Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bMW3SySRf0OaXjqK2w37ED0thaU.roa
File: bMW3SySRf0OaXjqK2w37ED0thaU.roa (raw, json)
Hash identifier: ZHFjibOSCa7PLB4PJWBGpK47fajsE70FKpux3t/IgUM=
Subject key identifier: 6C:C5:B7:4B:24:91:7F:43:9A:5E:3A:8A:DB:0D:FB:10:3D:2D:85:A5
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0191A2EDDB73F8E05031AC7F5A73EB54F01B
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bMW3SySRf0OaXjqK2w37ED0thaU.roa
Signing time: Fri 30 Aug 2024 10:56:22 +0000
ROA not before: Fri 30 Aug 2024 10:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 178.236.253.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:ed:db:73:f8:e0:50:31:ac:7f:5a:73:eb:54:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 30 10:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc5b74b24917f439a5e3a8adb0dfb103d2d85a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:af:a7:2b:1c:e7:2a:3b:b5:45:87:c3:af:
69:0e:d3:86:2c:e7:89:b6:a7:bc:5e:7d:8d:9d:99:
da:cf:dc:63:4a:5b:63:8b:0b:5d:1f:2e:e7:9f:69:
50:b0:4d:d7:fe:0d:b4:83:fd:aa:ae:5a:a0:16:17:
13:36:fa:75:cc:49:55:fb:c1:f8:77:c8:e6:85:74:
53:44:a4:54:9c:bf:97:bc:6f:2a:8f:2f:16:75:a6:
16:7b:27:d8:43:26:60:f5:68:8a:21:94:d7:fe:8c:
1e:a9:4f:82:92:61:dd:7d:a8:31:ad:3d:ef:fd:58:
23:38:b0:72:18:6c:ec:69:7c:fb:2f:b8:98:95:55:
ca:81:05:20:2f:5c:6e:ca:db:ed:d8:cf:2b:84:15:
85:77:0f:1e:3e:ea:24:c6:c2:50:66:6e:fd:65:d8:
59:42:b8:dd:c5:ac:65:ac:01:ec:f2:b6:26:db:22:
e9:f7:1d:9f:4e:e1:e9:7a:d7:fe:ec:29:56:d7:25:
c2:a6:c6:88:b8:c0:bd:9f:08:bc:c3:76:31:f0:ce:
67:c0:37:69:6b:17:c7:d0:bd:45:a9:3a:fd:b1:c1:
e5:60:1b:77:96:bf:f7:2c:0e:e7:35:7e:e9:33:e0:
2d:10:25:bd:94:e0:63:95:b2:b5:8b:de:aa:61:64:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:B7:4B:24:91:7F:43:9A:5E:3A:8A:DB:0D:FB:10:3D:2D:85:A5
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bMW3SySRf0OaXjqK2w37ED0thaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.253.0-178.236.254.255
Signature Algorithm: sha256WithRSAEncryption
4c:2d:2d:58:2f:62:c3:77:99:76:fe:8a:15:60:c5:7e:09:2f:
2c:35:25:28:5d:af:84:12:e7:3a:37:6d:9e:d6:df:32:20:3e:
8a:cd:e6:47:fe:9f:2e:78:85:b2:ce:f4:3f:6c:68:cb:8f:43:
40:51:cc:c9:6c:56:6a:fc:34:13:bb:02:69:ba:81:6b:f2:55:
2c:ae:90:14:ab:57:87:fd:77:03:5f:7b:39:95:8d:8f:10:24:
e0:d5:bf:66:2a:2d:b8:86:d5:0a:33:0d:34:11:17:39:e6:62:
c1:95:5e:ea:5d:7f:fa:55:01:8b:b9:02:0d:59:77:3e:2f:68:
25:e8:4a:18:6b:58:3a:68:6a:ad:26:fa:a6:46:71:5f:55:21:
5c:5d:76:ee:e4:a1:9f:fc:6e:15:c6:77:a0:4f:74:85:8b:4c:
71:3c:7f:98:7f:65:90:17:e1:05:28:2e:4d:62:c7:e0:03:ea:
1a:6b:fc:1b:ec:c1:60:ea:32:76:a9:5d:b9:49:5b:0f:d2:2e:
0e:40:d0:f5:43:b7:95:c9:1f:c6:c4:37:e7:c2:50:d8:b4:4b:
0b:23:15:03:88:19:0b:0b:a7:5b:29:86:a2:38:c3:ee:9e:31:
ab:f3:5c:91:44:f5:d1:a2:7e:51:cc:7e:c7:74:22:d6:36:53:
4f:40:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:53 2024 by rpki-client on console-fra.rpki-client.org