Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-8WB9tSv-rXwFcWf7_S2zJlY5KE.roa
File: 1-8WB9tSv-rXwFcWf7_S2zJlY5KE.roa (raw, json)
Hash identifier: TDoPLwB14M4Wm4wlsmyomeBevaUmLtVMS9c1oAyUp3c=
Subject key identifier: FB:C5:81:F6:D4:AF:FA:B5:F0:15:C5:9F:EF:F4:B6:CC:99:58:E4:A1
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018CC56E3AA014302ED291E80399E6FD403E
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-8WB9tSv-rXwFcWf7_S2zJlY5KE.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49091
IP address blocks: 178.172.253.0/24 maxlen: 24
178.172.150.0/24 maxlen: 24
217.21.38.0/24 maxlen: 24
217.21.39.0/24 maxlen: 24
185.70.14.0/24 maxlen: 24
185.70.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3a:a0:14:30:2e:d2:91:e8:03:99:e6:fd:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbc581f6d4affab5f015c59feff4b6cc9958e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:d5:2b:c9:98:c6:3d:f8:86:47:63:14:74:
d2:b6:69:9e:e5:2c:21:f2:52:3e:e9:68:78:30:08:
f8:9f:ac:1e:dd:65:5b:58:08:12:20:d7:cc:7d:0f:
6e:11:dd:35:67:dc:91:8d:b7:ad:74:d5:4b:8d:e2:
a6:8e:24:f9:fb:40:96:56:71:51:52:cf:f5:bf:49:
92:05:ca:f0:e3:22:8a:96:a2:a2:b6:a0:4f:8b:0b:
9c:29:68:ce:63:a2:5e:89:a1:2d:7d:90:61:95:42:
9b:95:7a:d2:cd:95:2d:a9:4c:16:52:8b:b0:77:aa:
17:1c:cd:1b:84:83:42:61:67:cd:d5:fb:2f:6c:a2:
21:ec:43:9a:be:8c:e6:c7:a4:97:a7:99:ee:8f:a3:
18:da:c0:da:54:eb:70:ad:4c:76:d9:6f:0f:fb:a2:
68:9f:28:39:b6:6a:4f:75:50:e2:ef:92:43:66:c3:
3a:20:89:6b:4c:2a:3a:a0:5e:52:1b:f8:de:4b:4b:
55:0c:c9:8a:27:d8:cd:a5:bb:85:36:c1:b8:c9:0b:
ba:15:c7:47:1b:29:57:5d:5b:a0:74:5b:e8:e7:5f:
de:f2:f7:a7:18:1c:0e:91:d6:57:85:31:48:b9:59:
f2:25:1d:f9:30:c5:f5:b9:3f:2c:2a:63:c8:fa:23:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:81:F6:D4:AF:FA:B5:F0:15:C5:9F:EF:F4:B6:CC:99:58:E4:A1
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-8WB9tSv-rXwFcWf7_S2zJlY5KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.172.150.0/24
178.172.253.0/24
185.70.14.0/23
217.21.38.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:b0:b6:3d:da:ce:39:d3:c3:4d:c5:31:62:e3:82:90:bc:01:
5f:e2:46:d8:31:42:87:a6:cb:02:f9:82:35:31:7a:f3:5b:33:
d7:19:8a:03:4f:c4:0a:19:53:4c:38:54:dc:ce:56:be:84:80:
8e:7e:1b:e9:c7:b2:95:d4:53:04:69:55:0d:02:1e:1c:9c:84:
8a:46:bb:00:41:6a:74:54:f6:50:18:2b:60:cf:45:4f:55:bd:
c8:9f:66:f1:86:48:31:29:20:3f:57:07:11:aa:c9:6b:2b:83:
a9:61:99:e0:7a:8a:da:29:1d:2e:ae:c7:05:4f:e5:b2:dc:8b:
9a:f8:6a:41:b0:89:53:36:4d:34:6d:99:82:b3:bd:33:59:10:
23:f9:15:3a:bb:01:90:70:ca:7e:a3:27:1d:c4:08:ab:57:39:
b6:8e:02:54:68:e5:95:98:63:cc:8f:17:0d:d0:47:2d:d1:c0:
0d:dd:56:9b:d8:f8:04:81:a6:7a:94:4d:a5:01:83:36:da:f7:
15:6d:0c:a2:f9:e7:16:47:75:ce:5b:98:f0:03:bd:26:d9:b2:
02:e1:c4:69:88:4a:73:b2:5c:bd:0e:fb:d6:00:cc:57:9d:a6:
dc:fd:3a:24:83:1e:0f:58:74:d1:76:aa:ae:d6:50:a8:c8:da:
95:a9:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:33 2024 by rpki-client on console-ams.rpki-client.org