Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/AiYm7t7CFJCCh-gtJ_95GOBirbA.roa
File: AiYm7t7CFJCCh-gtJ_95GOBirbA.roa (raw, json)
Hash identifier: Pbxhs1RuGkHbbayXjy3dZj6glZTc8vTdbV0TVlS1lJ8=
Subject key identifier: 02:26:26:EE:DE:C2:14:90:82:87:E8:2D:27:FF:79:18:E0:62:AD:B0
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0190E53D179C2FBE093535CF9177E8693F85
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/AiYm7t7CFJCCh-gtJ_95GOBirbA.roa
Signing time: Wed 24 Jul 2024 14:55:04 +0000
ROA not before: Wed 24 Jul 2024 14:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 178.251.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e5:3d:17:9c:2f:be:09:35:35:cf:91:77:e8:69:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jul 24 14:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=022626eedec214908287e82d27ff7918e062adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:57:53:d1:21:af:f8:ba:58:df:47:e9:dd:
d2:79:48:b7:ba:d9:3a:d3:c1:68:04:21:9d:fd:9e:
ae:e6:5b:82:bb:d2:32:3e:9a:07:45:f1:e1:9c:80:
a2:cf:0b:f4:70:7e:57:d6:41:2d:8b:5f:34:c2:a2:
a2:29:48:f0:c0:d0:ad:85:49:9f:97:69:c1:70:d5:
af:2c:4a:0d:15:50:9f:82:28:78:99:55:40:55:50:
e4:da:f8:ad:b3:3a:c2:47:b6:08:19:09:c7:3c:0d:
e0:fc:c3:5e:83:34:d7:72:e6:1a:06:6b:22:b9:5f:
ec:bd:6a:ed:ca:6f:65:10:16:dc:53:a2:c1:d0:d6:
91:d7:56:30:b3:62:bc:f0:b1:c7:0b:92:45:e4:20:
7b:89:7c:6c:c2:c2:c4:f9:6c:f1:79:b0:68:64:bc:
de:4e:6e:41:c5:70:4d:b2:69:48:af:ae:3b:0b:59:
7f:f8:2e:d6:62:09:b3:e4:10:68:84:e5:33:29:63:
81:9b:c1:4d:d9:d3:44:b9:71:a2:9c:0a:5a:5d:27:
0a:8d:3e:6c:3b:b7:48:f2:94:6e:99:da:7a:33:7f:
41:2d:08:ea:8c:28:57:fa:5b:6a:35:15:e1:ed:9b:
3f:44:91:90:93:ca:ba:a0:62:cb:8e:5b:ab:0f:2f:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:26:26:EE:DE:C2:14:90:82:87:E8:2D:27:FF:79:18:E0:62:AD:B0
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/AiYm7t7CFJCCh-gtJ_95GOBirbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:5c:5d:60:66:60:ff:00:18:2a:a3:e6:70:24:f3:bc:44:
28:a1:a4:8c:48:f4:e9:71:aa:c4:4d:1d:26:d1:00:36:fc:6f:
d4:27:b1:96:41:6b:8e:62:a1:78:93:5b:e5:f7:30:3b:53:64:
2c:dd:5d:29:56:85:16:c8:c8:d2:7a:fd:45:4c:43:35:4f:c9:
43:24:57:cd:b4:41:ab:ff:f7:db:71:ff:ab:7a:90:ce:51:59:
c2:63:b0:f1:79:e6:34:03:b7:1f:ea:66:39:ad:d4:6d:15:42:
00:a7:35:e3:d6:63:96:85:e7:59:38:76:df:a2:f4:c4:f8:d1:
34:16:31:3b:da:98:77:56:54:04:b1:90:b6:96:33:d3:83:eb:
37:8d:79:ef:28:bd:75:39:05:61:e3:45:22:15:e2:f1:05:c4:
cf:2d:be:f1:8f:3f:7f:7e:af:16:fa:5e:10:0c:a1:79:c1:c1:
80:a0:19:d8:ac:99:24:44:ed:5e:10:5c:a3:68:cc:09:db:93:
87:1a:24:80:d9:64:56:69:07:bd:c1:49:e9:2d:4b:ca:b2:9e:
2f:ba:ab:06:fa:ba:e1:da:4b:ae:08:08:86:f2:15:57:5a:af:
2e:83:95:8e:e6:1e:9f:98:3e:f0:39:f1:5d:44:79:07:24:94:
22:af:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:57 2024 by rpki-client on console-fra.rpki-client.org