Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/Vy9XUjXbvFpKj0uxN1ucO0Hrp84.roa
File: Vy9XUjXbvFpKj0uxN1ucO0Hrp84.roa (raw, json)
Hash identifier: p3IqWlnjVt1IEiT68y5rhP/25xipW2R7+/Tx5AYSh0w=
Subject key identifier: 57:2F:57:52:35:DB:BC:5A:4A:8F:4B:B1:37:5B:9C:3B:41:EB:A7:CE
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 018CC2DB3F966D54FBCACAEF50FEC1D9D112
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/Vy9XUjXbvFpKj0uxN1ucO0Hrp84.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56426
IP address blocks: 178.215.152.0/24 maxlen: 24
178.215.146.0/24 maxlen: 24
178.215.151.0/24 maxlen: 24
178.215.149.0/24 maxlen: 24
178.215.150.0/24 maxlen: 24
178.215.147.0/24 maxlen: 24
178.215.148.0/24 maxlen: 24
178.215.159.0/24 maxlen: 24
178.215.153.0/24 maxlen: 24
178.215.158.0/24 maxlen: 24
178.215.156.0/24 maxlen: 24
178.215.157.0/24 maxlen: 24
178.215.154.0/24 maxlen: 24
178.215.155.0/24 maxlen: 24
178.215.144.0/20 maxlen: 20
178.215.145.0/24 maxlen: 24
178.215.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3f:96:6d:54:fb:ca:ca:ef:50:fe:c1:d9:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=572f575235dbbc5a4a8f4bb1375b9c3b41eba7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:df:55:ca:82:98:87:7a:ff:ed:87:00:96:
2e:9b:63:fd:09:5a:d7:da:56:e5:52:97:07:10:01:
45:4b:48:45:c0:2b:fe:ec:fb:20:f4:de:28:cb:a4:
3f:19:40:f6:5d:a8:61:ee:06:70:ee:83:66:b6:09:
5e:eb:16:e1:7c:13:56:b3:35:91:78:b5:58:c2:fc:
77:0c:a5:c9:12:97:65:75:ee:2c:d0:46:f7:91:f1:
15:1e:04:de:f8:10:01:15:92:7d:ff:60:d9:95:3f:
bf:06:51:1b:3f:e4:3b:f7:a5:7a:f0:12:4d:09:d9:
22:3d:d2:70:53:15:95:72:7a:2f:05:30:e7:7e:c8:
8b:62:fe:97:58:a2:c0:df:7f:c0:0c:d5:d8:88:a7:
a7:bd:92:be:37:79:24:6a:17:ac:46:bb:ba:e0:f4:
c7:16:12:3f:a9:f6:07:4d:12:82:83:e6:9f:36:21:
d7:36:a6:7a:e9:cd:c5:8c:6e:c7:cf:58:8d:bb:3c:
9c:a9:22:d8:c0:c8:6b:b2:96:9b:8f:38:7d:f3:aa:
3f:1a:9c:34:f7:d6:c0:67:01:cb:88:af:21:cd:2f:
6f:ae:08:27:86:28:92:69:e6:f5:1b:46:eb:3e:1f:
39:3a:15:31:c8:2c:71:fd:a9:72:62:55:ca:0a:34:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:57:52:35:DB:BC:5A:4A:8F:4B:B1:37:5B:9C:3B:41:EB:A7:CE
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/Vy9XUjXbvFpKj0uxN1ucO0Hrp84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.144.0/20
Signature Algorithm: sha256WithRSAEncryption
75:3c:fe:a4:d2:6e:4f:7b:94:6e:af:ed:19:46:1f:b7:c2:df:
ce:e5:01:6d:63:f1:c6:78:b5:27:04:8f:27:3d:91:8a:06:22:
f9:03:34:72:a1:2d:a5:89:d6:81:eb:db:69:b3:3f:e8:b4:29:
51:d3:25:b6:62:d0:5c:42:33:af:89:30:42:2c:cb:d4:86:1b:
da:b8:ce:20:74:74:29:43:93:eb:2d:26:aa:00:b5:1e:4e:a7:
df:20:dc:47:7d:be:4c:64:44:a0:bc:92:2d:23:37:8f:4d:f1:
d1:e9:2b:15:6f:e1:d1:60:7b:3b:71:7a:ac:35:7b:11:31:b4:
eb:c4:7d:3b:22:08:1a:f3:3a:67:83:ae:53:f3:07:5f:ae:7b:
2e:cb:fd:dc:ea:b5:69:9e:4e:aa:f1:db:92:11:89:1a:c1:cc:
6e:de:12:52:d0:66:b3:c5:85:06:d9:59:05:4c:6d:f6:4c:7d:
6d:8c:c7:c5:29:67:67:4b:00:f1:a3:99:84:9b:62:ea:ba:db:
dc:a3:d0:31:39:1a:b4:8c:4e:1c:38:05:be:ff:df:f9:38:15:
f9:af:98:71:6c:51:f1:c5:31:83:a0:00:59:52:7e:ca:f9:c0:
af:05:55:00:7d:31:fc:94:6c:c1:3a:9c:52:cf:93:b1:48:6a:
26:87:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:06 2024 by rpki-client on console-fra.rpki-client.org