Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B9MaZSQ59QDr0JLnvfPWKc6G4Dg.roa
File: B9MaZSQ59QDr0JLnvfPWKc6G4Dg.roa (raw, json)
Hash identifier: fjNw/HDVt7WlgjchYEBJffXg0HEzWb863WlLeFR3CE0=
Subject key identifier: 07:D3:1A:65:24:39:F5:00:EB:D0:92:E7:BD:F3:D6:29:CE:86:E0:38
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8D1CE40079A62029744C5F0DE546
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B9MaZSQ59QDr0JLnvfPWKc6G4Dg.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210410
IP address blocks: 78.135.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8d:1c:e4:00:79:a6:20:29:74:4c:5f:0d:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07d31a652439f500ebd092e7bdf3d629ce86e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:3d:d6:c1:d7:b2:bc:72:ac:61:36:1f:d4:
9f:3a:98:26:fc:60:ab:4f:1e:98:f7:1b:97:88:36:
cc:67:0f:53:c9:d0:41:0c:a1:86:3b:78:c1:d6:f1:
b4:2d:32:37:5b:c0:4e:6f:19:67:e6:18:28:4a:85:
93:26:b9:17:7c:ed:23:c9:63:8f:53:6d:e4:50:2e:
68:ea:eb:ae:21:1e:5d:db:81:a5:59:e5:1a:93:ea:
3b:56:a9:c8:ad:1a:b7:f1:13:0d:ec:29:31:a8:00:
d9:39:cb:35:9c:68:ad:a8:55:7b:10:65:bc:5d:cb:
a6:e1:38:9f:e6:88:3d:4c:d7:ce:41:9a:71:58:48:
e6:e8:96:20:af:5c:8a:12:2b:2f:82:70:6e:82:f6:
93:f3:98:80:d4:af:6e:a0:cb:7d:e8:e7:f4:67:4c:
9e:fe:27:65:41:df:74:be:ce:33:58:c8:38:ff:4b:
d5:b7:d2:9e:a1:fc:02:59:83:8c:64:ff:53:7a:1b:
d0:2f:98:51:ad:20:32:3f:42:51:0b:ce:8f:71:2a:
33:3f:98:17:6d:1c:0a:02:6b:dd:e2:ae:11:7b:93:
a1:e3:8d:ba:0c:af:bd:e5:ce:d4:53:69:e5:13:c9:
34:14:44:ca:65:4c:64:ed:b0:00:c3:b3:07:0a:d4:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:1A:65:24:39:F5:00:EB:D0:92:E7:BD:F3:D6:29:CE:86:E0:38
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B9MaZSQ59QDr0JLnvfPWKc6G4Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:12:d4:6e:a7:4e:8f:40:c9:fb:98:8b:cd:77:8a:35:61:8b:
c9:20:3a:66:44:e6:e9:46:d6:ca:e6:e4:3a:e6:bb:22:41:83:
ff:d9:fb:ae:2b:d5:fc:84:84:42:e4:74:fa:79:bf:b7:e8:e1:
36:ae:2d:07:ab:35:17:e7:6b:25:2b:ff:aa:5c:c1:e6:23:42:
e8:5c:b6:a8:0a:c6:2c:0f:25:26:2e:d5:42:3f:5e:b9:ba:86:
fe:b1:6d:23:d2:ff:03:a2:3b:41:97:e2:77:4e:b8:ad:8a:c8:
47:ef:77:57:3a:6b:c9:5f:95:91:e7:ad:a7:bd:ac:0a:82:c9:
3a:9c:34:f7:54:13:65:7f:ef:d6:67:1c:49:31:fb:71:ea:c4:
d4:19:87:a8:aa:81:3f:7e:79:da:60:89:11:43:8d:0f:ae:ab:
f8:b0:11:24:34:84:6c:9a:33:45:65:4c:8e:ae:96:4f:8b:c1:
dc:93:9c:e4:11:08:00:59:88:b9:fd:ba:d4:fa:de:1a:46:61:
1e:3d:8d:67:ef:3b:7f:52:30:68:bf:0d:38:a5:8b:3e:24:0d:
3e:57:92:23:64:99:0b:99:51:83:a6:31:95:c3:de:b7:ef:e8:
5d:2c:a7:1f:f9:6d:91:07:6b:87:b9:61:d3:18:07:67:81:21:
6d:83:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:39:29 2024 by rpki-client on console-fra.rpki-client.org