:2f:37:9e:ce:79:4e:d0:2b:76:18:
a3:83:54:8e:38:82:64:5d:d7:ef:d0:57:ac:d6:a0:a7:05:74:
40:38:b5:cf:00:d5:f7:21:ce:ad:6e:a7:0b:91:9b:2a:51:2a:
9e:4c:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:50:44 2024 by rpki-client on console-ams.rpki-client.org