Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/pN54WbA-KiS8fv-Z9mDScrHKjtc.roa
File: pN54WbA-KiS8fv-Z9mDScrHKjtc.roa (raw, json)
Hash identifier: Fq4dJ7WGUj9bpaAQbciexXQJKfe1Lxn/5KdaXLVuzsw=
Subject key identifier: A4:DE:78:59:B0:3E:2A:24:BC:7E:FF:99:F6:60:D2:72:B1:CA:8E:D7
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 018CC64AD4232070E2548BBD0110D12B488A
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/pN54WbA-KiS8fv-Z9mDScrHKjtc.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44099
IP address blocks: 178.248.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d4:23:20:70:e2:54:8b:bd:01:10:d1:2b:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4de7859b03e2a24bc7eff99f660d272b1ca8ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:8c:e0:2a:23:40:44:90:d5:fb:49:fe:63:
43:e4:20:30:49:10:c7:ff:43:60:19:9f:6f:db:26:
16:13:0e:a7:08:62:d0:f3:4c:3d:15:66:89:a5:49:
1e:3c:73:bf:f1:37:e8:a9:90:3c:f0:3c:c5:37:b7:
ca:8e:fe:60:cd:75:02:6e:63:a0:08:9c:49:71:7d:
74:7f:e3:71:45:5a:2b:ee:bd:89:9a:f3:06:bd:6f:
5c:f6:ce:23:1b:2a:6d:27:a5:58:d3:95:8a:74:a2:
2a:7e:79:40:3d:04:8f:67:a2:7e:f7:25:6c:52:50:
67:63:61:58:ef:e2:92:ec:7f:e0:a8:0d:bc:96:b0:
26:82:68:47:0d:c5:9a:73:c1:2c:c6:a2:dd:9f:6b:
ee:34:08:30:63:a0:8f:59:a7:ba:0c:bf:ce:b5:c6:
5d:32:a2:75:1a:07:96:86:0e:2e:66:e3:f3:a9:11:
7f:ef:d7:e7:d6:07:b0:c0:17:87:47:d2:56:11:b5:
3b:5b:c1:5d:e9:f2:d5:09:0c:a5:f7:3d:02:dd:eb:
2c:46:61:59:c8:0f:e2:1b:cd:ea:c2:c4:66:fb:e3:
3a:f5:28:90:7e:2d:9c:bc:7c:70:5d:f9:e0:29:4d:
82:0b:43:31:2a:b4:8f:ec:4a:32:22:a2:6d:87:79:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:78:59:B0:3E:2A:24:BC:7E:FF:99:F6:60:D2:72:B1:CA:8E:D7
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/pN54WbA-KiS8fv-Z9mDScrHKjtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.184.0/21
Signature Algorithm: sha256WithRSAEncryption
49:f1:64:53:30:59:71:82:f9:36:15:20:3d:57:21:90:b5:ce:
db:6e:79:8e:8d:90:e6:f1:05:69:6a:f6:42:4f:8a:62:44:c0:
71:b6:d9:91:f4:72:d1:87:8c:5d:81:42:91:7c:31:79:d0:0c:
59:89:11:81:03:00:c4:21:29:16:15:e8:fb:d4:b7:18:33:7b:
ef:27:45:4b:17:26:3e:18:09:5a:70:7c:e3:bd:7a:d9:16:98:
de:91:11:56:56:f0:e2:62:58:bb:b6:76:1c:9c:65:e7:19:50:
18:42:e3:3c:77:cf:97:0a:93:87:2a:cb:b5:23:5e:49:e7:5e:
6d:d6:8f:c2:60:47:bf:ae:12:72:5e:e8:46:c3:f3:32:c5:a6:
98:ee:f8:3c:d7:22:7c:e5:a0:4a:6f:a3:16:80:38:43:c3:24:
aa:36:bb:8a:01:74:b1:59:79:9d:27:7a:ac:22:7a:15:9e:ef:
53:3c:6e:f4:4b:54:4d:77:8e:c9:c7:80:f7:6a:ab:45:05:dc:
9c:a8:6b:6f:82:08:21:df:88:f7:67:8c:36:06:7d:3c:91:9a:
01:ef:f4:73:2f:8c:a9:f5:91:40:a2:5e:d6:5c:5d:1d:33:a1:
d7:87:fe:f3:9d:e5:04:54:b0:d2:bd:d5:47:05:0b:87:1a:93:
b0:e1:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:26:16 2024 by rpki-client on console-ams.rpki-client.org