Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/3jCniJLe-KFCl3xTfTpLm524ISg.roa
File: 3jCniJLe-KFCl3xTfTpLm524ISg.roa (raw, json)
Hash identifier: a0TDSwXVesQn/JvG5/jDSpemc2ibZxlm2sr+7KFgqzg=
Subject key identifier: DE:30:A7:88:92:DE:F8:A1:42:97:7C:53:7D:3A:4B:9B:9D:B8:21:28
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 018CC86F4B0A53F7E2CB8B9274AB234004BC
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/3jCniJLe-KFCl3xTfTpLm524ISg.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50618
IP address blocks: 178.20.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4b:0a:53:f7:e2:cb:8b:92:74:ab:23:40:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de30a78892def8a142977c537d3a4b9b9db82128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:65:1e:54:ab:43:cc:ac:3c:6b:b5:58:5c:
c7:1c:3a:6a:c8:8f:ec:eb:9c:ef:03:4b:4c:f8:74:
9f:e4:ca:23:14:4c:1b:98:a5:4e:dc:c5:5f:61:79:
3a:a2:8c:91:fc:f4:ce:95:0b:24:81:6a:69:13:b0:
ba:f1:45:85:19:92:bf:f3:d5:6a:e8:a0:6d:79:ce:
fc:51:6c:dc:f6:56:d8:09:e0:32:09:94:11:f0:22:
46:cc:e9:a3:ad:79:ae:ab:15:a3:92:bc:9f:a7:27:
58:f2:c9:dd:79:81:95:82:74:e5:aa:37:4e:7e:b8:
15:e8:ce:af:d8:d9:94:47:b8:8f:39:b2:bc:ff:eb:
dc:34:be:55:b7:ad:26:51:2e:e6:99:b9:ae:f2:1e:
97:72:5d:f7:aa:18:d0:1c:7d:6e:a4:55:4d:f9:f8:
ad:e1:e7:f9:7d:00:ea:b7:0c:61:f9:33:6b:5a:bb:
d2:14:29:ee:f9:ab:5d:5e:aa:9a:71:54:b7:10:33:
f5:0e:f4:67:7b:7a:62:d9:e1:54:2f:6f:bb:47:8a:
53:78:e4:25:97:eb:b9:3b:6e:13:62:c3:f7:ae:79:
55:a8:ab:c1:9a:1e:ec:b2:f8:7f:da:c1:61:63:84:
bd:1f:f9:ff:76:d9:34:01:c8:35:ac:2b:96:c5:de:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:30:A7:88:92:DE:F8:A1:42:97:7C:53:7D:3A:4B:9B:9D:B8:21:28
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/3jCniJLe-KFCl3xTfTpLm524ISg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3d:20:46:32:ca:5a:74:16:3d:44:47:c0:28:58:e0:fe:94:
0c:70:4e:e2:d0:6d:03:bb:70:e8:0c:06:54:1d:5c:8b:70:7a:
7e:55:df:99:c9:7c:06:60:41:fe:c3:86:c2:ef:2e:6a:b7:5e:
6d:36:7a:2c:bd:1e:fe:e8:2b:fb:53:2d:18:de:19:8c:66:9b:
78:4b:5b:fc:be:15:a7:53:8d:79:19:3a:53:2b:2b:c5:a5:79:
aa:38:01:50:09:84:83:bc:dc:e0:29:17:35:17:4d:ec:fa:21:
a4:5d:9d:e7:bd:5a:a0:fa:4d:c9:e5:49:69:65:b1:25:e4:a2:
79:63:db:b4:b6:b1:89:bf:d8:40:be:73:0a:73:a1:a9:c9:5c:
a2:0b:2a:f4:4e:81:b1:3e:82:92:13:9f:17:fb:55:52:a4:29:
e4:14:69:bb:d0:b1:a0:e5:7e:24:13:fa:77:bf:60:74:37:b3:
71:77:22:1b:4b:28:5b:5a:64:b0:55:1c:96:3b:a7:4c:81:c3:
44:9c:94:32:57:47:ac:a3:e1:b5:85:23:13:ef:e4:50:31:2d:
3f:91:48:81:6f:9b:6b:d3:26:68:90:a9:24:c4:a8:cd:55:ab:
5a:36:ce:d3:50:7f:93:3b:52:7d:f3:cf:84:04:5b:ab:68:a4:
c0:4b:29:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb0sKU/fiy4uSdKsjQAS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjQwMTAyMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTMwYTc4ODkyZGVmOGExNDI5NzdjNTM3ZDNhNGI5YjlkYjgyMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOxlHlSrQ8ysPGu1WFzHHDpqyI/s
65zvA0tM+HSf5MojFEwbmKVO3MVfYXk6ooyR/PTOlQskgWppE7C68UWFGZK/89Vq
6KBtec78UWzc9lbYCeAyCZQR8CJGzOmjrXmuqxWjkryfpydY8sndeYGVgnTlqjdO
frgV6M6v2NmUR7iPObK8/+vcNL5Vt60mUS7mmbmu8h6Xcl33qhjQHH1upFVN+fit
4ef5fQDqtwxh+TNrWrvSFCnu+atdXqqacVS3EDP1DvRne3pi2eFUL2+7R4pTeOQl
l+u5O24TYsP3rnlVqKvBmh7ssvh/2sFhY4S9H/n/dtk0Acg1rCuWxd502wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4wp4iS3vihQpd8U306S5uduCEoMB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvM2pDbmlKTGUtS0ZDbDN4VGZUcExtNTI0SVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshQ2MA0G
CSqGSIb3DQEBCwUAA4IBAQAMPSBGMspadBY9REfAKFjg/pQMcE7i0G0Du3DoDAZU
HVyLcHp+Vd+ZyXwGYEH+w4bC7y5qt15tNnosvR7+6Cv7Uy0Y3hmMZpt4S1v8vhWn
U415GTpTKyvFpXmqOAFQCYSDvNzgKRc1F03s+iGkXZ3nvVqg+k3J5UlpZbEl5KJ5
Y9u0trGJv9hAvnMKc6GpyVyiCyr0ToGxPoKSE58X+1VSpCnkFGm70LGg5X4kE/p3
v2B0N7NxdyIbSyhbWmSwVRyWO6dMgcNEnJQyV0eso+G1hSMT7+RQMS0/kUiBb5tr
0yZokKkkxKjNVataNs7TUH+TO1J988+EBFuraKTASyn3
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:35:54 2024 by rpki-client on console-ams.rpki-client.org