Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/ePcIel9stzApZz3zfoeew2cbdlE.roa
File: ePcIel9stzApZz3zfoeew2cbdlE.roa (raw, json)
Hash identifier: k00GztQjBM47x2S5DjXb8G8lXzsGUkzb9sKq5y5H1XY=
Subject key identifier: 78:F7:08:7A:5F:6C:B7:30:29:67:3D:F3:7E:87:9E:C3:67:1B:76:51
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 018CC424CB69567171205B765D9701B5BA87
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/ePcIel9stzApZz3zfoeew2cbdlE.roa
Signing time: Mon 01 Jan 2024 08:29:54 +0000
ROA not before: Mon 01 Jan 2024 08:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 195.93.178.0/23 maxlen: 24
178.239.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cb:69:56:71:71:20:5b:76:5d:97:01:b5:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 08:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f7087a5f6cb73029673df37e879ec3671b7651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:1d:bb:c9:01:db:e8:ec:e3:83:e1:5a:72:
60:a9:06:14:4c:9e:b1:d9:cf:40:36:cb:11:04:98:
0c:eb:b6:27:af:bb:8d:ff:9a:be:32:af:bf:9b:d9:
a9:bb:8e:28:86:de:42:28:6c:fb:a2:c2:85:a0:40:
2b:0c:ac:92:0c:0c:a9:a6:63:c1:2a:ab:79:59:fb:
8a:f8:ac:ce:f6:9b:01:49:e6:2f:c2:10:f3:71:8d:
7c:e6:27:63:28:16:8a:f3:9f:3e:75:86:e4:01:d1:
b2:90:5d:a5:42:2f:45:dd:70:a1:cc:6b:5c:7a:09:
36:51:97:7f:30:c1:41:25:91:6e:ce:8d:16:8c:c5:
0c:83:39:47:e8:12:98:f0:d3:a4:60:e1:5f:34:e7:
4b:e3:27:de:40:47:d1:99:b3:72:5e:52:e1:62:2d:
17:22:c1:c7:a6:e2:38:fa:74:ae:5b:7f:8a:5e:13:
ab:50:a2:f5:7a:0e:ee:63:09:37:1d:94:1b:9b:a5:
d9:e4:0a:c9:bb:15:e6:77:d7:7e:b9:27:4c:8f:f4:
c8:b8:02:75:df:6d:27:ac:a4:8b:2a:cc:b1:ce:44:
7b:cf:82:05:16:46:e2:62:40:a5:1a:56:0a:1c:a1:
0c:55:25:41:03:6a:ef:a8:31:0e:ec:c2:a1:09:08:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:08:7A:5F:6C:B7:30:29:67:3D:F3:7E:87:9E:C3:67:1B:76:51
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/ePcIel9stzApZz3zfoeew2cbdlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.128.0/20
195.93.178.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:14:c6:ad:8f:51:99:b4:3e:3d:a7:b0:67:aa:51:11:61:7f:
e8:c8:b2:01:a8:18:7f:da:f9:18:d6:66:dd:31:9a:8d:fe:c1:
02:db:bc:24:a5:55:a3:57:22:6b:ca:55:13:8f:63:7f:e0:8d:
63:a0:08:4c:42:f8:c6:a3:f2:83:17:ec:66:b2:01:9a:57:b6:
c4:6e:40:a9:a5:a7:15:d4:bf:65:1a:fc:59:b6:d9:02:d4:79:
c7:f7:b5:75:f2:d5:95:b6:f3:32:30:33:9b:e4:9b:62:a2:a4:
e9:64:25:b9:8e:7c:50:6a:43:65:87:a0:f8:ee:31:94:46:d1:
cf:e7:0b:70:e5:55:c3:4c:5e:7e:75:17:02:71:6f:3b:ea:c7:
dc:2a:92:a3:eb:64:fc:49:3d:02:99:6b:34:2d:4f:9c:64:4c:
6c:4f:a8:b7:c2:8a:03:ce:99:da:8c:87:12:1b:93:fd:87:ac:
a1:8d:27:53:3f:b0:c9:a1:a7:85:a8:46:4c:6a:d3:95:ac:88:
a9:74:c2:6b:e6:6f:bf:f7:a9:f2:cf:4e:e1:de:78:f3:fe:d0:
5c:50:76:5f:95:e8:51:c8:01:3a:a8:49:de:c5:e1:9e:0c:c0:
33:6d:4e:33:4c:41:18:94:77:0f:18:0a:18:89:0a:5d:fd:64:
11:f5:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:15:35 2024 by rpki-client on console-ams.rpki-client.org