Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/x2eLIOcICE51-CE4SX0AGD9tZLE.roa
File: x2eLIOcICE51-CE4SX0AGD9tZLE.roa (raw, json)
Hash identifier: Fj+mYUHIjhVIgt9C+OMTQ8VJ6yqvmyK8nA7+G0UYT8Q=
Subject key identifier: C7:67:8B:20:E7:08:08:4E:75:F8:21:38:49:7D:00:18:3F:6D:64:B1
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 01911C6546113A49220475204DE7EFCB4018
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/x2eLIOcICE51-CE4SX0AGD9tZLE.roa
Signing time: Sun 04 Aug 2024 07:58:04 +0000
ROA not before: Sun 04 Aug 2024 07:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1c:65:46:11:3a:49:22:04:75:20:4d:e7:ef:cb:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Aug 4 07:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7678b20e708084e75f82138497d00183f6d64b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:aa:c1:36:4e:20:28:b8:84:23:14:f7:17:
15:30:46:78:6a:94:09:82:1a:d1:87:4c:d7:6f:e9:
5f:1a:7d:c9:86:b1:93:ed:5f:91:09:1a:0a:63:a3:
e7:d7:88:41:e8:97:02:81:c8:81:a3:8f:01:69:ee:
f9:7b:6d:5f:c7:3b:84:48:17:66:7f:3f:5b:a0:56:
d9:a3:8d:74:73:bd:f2:0d:e4:34:7a:2d:9d:a3:0e:
b0:dd:68:d2:a5:e4:00:59:10:bf:7a:42:b2:5d:f9:
b2:fe:d4:80:9a:24:98:fb:5b:bc:77:07:c5:1d:40:
8e:f5:e7:30:ab:c3:92:87:92:c5:21:b9:1b:46:91:
36:6a:a4:66:a4:36:33:2f:6b:a0:57:0d:c2:3c:99:
05:25:45:b8:eb:e5:51:1c:9b:0a:7b:10:13:3b:5d:
8e:a1:76:1d:d0:4e:a7:f6:c8:ff:94:c7:d4:19:eb:
a8:3c:e7:12:5f:96:c6:5f:28:5a:ea:a8:b9:18:ea:
bf:60:23:6e:2c:eb:fa:c4:64:78:1c:2e:68:4e:e8:
6f:b9:c8:b3:50:a5:7f:fb:55:8f:38:29:cf:f1:cc:
10:b6:04:ed:f3:bc:df:ed:1c:fd:75:41:e2:b6:9c:
7a:4e:7f:2f:89:d9:22:af:74:0e:d3:87:c4:1f:e1:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:8B:20:E7:08:08:4E:75:F8:21:38:49:7D:00:18:3F:6D:64:B1
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/x2eLIOcICE51-CE4SX0AGD9tZLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:b0:73:f4:1c:5b:1c:3c:cc:4e:6a:40:d5:05:41:68:ec:
9f:25:91:b9:24:6c:8b:ea:e0:b3:09:50:10:75:bc:56:bf:b1:
7a:d0:4c:48:a2:ea:05:b0:0e:d1:7a:db:ca:68:c8:b9:b8:08:
56:08:e6:01:78:c7:d1:90:70:7a:58:1c:a8:ce:7c:cf:3c:5c:
83:ae:b1:6b:27:1e:88:a8:17:71:2d:ee:2c:c3:2e:6d:a2:19:
d4:77:66:0f:fe:a7:df:8a:f8:63:db:64:7f:7d:80:e1:c4:56:
40:25:61:80:ef:2b:20:6c:32:e9:3d:b3:3e:af:a2:30:1d:9f:
2a:cd:b8:5b:3d:4e:e2:12:f7:d2:42:dc:2f:2a:b5:17:37:66:
22:b7:b2:7b:26:f3:fa:a8:00:03:e7:cd:af:60:18:62:65:87:
f7:9d:d4:7c:b5:5d:63:e7:f1:0b:e5:b1:9b:2a:0b:6c:f8:fe:
85:12:6a:08:ae:b8:c2:b3:31:b7:b0:e5:42:87:78:51:90:c1:
a4:c0:c2:32:85:8f:7a:ac:d7:5e:e9:c3:cd:96:d2:f5:f0:19:
ee:98:3e:5d:fc:da:6d:d3:f8:22:e4:1e:78:88:f3:c1:9b:69:
84:a4:b2:7f:ab:e8:8c:74:8f:af:28:3e:33:db:3d:6c:d6:dc:
78:a0:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:30:22 2024 by rpki-client on console-fra.rpki-client.org