Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1yH7Ri3PAEdOTvpMbxGqgm3XcPw.roa
File: 1yH7Ri3PAEdOTvpMbxGqgm3XcPw.roa (raw, json)
Hash identifier: N4Fk2uedh3yWq8eEuuTWLNj1h83UDcBzGe/NOOKMnL4=
Subject key identifier: D7:21:FB:46:2D:CF:00:47:4E:4E:FA:4C:6F:11:AA:82:6D:D7:70:FC
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC4933EE0D81884E5B5390CF637943B97
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1yH7Ri3PAEdOTvpMbxGqgm3XcPw.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203671
IP address blocks: 147.78.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3e:e0:d8:18:84:e5:b5:39:0c:f6:37:94:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d721fb462dcf00474e4efa4c6f11aa826dd770fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:09:64:78:9d:4a:dd:a2:05:42:34:a0:5d:
1f:72:12:42:4d:6f:ca:99:7f:69:d4:60:48:31:13:
00:9e:16:a4:63:47:59:44:23:d8:f7:f9:91:50:7f:
cf:f3:5c:d2:3d:84:7d:04:82:c8:f6:04:30:1f:72:
c4:32:01:77:0d:7f:ad:d4:b6:2c:dd:45:87:72:b6:
88:43:a4:4f:0d:33:a6:7c:da:96:d7:d0:07:59:18:
ab:91:0d:5c:7d:72:78:0c:b0:c7:d0:1d:e4:1e:8c:
95:5b:33:d8:b3:ff:39:86:ad:44:3a:bb:b0:bd:67:
a4:2f:f4:45:f3:af:6c:d2:33:a3:d5:d5:37:fa:65:
44:10:9a:3e:9a:94:7c:ae:bf:6a:bf:ca:79:c3:3a:
b0:4b:1b:23:af:4c:ae:b2:2c:cf:c7:f8:2c:fc:20:
9b:18:e9:12:12:c1:ed:25:66:47:ae:90:1c:ef:7d:
b1:04:16:a5:ad:a1:cd:84:35:7e:c8:78:c3:16:3c:
6e:a3:50:b3:26:5b:ff:e8:bc:46:91:36:41:c3:ed:
62:07:f8:af:fa:02:ea:f8:56:e8:2d:7f:d8:e6:63:
21:2c:d8:af:e8:c5:29:1c:ef:d3:79:59:6b:25:3e:
f1:78:67:7f:a8:d8:98:62:e5:d9:68:0a:b1:fe:68:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:FB:46:2D:CF:00:47:4E:4E:FA:4C:6F:11:AA:82:6D:D7:70:FC
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1yH7Ri3PAEdOTvpMbxGqgm3XcPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:98:a4:95:1c:c0:3a:c3:d3:d6:3b:2c:05:c8:bc:33:b5:ef:
1d:d2:d7:91:c9:b5:04:b5:2d:27:21:ef:a9:77:8c:24:68:15:
42:8d:3e:b3:8d:fe:dc:37:60:06:04:ee:8b:ef:9d:08:1f:b8:
38:3c:6d:9a:79:91:c0:85:76:f8:a3:a6:d8:d1:64:bb:41:84:
74:5e:72:20:4e:2a:28:8f:c8:88:4b:f8:be:18:7b:29:e9:30:
ca:32:ea:00:19:6f:55:18:89:b8:7d:f8:47:ef:5c:63:37:1f:
a8:e4:d2:10:f9:95:2e:3c:75:c3:4d:f7:be:44:78:7a:21:9b:
a1:b4:e4:2f:b4:b9:09:08:05:cf:96:58:4b:86:b9:5f:dd:23:
57:91:1b:d0:c9:8f:b3:0c:67:5a:64:06:de:fe:ef:03:4e:32:
8a:11:6f:aa:9f:ad:ad:40:e3:dd:60:75:30:7b:02:17:42:7f:
ee:0d:6c:f1:7a:a5:75:ec:98:24:68:38:fa:6d:91:51:83:ff:
f7:b4:d1:59:bc:57:06:2b:d8:99:57:2a:37:cf:1e:da:2e:ff:
e9:fa:82:81:27:77:41:93:de:5a:79:13:29:7e:24:e5:a1:c1:
d4:23:e1:95:69:77:82:4d:d5:21:70:ed:ac:47:a7:60:7d:6a:
d9:b1:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 18:31:59 2024 by rpki-client on console-ams.rpki-client.org