Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/04OeBf2v6ZRwSkqJDpuMSk3RoCw.roa
File: 04OeBf2v6ZRwSkqJDpuMSk3RoCw.roa (raw, json)
Hash identifier: Tck+IzU8n478ARlidVv80ukZoiCT93zXoZ/BFO9fUmU=
Subject key identifier: D3:83:9E:05:FD:AF:E9:94:70:4A:4A:89:0E:9B:8C:4A:4D:D1:A0:2C
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 018CC26D62B8674B6495623FD82AAECFA962
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/04OeBf2v6ZRwSkqJDpuMSk3RoCw.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39479
IP address blocks: 78.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:62:b8:67:4b:64:95:62:3f:d8:2a:ae:cf:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3839e05fdafe994704a4a890e9b8c4a4dd1a02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:b7:8c:d6:f0:28:c7:20:0c:72:91:76:b7:
4c:02:df:f5:d8:da:7a:7a:f3:c9:1d:0d:f3:ab:84:
9e:92:de:0d:a5:b3:32:70:e9:92:fc:d6:41:c6:14:
74:6d:fb:61:e6:ee:0d:6b:66:8e:8e:3a:2d:f3:db:
2f:9f:24:2a:0e:f6:2b:f5:a9:cd:88:60:b1:39:fc:
70:d8:24:54:94:4e:e8:eb:5d:1b:2f:eb:c7:98:77:
82:81:a8:14:b4:7f:f6:64:e6:63:31:6b:41:fc:c9:
1a:84:4b:d5:a7:b2:b4:49:ae:8f:8e:f6:aa:2b:60:
9f:aa:f5:cd:f7:b3:7a:35:75:7c:ae:48:91:f7:19:
46:fd:24:f1:81:01:09:92:82:f9:ed:48:ec:3f:b2:
00:38:91:22:69:61:c3:d6:fb:03:c6:c7:92:2e:da:
bf:6b:cd:61:41:56:1e:b9:46:fb:48:f0:74:c7:b2:
8b:9a:41:85:16:db:54:4b:dd:bf:26:97:de:3d:09:
27:79:d6:72:f6:d1:c9:c7:55:45:6a:5d:73:ba:99:
e9:cc:85:94:66:24:51:7f:39:b8:67:25:dd:f9:cf:
d3:b0:9f:ab:75:d0:da:9a:1d:e8:c2:8d:0c:a0:08:
a4:0e:ad:3d:c8:0b:36:a7:e8:80:ae:bc:b6:8b:11:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:9E:05:FD:AF:E9:94:70:4A:4A:89:0E:9B:8C:4A:4D:D1:A0:2C
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/04OeBf2v6ZRwSkqJDpuMSk3RoCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ff:eb:5b:9a:bd:ed:40:a3:5f:9e:12:04:3f:f5:29:19:c8:
5f:40:5b:12:c8:da:54:05:40:39:7a:d7:fe:e7:2f:bb:d5:70:
8f:1e:3c:54:5a:82:82:64:8c:44:68:31:3d:91:7a:89:ca:52:
c2:6a:b2:1c:7c:e5:d1:d0:e0:44:21:6d:fb:34:dc:a8:e3:58:
0e:2d:f8:87:79:d8:89:5a:5a:d7:ff:42:89:dc:d2:5a:6d:36:
1a:a9:02:ab:65:2d:9a:fc:52:ec:f2:bb:3f:6a:84:56:d7:32:
7f:6d:f8:87:86:b9:72:66:97:d1:af:6e:9a:91:32:a5:46:5b:
01:d1:7f:45:5f:39:19:68:43:51:ec:3f:b3:a2:53:27:33:e5:
2d:7c:cb:35:dd:34:f4:43:18:c8:1f:4a:8c:85:e9:22:01:e3:
3b:57:7d:85:f5:a5:e1:b1:70:88:f3:ea:28:8d:b2:75:e4:3f:
b5:71:12:b5:c7:ba:3b:dc:89:85:8b:83:31:cc:3e:d1:ad:d1:
aa:65:f3:40:5f:a8:4e:cf:6f:7a:44:b0:3f:81:d9:bb:2f:42:
c6:9a:a7:a5:e6:02:84:5b:72:59:87:75:f2:0b:57:9f:a9:25:
d4:1f:a2:19:8c:6d:29:c9:43:80:3c:63:ab:1e:e0:ec:8b:d8:
20:4e:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:15:15 2024 by rpki-client on console-fra.rpki-client.org