Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/t9k6e7fP9c4lGUFH1AIPC2SZ1zc.roa
File: t9k6e7fP9c4lGUFH1AIPC2SZ1zc.roa (raw, json)
Hash identifier: MB1PHvTMbz2D+gOWFQUfWJZcYrOcwEefByO/lJz/NM4=
Subject key identifier: B7:D9:3A:7B:B7:CF:F5:CE:25:19:41:47:D4:02:0F:0B:64:99:D7:37
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 018EC81D135584CDD13DEEB780AF6666C64F
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/t9k6e7fP9c4lGUFH1AIPC2SZ1zc.roa
Signing time: Wed 10 Apr 2024 13:05:32 +0000
ROA not before: Wed 10 Apr 2024 13:05:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43566
IP address blocks: 78.110.224.0/20 maxlen: 24
78.110.224.0/21 maxlen: 24
78.110.232.0/21 maxlen: 24
78.110.233.0/24 maxlen: 24
178.23.24.0/21 maxlen: 24
178.23.24.0/22 maxlen: 24
178.23.24.0/24 maxlen: 24
178.23.25.0/24 maxlen: 24
178.23.26.0/23 maxlen: 24
178.23.28.0/22 maxlen: 24
2a11:7f80::/32 maxlen: 36
2a11:7f80::/33 maxlen: 36
2a11:7f80:8000::/33 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:1d:13:55:84:cd:d1:3d:ee:b7:80:af:66:66:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Apr 10 13:05:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7d93a7bb7cff5ce25194147d4020f0b6499d737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:b7:67:d7:74:58:2f:55:be:61:77:b8:8c:
e2:f5:43:57:98:91:f4:73:3a:12:5e:a6:ef:72:e0:
c3:02:35:f3:ef:6e:39:14:66:d1:49:42:69:1d:e1:
c4:7f:b1:96:62:7f:6e:29:2d:f2:0e:d3:c9:af:8c:
9a:db:38:cc:39:89:df:61:70:e0:4b:88:9d:3f:47:
8a:33:f4:7a:15:a5:06:08:4c:c5:fd:66:3c:f9:fe:
4c:ea:f8:05:ab:9c:89:00:33:7a:71:13:df:07:59:
80:55:65:a1:23:6a:62:54:71:f1:7f:6e:d9:3b:92:
71:65:89:cf:8d:7a:e5:30:6a:06:d0:1c:30:49:43:
98:00:a7:73:62:de:57:65:b0:0f:4a:cd:43:d2:bc:
00:8d:75:0c:78:18:4d:db:90:69:77:0b:64:fd:4b:
5e:0c:6b:75:f7:ad:9e:1e:20:8e:42:bc:22:a3:f4:
4d:fc:0f:11:ae:f7:c4:c6:08:10:12:76:1b:d9:e5:
24:65:8b:51:f4:27:a4:aa:e9:fe:8c:67:00:d4:1a:
ba:a7:b6:5d:05:ec:bd:5f:05:8b:c5:0e:c4:52:54:
98:f0:e0:68:e3:37:cc:a6:92:b0:ca:9e:39:e2:86:
a4:fd:0e:d4:a0:0e:50:e8:d4:62:7a:8d:3a:c0:b1:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:3A:7B:B7:CF:F5:CE:25:19:41:47:D4:02:0F:0B:64:99:D7:37
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/t9k6e7fP9c4lGUFH1AIPC2SZ1zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.224.0/20
178.23.24.0/21
IPv6:
2a11:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
32:76:5f:3e:f0:57:f7:b4:02:56:8f:d0:5b:c8:33:52:36:44:
c2:40:36:87:37:30:be:4c:a9:89:10:8e:e7:b4:c4:fa:12:e3:
56:80:8d:f9:7f:e0:40:4c:26:0c:93:9a:31:5f:3f:58:df:fa:
3b:6c:29:30:35:2b:a6:8d:82:e1:47:8e:59:13:d4:f1:92:e2:
85:25:44:9e:42:ec:76:50:1e:e3:e3:e4:09:08:62:17:eb:79:
49:79:96:c8:60:73:e3:44:b7:7d:9e:9e:19:49:26:0a:c6:46:
57:3c:91:3e:42:7b:ad:c3:02:7f:dd:7f:fe:34:17:0e:2e:d4:
7a:d8:8e:38:fa:f2:f8:fe:f5:1e:92:ed:4b:9b:ee:3b:46:9f:
0b:2e:e8:13:61:12:75:6f:5a:f0:c6:86:aa:b7:ff:ba:c8:2a:
21:32:b4:ed:23:11:5e:79:ae:2e:e3:11:59:62:07:da:c4:be:
c5:88:13:0f:c2:6d:c1:0d:fd:aa:eb:3c:7b:a9:6b:d9:9d:f6:
5f:62:3f:bd:5c:e2:d8:e7:ee:b5:40:ec:78:55:05:e4:11:d9:
ff:26:3d:13:66:2e:7d:94:13:5a:1a:fe:34:db:a3:57:ec:e6:
30:36:9e:af:fd:dd:73:c7:8a:fb:8d:d7:8d:7e:9a:1b:9d:1e:
83:f1:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:06:45 2024 by rpki-client on console-ams.rpki-client.org