Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rMEvgCVgHs4ulc8DoTulEEqiQHo.roa
File: rMEvgCVgHs4ulc8DoTulEEqiQHo.roa (raw, json)
Hash identifier: Q8gjqCa8uKlgGI4vr5rXYa/L1uX8cdXFH2vC+QqMxtA=
Subject key identifier: AC:C1:2F:80:25:60:1E:CE:2E:95:CF:03:A1:3B:A5:10:4A:A2:40:7A
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 018CC64A764D358FAD7B0BC7CA1A119FE88F
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rMEvgCVgHs4ulc8DoTulEEqiQHo.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197297
IP address blocks: 178.19.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:76:4d:35:8f:ad:7b:0b:c7:ca:1a:11:9f:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc12f8025601ece2e95cf03a13ba5104aa2407a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:9d:a1:f6:31:7b:c9:90:19:58:38:bb:6e:
f6:bd:4b:f3:30:f9:09:1f:8f:78:47:62:7b:51:a0:
af:2f:1d:55:df:72:58:49:1c:fa:2c:cc:2e:40:7f:
ae:1a:af:86:c8:6a:99:30:fd:2b:8b:b7:9e:17:bc:
ae:3c:91:57:78:9f:97:14:9b:19:58:55:81:c1:06:
f2:c1:b7:df:a1:ba:19:d3:3a:66:53:44:e7:92:9b:
ba:85:72:5d:14:98:4b:71:67:c9:be:e5:31:f4:33:
15:e6:45:45:1e:46:2f:23:ec:12:73:ea:53:cb:56:
2d:f6:63:eb:dc:4c:ba:13:f9:bd:12:fc:5d:2c:e7:
b1:fc:4b:e8:9c:43:ef:c7:dd:fa:b9:46:6e:93:da:
58:d3:e9:ff:a0:30:2b:2a:26:fe:1d:2c:92:61:d8:
a1:3c:7a:d6:23:7a:0b:84:83:cb:60:ac:f1:41:51:
4b:5f:75:f8:e7:ec:c9:c7:89:ab:87:b3:9b:6a:f2:
93:48:62:3f:3d:3e:9c:ba:d4:6f:8c:6c:d6:76:1d:
15:66:aa:76:2f:1e:1e:b3:a9:16:56:57:63:8a:ad:
8d:9e:ba:c9:0e:40:0b:c6:23:1f:f4:f6:ea:0b:ec:
31:f4:a3:51:f5:f6:05:e1:9e:63:f4:31:1b:18:e6:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:2F:80:25:60:1E:CE:2E:95:CF:03:A1:3B:A5:10:4A:A2:40:7A
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rMEvgCVgHs4ulc8DoTulEEqiQHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.73.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4f:e2:4a:21:5f:3a:c1:53:01:9c:1d:be:16:8d:a7:74:11:
50:06:45:97:5e:d2:ac:f6:56:64:c5:12:04:20:e9:e2:cb:c1:
a7:4c:11:33:e1:59:12:42:40:bb:ae:39:f1:ad:cf:98:76:e3:
88:cf:53:ad:0f:7c:cf:bd:fd:92:47:d9:2e:37:7c:de:67:cb:
13:d3:5d:cd:44:c2:7d:16:2d:58:b2:1c:0e:e3:f3:43:72:cd:
9d:ec:f8:c9:f9:1f:a7:f0:41:dc:69:59:c1:bc:15:e4:ec:d6:
64:d5:ff:80:d9:28:ae:f8:c2:22:5e:3d:ba:ed:62:9a:3b:a6:
bf:1c:4b:e2:60:95:e1:78:05:06:e0:7e:c3:2c:84:0d:9a:21:
28:51:d8:3a:44:b5:c1:e0:48:bc:96:8a:f9:bb:cb:65:6a:5a:
b8:d9:2e:30:9b:92:95:e9:1b:11:c2:5e:71:d3:e7:e1:60:40:
be:56:e5:f2:24:69:81:50:a6:c5:1a:8d:92:65:31:9c:50:42:
23:cb:66:5f:12:c0:0d:c1:0f:aa:f9:de:64:eb:34:6d:1a:8e:
54:9f:2f:81:1e:f9:c9:52:58:81:ec:c5:91:df:61:f1:d0:9b:
00:9d:12:a5:e9:a4:3b:18:ca:43:89:86:d6:35:8c:69:d8:91:
cf:9e:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:04:51 2024 by rpki-client on console-fra.rpki-client.org