Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/I7zKD_wmBybR62ZDdxq8HaTxM54.roa
File: I7zKD_wmBybR62ZDdxq8HaTxM54.roa (raw, json)
Hash identifier: k/ahVPOBMIs5YIcq6cKhgR68XOiFNG+hnI3zd+4PjIQ=
Subject key identifier: 23:BC:CA:0F:FC:26:07:26:D1:EB:66:43:77:1A:BC:1D:A4:F1:33:9E
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0190646FAC3A4F836154FACAD41A88AA02ED
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/I7zKD_wmBybR62ZDdxq8HaTxM54.roa
Signing time: Sat 29 Jun 2024 14:39:18 +0000
ROA not before: Sat 29 Jun 2024 14:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25045
IP address blocks: 213.202.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:6f:ac:3a:4f:83:61:54:fa:ca:d4:1a:88:aa:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23bcca0ffc260726d1eb6643771abc1da4f1339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:73:12:24:82:bd:fa:c2:2e:cf:3e:cd:8a:
b3:63:cc:10:8f:b6:e2:e2:26:76:2e:ae:3c:3c:ab:
e2:0d:50:59:5f:94:d8:d0:50:54:18:f6:92:d9:cf:
f1:1f:1b:c0:e2:fc:36:fc:f0:c6:92:92:0a:2c:9e:
13:5a:32:7b:8a:2f:ff:e1:48:33:c7:0f:d1:b1:82:
fe:15:65:ef:07:d2:c5:c0:53:39:be:88:54:9d:65:
bd:56:fa:b2:07:43:d1:a8:db:dc:ef:ca:af:f6:96:
a8:39:53:c3:34:d4:09:14:45:ef:e3:06:ff:fe:fe:
29:86:8b:9d:1f:70:f3:d9:6c:2c:8a:e6:fb:68:ce:
42:15:16:c3:4b:42:5b:ec:71:72:da:24:39:90:7e:
8a:25:4f:4d:64:b4:55:a6:3d:a2:e5:2a:07:55:6d:
21:ee:7f:3e:44:b7:dc:ec:3f:51:22:e4:45:bc:84:
61:40:2c:aa:41:88:a3:25:5c:4e:81:3c:65:87:9e:
32:f3:94:6f:6e:f9:0c:a4:33:12:e0:ac:5d:60:a0:
53:f9:a5:ad:70:af:60:e9:f8:6d:9c:91:13:0f:b8:
81:f9:2c:c1:b2:91:b0:3f:09:3b:69:24:ff:e5:57:
e0:dd:65:7b:a0:06:93:98:81:8e:67:6b:29:f0:7b:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:CA:0F:FC:26:07:26:D1:EB:66:43:77:1A:BC:1D:A4:F1:33:9E
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/I7zKD_wmBybR62ZDdxq8HaTxM54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.202.78.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2d:13:8b:d3:f3:f8:7a:25:52:45:3b:ee:3a:c7:86:73:4b:
9d:fa:03:00:40:08:e3:5a:29:4b:f0:05:0a:ee:de:e0:bd:70:
fc:ce:c6:a1:8c:3f:13:39:b1:29:11:88:ae:12:f2:d1:be:3a:
95:cb:5d:4e:8b:a7:00:71:78:05:82:5a:48:35:cf:02:05:54:
6a:35:a0:29:28:a0:50:b3:d6:67:44:90:b5:56:9c:61:49:a2:
1e:fa:01:09:7c:b9:5c:69:2b:c8:ba:fa:39:56:0b:46:07:b4:
83:16:b4:02:0a:48:a5:ea:65:36:f1:26:ef:c7:c4:31:a5:af:
4b:0e:93:be:ab:9f:8d:0c:ef:42:3f:95:1d:28:da:39:ce:b5:
08:71:fd:26:53:55:1a:40:d7:d3:8a:c9:5c:ca:72:7b:0a:96:
90:33:c5:da:92:eb:4f:40:3c:d7:9d:ba:3e:45:85:95:07:38:
89:b9:54:47:b2:8e:a2:e5:63:14:ff:99:02:45:e4:6c:53:17:
fe:7e:7b:a8:ea:49:3a:dc:40:0f:12:8b:04:5a:2b:8c:d3:f6:
58:f2:db:55:e2:1a:90:87:7e:73:67:45:de:8b:d9:0b:95:33:
ec:d7:37:18:27:6f:17:75:f0:5d:99:eb:30:0d:b1:22:c9:49:
cf:49:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org