Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/eHGcoK_Q0gSUcSF-0LcDwiitdpA.roa
File: eHGcoK_Q0gSUcSF-0LcDwiitdpA.roa (raw, json)
Hash identifier: 8J9hVRlx3VC3YTGF6qOb2UNpZrY6+WJwCVXEkAWa/1Y=
Subject key identifier: 78:71:9C:A0:AF:D0:D2:04:94:71:21:7E:D0:B7:03:C2:28:AD:76:90
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 018CC26D5A14FC3587FE74E7217B7CC3AE15
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/eHGcoK_Q0gSUcSF-0LcDwiitdpA.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34756
IP address blocks: 194.105.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:14:fc:35:87:fe:74:e7:21:7b:7c:c3:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78719ca0afd0d2049471217ed0b703c228ad7690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:d3:fa:5a:59:d2:14:e6:3a:7b:37:af:7a:
e2:1f:22:2c:c9:07:b6:83:cb:78:15:8a:13:09:52:
94:28:6b:15:08:4b:ec:19:9f:1e:60:34:e3:f1:b3:
f0:3e:f7:4a:b0:e0:9d:48:2d:b6:9c:c6:82:35:50:
f5:08:6f:6a:11:f4:aa:7b:85:ec:a3:52:2f:c5:2e:
6d:d8:7a:23:d5:c7:f3:12:00:29:82:e7:8b:71:f6:
04:40:da:31:ee:92:1d:d0:2e:0e:c5:8f:80:24:66:
56:0d:3d:29:ad:49:3e:08:90:7c:fd:2d:d6:78:ae:
d4:bc:75:4b:2a:e6:85:18:fb:9e:1b:80:0f:a5:ea:
2e:22:b9:80:89:93:9c:01:21:88:69:83:5f:82:7b:
f3:5d:f0:4d:76:a6:58:fb:e3:de:fa:1f:14:0e:18:
24:a2:95:4d:93:e4:b7:7a:88:b9:2e:24:a9:65:60:
9f:16:e5:9b:f6:a5:90:66:aa:5f:f2:e7:60:f0:a9:
e0:27:8e:44:84:4b:d6:b4:e7:c1:ed:e0:c5:b8:d5:
4a:82:e6:c2:2d:93:68:19:2e:dc:db:00:f6:60:6d:
f0:6d:8b:ae:23:90:d6:7c:20:0e:bc:61:c4:42:1b:
87:09:ed:ff:f7:f1:6d:e8:fe:20:6d:42:71:19:59:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:9C:A0:AF:D0:D2:04:94:71:21:7E:D0:B7:03:C2:28:AD:76:90
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/eHGcoK_Q0gSUcSF-0LcDwiitdpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.150.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2a:d5:06:b2:7e:3c:51:6d:8c:41:c4:56:68:54:1c:e0:b3:
b1:99:c4:34:3a:57:1c:c0:c8:aa:13:91:6a:39:43:17:db:24:
2d:24:d3:8a:eb:24:02:59:77:b5:aa:32:84:1c:16:25:7e:a2:
c3:49:a5:2a:a4:6c:21:cf:c6:63:fd:f9:9b:31:9f:9a:00:1b:
85:06:49:b6:ee:bd:93:76:de:3a:d8:33:3e:c3:bf:67:5d:59:
cd:4a:39:fc:b1:45:d3:2d:3e:13:39:4d:e6:ce:93:db:ef:7a:
19:31:00:65:34:91:35:a6:95:29:99:2d:81:f4:88:8a:a0:bd:
38:ba:d0:5f:a0:db:6d:6e:4f:e9:bd:6e:1c:40:00:dd:75:e9:
e1:6f:c9:c2:78:3c:ee:8e:0c:bf:b5:6c:2a:58:d4:ea:94:a9:
40:d9:94:78:48:41:32:f9:2c:a4:f8:27:d3:3e:14:42:25:63:
9c:e5:7f:ca:8f:91:ff:35:57:d7:5c:37:56:f4:39:bb:23:40:
33:88:a7:57:f4:5c:8d:ad:ba:3d:7f:27:65:48:6b:de:ab:a1:
75:e3:a0:6d:ee:68:8b:94:1f:b2:53:35:0f:1f:90:cb:ab:02:
b8:3c:c0:f5:c3:d4:00:25:dc:16:eb:c4:b9:2a:fc:4a:0d:b8:
a6:34:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:11:15 2024 by rpki-client on console-fra.rpki-client.org