Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/drCHGsFCH9gtO7i946SJRwJLVRQ.roa
File: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (raw, json)
Hash identifier: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=
Subject key identifier: 76:B0:87:1A:C1:42:1F:D8:2D:3B:B8:BD:E3:A4:89:47:02:4B:55:14
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 01941F8C20CFEE01904068BE2DA544411A59
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/drCHGsFCH9gtO7i946SJRwJLVRQ.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211559
IP address blocks: 213.178.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:cf:ee:01:90:40:68:be:2d:a5:44:41:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76b0871ac1421fd82d3bb8bde3a48947024b5514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:0f:3e:e7:51:30:f5:93:bb:25:81:be:05:
80:13:e8:5b:46:93:8f:fb:26:af:2a:eb:1a:35:4c:
ee:49:02:a7:31:d0:b4:de:04:e8:18:1a:ed:f4:84:
d5:3a:bc:af:1b:36:a0:a4:af:68:e5:99:7a:2a:3f:
d8:57:00:52:d2:e4:21:bb:02:2f:aa:fb:37:b7:b3:
77:7a:4f:ff:a3:6c:7d:ab:4a:0b:e7:ae:ea:de:1a:
95:14:21:0a:3e:43:22:f0:21:ef:f8:5b:38:25:e5:
e4:a2:66:18:04:ad:a3:16:4c:96:0e:97:7e:c4:94:
43:b6:3b:98:b3:c7:3c:21:80:33:3d:75:bf:54:93:
3e:0a:1f:d2:84:0f:10:4f:c5:cc:2b:b5:75:8d:e3:
38:60:c3:d2:64:c5:4e:a9:3b:91:6e:80:8a:33:91:
6d:15:35:b7:e0:47:ad:99:52:79:82:3d:73:37:53:
36:4c:fc:99:49:7e:6c:6a:68:44:70:48:57:70:b8:
24:8d:40:8e:78:53:3d:57:c4:5e:7b:ef:d8:c8:58:
63:07:da:f2:c8:fc:62:16:c9:e7:33:a1:c7:7d:fd:
84:e1:63:56:a0:ca:e5:64:83:c9:78:e4:f8:83:d5:
7b:86:2d:3f:9b:de:30:da:b8:08:d3:50:aa:42:3e:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:87:1A:C1:42:1F:D8:2D:3B:B8:BD:E3:A4:89:47:02:4B:55:14
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/drCHGsFCH9gtO7i946SJRwJLVRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
10:88:56:23:59:c7:8d:8d:13:3b:7d:e8:b2:a9:21:33:0f:65:
20:b0:09:6b:3a:38:27:e7:dc:94:24:8f:e2:0f:2f:a2:9f:31:
35:c9:10:64:83:1b:43:6d:87:fe:5b:04:86:5f:73:d7:ac:a0:
51:b5:28:27:fa:63:75:34:47:2f:75:06:a5:0a:19:8c:51:8f:
15:a9:a6:ab:00:fa:11:a7:26:02:7a:5b:fe:e2:e9:79:c6:6f:
66:dc:29:47:98:46:0c:6c:24:e3:00:c9:d9:06:fa:9b:90:7a:
78:cf:46:a2:b7:ee:a9:a4:4e:2f:b7:de:08:15:42:53:3d:f9:
4d:f0:53:ad:44:68:bb:58:c4:fa:36:d5:27:99:89:b1:ca:1a:
b6:13:42:f1:ad:36:c5:9a:8b:57:02:74:ae:c7:35:47:e4:60:
67:04:0d:5c:f5:d7:03:48:55:b4:42:2b:32:d5:0d:06:5f:73:
bc:b3:14:14:02:24:7c:9f:2a:fa:ea:ee:9f:dc:70:d7:c1:76:
a2:fc:90:d1:b9:3f:da:ff:2c:10:46:ec:aa:02:02:ef:28:e3:
d0:aa:4a:1a:ce:01:ea:28:0f:50:38:5f:03:42:d5:f3:ad:91:
a2:38:79:a9:0e:a4:28:03:33:bd:b6:a3:0c:e3:c5:85:38:dd:
b0:49:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:26 2025 by rpki-client