Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/elBCZ7QS_TwJ1vguFBwtigv-cu8.roa
File: elBCZ7QS_TwJ1vguFBwtigv-cu8.roa (raw, json)
Hash identifier: SaYajMprPCRzPCUmhJkcnXdbF2AGOdfiZseNN32sHzw=
Subject key identifier: 7A:50:42:67:B4:12:FD:3C:09:D6:F8:2E:14:1C:2D:8A:0B:FE:72:EF
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC49323F693EA2372086211A03E1B135B
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/elBCZ7QS_TwJ1vguFBwtigv-cu8.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209541
IP address blocks: 147.78.232.0/22 maxlen: 22
147.78.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:23:f6:93:ea:23:72:08:62:11:a0:3e:1b:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a504267b412fd3c09d6f82e141c2d8a0bfe72ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:53:2b:13:a1:9f:38:45:0c:29:a8:30:6c:
24:e5:6a:b2:ca:86:e9:76:4b:fb:92:51:5d:96:21:
3a:b6:db:c2:ed:df:11:3e:c6:c1:0a:ea:f0:86:ee:
02:66:4a:7b:38:7b:2e:c8:52:46:81:5a:06:54:ae:
cb:90:4e:fb:f1:65:e6:71:32:c0:60:d2:e2:bb:99:
ed:2e:6a:62:c3:25:30:64:48:06:36:55:d3:1a:98:
a5:77:56:09:99:b5:7c:24:a4:90:59:a9:de:1a:d1:
c7:c4:c9:05:14:d3:f3:7e:2f:d1:8e:ab:e2:41:0c:
fc:14:0a:c3:2f:a1:df:18:32:d5:20:52:19:1b:75:
28:47:16:72:c7:bd:47:3c:f8:60:40:4e:d8:99:16:
d1:2b:cb:f1:16:df:f8:6f:9b:af:47:19:bf:eb:dd:
47:f8:5c:26:77:cf:87:8a:49:00:1f:56:1c:d1:78:
03:5b:97:81:4a:7a:20:3f:e1:33:14:f8:9b:fd:d1:
d7:9f:97:22:75:58:dc:eb:3d:08:32:1b:3d:f1:80:
9a:6b:12:69:4f:74:44:76:46:dc:a0:72:2b:9d:16:
fb:30:cd:87:ff:1d:b7:a0:a9:2e:79:6b:7f:2e:18:
3d:3b:ec:2f:3d:f4:31:8c:d6:7c:ca:14:8a:83:7e:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:42:67:B4:12:FD:3C:09:D6:F8:2E:14:1C:2D:8A:0B:FE:72:EF
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/elBCZ7QS_TwJ1vguFBwtigv-cu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b7:fc:e0:7d:34:56:68:c7:17:73:46:5e:cd:11:43:d2:4c:
4d:09:c6:4a:82:83:7f:09:a7:8a:a3:c7:57:f8:7a:12:29:84:
34:e2:16:43:fd:a6:66:b3:ff:60:35:f0:4b:d6:32:ce:1a:12:
16:1c:0d:d3:c1:54:cc:9b:bd:7b:4f:2e:08:7f:d2:3f:13:ed:
af:63:99:10:10:c7:f4:79:43:c0:47:f5:c0:6d:c6:54:dc:3b:
d0:dd:db:93:80:fa:2b:62:79:a6:cf:e5:18:cc:89:f4:54:7d:
35:6c:fb:58:86:0a:dc:2b:59:19:f7:0a:38:91:0c:59:0e:ac:
6f:9d:ed:e6:97:70:48:79:d5:d2:99:14:4a:3f:e1:64:9d:1a:
88:90:98:af:46:af:62:e8:6f:d1:59:d1:43:cc:83:84:b5:75:
83:49:6a:58:85:e9:aa:97:b2:c1:e1:6c:25:c5:80:55:07:52:
d9:aa:8c:5d:eb:9a:61:cc:f0:1d:67:15:a9:c5:bc:5d:60:4c:
77:07:c9:9e:95:74:65:78:48:55:82:f4:3c:ca:49:4e:c1:28:
03:38:ac:e9:95:0b:b2:3c:57:f6:ef:36:62:1d:48:d1:bf:41:
2a:0a:b2:06:2f:18:6c:ee:e9:73:d5:6f:da:56:5c:c4:1c:db:
c6:0a:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:18:58 2024 by rpki-client on console-ams.rpki-client.org