Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/TAjHyQW0K7AVEPxjSwPGBFLVZyo.roa
File: TAjHyQW0K7AVEPxjSwPGBFLVZyo.roa (raw, json)
Hash identifier: QR+SqU31+u/QsNyEE0ZlBd2nwtEIdtntoWdL37RPx2c=
Subject key identifier: 4C:08:C7:C9:05:B4:2B:B0:15:10:FC:63:4B:03:C6:04:52:D5:67:2A
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 018CC86EF0C953276BD2DC25F565FF37A94F
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/TAjHyQW0K7AVEPxjSwPGBFLVZyo.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 178.175.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f0:c9:53:27:6b:d2:dc:25:f5:65:ff:37:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c08c7c905b42bb01510fc634b03c60452d5672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:75:ed:48:ee:f6:e8:13:de:4d:4b:31:fa:
77:ed:30:be:19:58:d2:bc:e9:74:f2:6a:74:af:b9:
9a:c0:91:5e:a1:26:83:b4:20:57:16:20:4b:7b:c8:
99:93:5d:07:1d:70:0b:dd:a2:9e:34:28:98:29:67:
9c:3f:d5:47:8e:e2:6b:d0:ca:5a:17:4a:d3:8f:ab:
ea:bc:2b:02:00:1c:07:ae:94:a7:a8:c0:2c:a3:42:
ec:34:cd:cc:7c:8e:cd:2e:04:9f:90:67:8f:11:29:
0a:04:09:3b:e3:01:4a:cf:08:76:2d:7b:50:06:e4:
6e:81:a2:0a:35:75:2f:44:ef:e9:86:5a:d0:89:be:
a8:88:bb:e1:33:c6:af:71:75:98:a9:7d:83:32:fc:
d8:5c:6e:df:d6:f3:32:43:be:cd:2e:c4:49:30:ed:
46:43:ab:96:1c:16:64:76:41:41:15:11:6a:a9:65:
e5:ea:59:f2:7a:8b:59:6a:fa:cf:57:bb:1e:8d:24:
a8:5c:d3:95:4c:0d:e1:89:cd:51:7f:d8:5e:87:49:
f1:4f:52:bd:cf:69:db:bd:2e:70:4a:04:c0:7e:7a:
d5:c0:24:d0:ae:91:f1:d6:a9:27:ce:af:5a:ba:a6:
77:e2:d0:73:99:b6:f2:fe:f2:96:ba:a6:60:bc:a0:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:C7:C9:05:B4:2B:B0:15:10:FC:63:4B:03:C6:04:52:D5:67:2A
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/TAjHyQW0K7AVEPxjSwPGBFLVZyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0/24
Signature Algorithm: sha256WithRSAEncryption
95:62:cd:85:c7:c4:47:02:2e:0b:5d:03:17:c6:72:ba:1f:5e:
5c:12:33:30:46:87:28:e9:78:91:3c:57:21:ee:75:32:22:f3:
6a:ab:57:14:25:6b:56:57:40:05:8a:59:15:a8:26:40:ba:53:
91:e0:3e:c1:eb:d0:47:72:5d:7c:65:3f:42:19:d9:40:e4:8f:
c7:b2:5c:b7:88:a5:d6:9a:b0:2e:be:16:a7:bd:70:51:d1:50:
09:cf:00:fa:2e:eb:2a:fa:8d:ba:83:08:29:b8:5a:16:b0:dd:
d7:d1:61:ca:b4:8e:eb:67:c8:8f:d7:95:d1:82:2c:cd:cc:01:
1c:54:75:02:07:b8:d6:2b:01:92:4a:49:86:8a:32:dc:2c:5e:
af:70:bb:45:c0:ff:39:34:55:12:9e:a5:3d:d5:35:08:09:c7:
f1:be:40:00:23:6a:2a:65:a2:4b:8c:82:b8:81:ab:19:16:96:
04:4d:72:c8:25:15:57:d3:97:3f:c0:c3:db:2e:8d:1c:b6:ab:
d5:1f:1c:15:b3:d7:7a:02:ec:55:6a:96:d2:34:5b:60:2f:51:
41:c3:7d:b9:63:bb:0f:56:4c:e1:08:65:99:1a:c6:e7:38:42:
8c:37:91:01:33:8d:54:7b:03:81:53:d9:5e:0c:e8:9a:8a:16:
c6:23:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:18:33 2024 by rpki-client on console-fra.rpki-client.org