Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/K7J226S5oK5stntZPomYEx5IYBE.roa
File: K7J226S5oK5stntZPomYEx5IYBE.roa (raw, json)
Hash identifier: lq+3A37naywtoCpyJK7NI3U6jIEqzyX8HCIfD6m6/+4=
Subject key identifier: 2B:B2:76:DB:A4:B9:A0:AE:6C:B6:7B:59:3E:89:98:13:1E:48:60:11
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 018FE4C80FF436AECC22687D395CEA212519
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/K7J226S5oK5stntZPomYEx5IYBE.roa
Signing time: Tue 04 Jun 2024 19:44:27 +0000
ROA not before: Tue 04 Jun 2024 19:44:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42330
IP address blocks: 78.41.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:c8:0f:f4:36:ae:cc:22:68:7d:39:5c:ea:21:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jun 4 19:44:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb276dba4b9a0ae6cb67b593e8998131e486011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:1e:89:b8:0f:94:86:ff:52:49:c6:56:07:
7c:c8:07:38:28:ca:74:57:36:1a:2c:0e:f4:e9:b9:
9e:b0:a3:a1:97:72:8d:6c:12:b2:19:2b:cf:7a:d4:
b6:ae:cd:52:1e:0e:d5:a8:49:ef:be:4a:cd:e2:4b:
6c:49:ff:3a:fa:82:92:bf:39:4f:a9:e4:c3:a6:1f:
65:b8:f1:da:42:4b:eb:8c:6c:9c:a3:b0:29:c4:56:
48:a9:a0:96:ce:46:25:b4:cc:93:17:ab:60:7c:af:
76:11:48:8f:30:9e:d2:4b:83:33:81:8f:37:3c:47:
f3:2d:9f:77:de:93:b0:31:b4:0f:da:9c:12:50:91:
e7:57:97:a2:1a:2c:ee:c9:93:cd:9a:c2:98:4b:07:
71:1a:7f:f5:d0:bb:00:4b:ee:5a:40:89:cc:54:8a:
06:08:27:20:1c:43:bf:24:57:50:99:8c:a4:b7:ef:
f1:c5:dd:80:b9:37:ca:ec:0f:e7:54:b7:44:03:0e:
fe:26:95:07:7a:a2:85:b4:ca:b1:69:e3:21:2c:83:
c3:5e:79:0f:01:1c:c6:2f:26:1c:03:ad:49:1b:6e:
0f:b8:14:83:67:6b:ce:6e:0a:c0:e0:ce:7c:f8:03:
bc:6d:e1:2b:4c:d4:2c:98:4c:28:0a:51:bf:a6:02:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:76:DB:A4:B9:A0:AE:6C:B6:7B:59:3E:89:98:13:1E:48:60:11
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/K7J226S5oK5stntZPomYEx5IYBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:27:6e:03:1f:17:1a:8d:ec:99:3e:f9:e7:73:f1:42:de:
53:3b:51:4d:b3:e1:7b:f6:dc:23:37:f5:b1:a6:55:b0:ed:95:
9f:96:88:54:c6:2c:ab:2a:e9:da:2b:67:ba:fe:52:f0:3a:de:
98:52:dc:47:8f:d7:da:03:b0:44:2d:2d:84:be:d2:d9:45:0c:
75:23:d2:5e:f8:28:06:cc:9c:f3:47:f8:c2:7f:00:0b:e5:fe:
53:13:dd:02:3f:04:1b:bc:2d:ca:d9:57:af:1f:df:2b:d3:fb:
15:67:36:d1:52:6a:b6:30:71:32:6c:a3:3c:e9:11:b6:f2:0e:
93:0c:8d:a5:e2:11:69:5b:1d:b7:67:cf:b2:07:3c:fd:cf:b8:
53:24:dd:17:fe:73:c3:9b:f8:10:51:6c:a8:dc:f3:a9:09:58:
90:97:25:8e:ec:cb:d3:11:18:52:66:c0:dc:bb:4c:5a:9e:de:
a7:6f:f0:80:10:2c:24:3d:d5:55:36:3d:4b:97:09:ab:0f:10:
d7:02:65:bb:95:d0:0c:48:0b:0a:e2:40:80:5d:90:57:fd:8c:
ad:be:be:10:32:cf:91:3f:69:db:2c:ce:06:59:76:00:82:89:
e8:ea:c0:6f:a9:f5:5f:90:69:bc:79:c6:8d:69:b9:13:ed:ec:
a4:d7:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:26 2024 by rpki-client on console-fra.rpki-client.org