Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/u406CW2w3jbufjzRUUsk5Wqo4Oc.roa
File: u406CW2w3jbufjzRUUsk5Wqo4Oc.roa (raw, json)
Hash identifier: rFG+sOoq+Op+IwC1Bp+7XSncJQdDz/BU4CSP6wu6sGM=
Subject key identifier: BB:8D:3A:09:6D:B0:DE:36:EE:7E:3C:D1:51:4B:24:E5:6A:A8:E0:E7
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 018CC424CAE19B15EFD6DDB7F810E12E2B95
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/u406CW2w3jbufjzRUUsk5Wqo4Oc.roa
Signing time: Mon 01 Jan 2024 08:29:54 +0000
ROA not before: Mon 01 Jan 2024 08:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5466
IP address blocks: 178.255.216.0/24 maxlen: 24
2a09:2140:8000::/48 maxlen: 48
2a09:2140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ca:e1:9b:15:ef:d6:dd:b7:f8:10:e1:2e:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jan 1 08:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb8d3a096db0de36ee7e3cd1514b24e56aa8e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:1b:df:42:96:6b:3f:ca:eb:5e:38:7d:6a:
2c:ab:71:c5:3d:b7:db:1f:8d:a9:87:6c:3d:d6:a9:
c0:db:97:a0:cd:49:10:45:a8:65:09:da:72:71:be:
cc:92:5c:4c:95:b2:42:62:7b:7b:71:99:f7:8b:c3:
f5:1b:16:66:24:c6:7e:a1:b6:5f:f1:65:8b:1f:a4:
e9:b6:b5:89:9a:76:2b:71:d3:c8:4b:81:46:1e:26:
a2:27:7e:d3:91:00:cc:28:c8:28:6f:06:04:3d:a2:
5c:86:8c:06:72:d3:10:18:5c:cb:ac:91:52:c6:94:
89:86:8b:b5:c0:d0:76:c9:cf:ce:cd:91:fa:ec:eb:
cb:2e:12:48:5c:54:04:f0:29:ab:4c:73:83:9a:47:
59:7e:43:7a:d9:65:63:d8:01:3a:ab:47:dd:a1:8e:
a7:42:16:1e:73:00:73:df:2b:3c:07:e2:c7:75:85:
05:70:09:4e:9f:ef:2f:c6:da:c0:54:78:64:9d:3f:
cf:3a:18:c0:8b:dd:4e:b3:0b:f7:d0:9d:42:52:4d:
9a:51:ca:be:f2:34:cc:59:c8:d4:3b:a1:f7:f0:68:
bd:21:d6:38:80:dd:2b:97:e0:7b:a1:83:4a:3b:23:
be:44:35:f3:ce:c2:e8:c6:f7:b4:3a:94:90:e2:4c:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:3A:09:6D:B0:DE:36:EE:7E:3C:D1:51:4B:24:E5:6A:A8:E0:E7
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/u406CW2w3jbufjzRUUsk5Wqo4Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.216.0/24
IPv6:
2a09:2140::/48
2a09:2140:8000::/48
Signature Algorithm: sha256WithRSAEncryption
9a:70:15:25:3a:db:2d:a0:22:65:c9:e3:92:4c:c5:08:09:aa:
90:82:5c:0a:81:6f:c6:be:1d:b3:3b:b6:3c:2d:df:72:4c:74:
12:b1:ff:5c:55:36:1a:54:5a:e7:c8:6b:39:7f:5b:55:51:1c:
4e:bc:b7:17:2c:bf:be:82:29:9b:95:1a:47:e8:24:78:45:56:
fb:dc:c7:75:14:b6:f2:8d:ad:f0:dc:2a:0d:bc:a9:27:7b:cf:
0b:38:83:86:9c:d3:82:cd:34:b6:b4:07:0b:33:ea:e8:c7:a9:
f4:f0:aa:a2:33:bd:05:01:f1:4a:37:cb:cd:8e:69:b5:81:b4:
4f:56:6b:ec:89:7c:75:c4:03:72:78:32:f9:54:86:d4:c0:99:
30:04:8d:b7:f3:0f:6a:ab:f5:da:65:d0:44:16:73:c1:38:90:
08:84:eb:02:01:7e:04:6e:27:5e:7f:ac:26:6f:dc:63:74:2c:
08:f0:42:c6:97:f8:e5:ae:ac:23:3f:f3:31:54:f5:13:f8:8e:
cd:9f:da:c1:ef:c9:8c:95:4e:66:7d:d4:a7:fc:e0:f2:83:91:
3f:31:40:11:ee:54:40:8c:86:5f:af:b3:c9:cb:62:5f:9a:46:
b4:d3:7e:1a:14:c4:05:a7:b8:d3:78:81:f7:12:5a:24:96:b9:
c3:f0:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:41 2024 by rpki-client on console-fra.rpki-client.org