Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/IBHUG8nbcXUQR46XKjDqZPzc_FQ.roa
File: IBHUG8nbcXUQR46XKjDqZPzc_FQ.roa (raw, json)
Hash identifier: eRu4Y+VbWi4i0ihbnUFuLhEkPCZ/k8zrgYofu0JJOdE=
Subject key identifier: 20:11:D4:1B:C9:DB:71:75:10:47:8E:97:2A:30:EA:64:FC:DC:FC:54
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 018CC42519F133573BF3DE79927C6CFC3D79
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/IBHUG8nbcXUQR46XKjDqZPzc_FQ.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400810
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:19:f1:33:57:3b:f3:de:79:92:7c:6c:fc:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2011d41bc9db717510478e972a30ea64fcdcfc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:c2:01:9e:f2:a4:11:b3:ce:db:8f:90:0e:
8c:85:c0:c3:42:d9:8a:9f:95:f7:ad:7b:fe:83:02:
e9:26:90:7d:e6:0d:ef:40:f8:6f:0f:18:92:5c:3a:
fa:ee:d1:8e:45:9b:65:ba:ec:f5:e4:65:3f:73:a9:
24:56:b6:67:83:70:ac:1f:dc:e4:40:98:51:9c:09:
34:06:c0:a4:6a:7d:b3:4e:fa:b2:d3:2e:1a:59:74:
be:af:2a:08:74:9b:53:29:64:bc:28:5b:2b:e7:5a:
91:2a:a5:8d:85:e3:28:da:ee:2d:c7:d2:7f:16:bb:
c3:3c:2d:fd:e5:9f:c3:2d:32:09:26:f9:b3:68:a7:
0a:36:ad:ad:56:5a:4b:5c:a3:d2:a7:f9:9d:6f:68:
61:59:ac:88:bf:a3:f7:80:95:92:d7:35:ec:d6:e8:
d0:34:39:1e:3f:9f:d4:9c:01:dd:57:e2:95:57:36:
b2:96:84:88:be:4e:d4:37:bc:e7:e7:7b:49:c4:de:
a9:8f:f4:2e:8f:ec:21:f8:9d:73:f7:0a:95:9c:89:
29:08:45:33:75:66:ad:68:d8:ff:64:1d:2d:fb:82:
fa:b6:10:6f:66:cd:e6:3d:71:89:f5:d5:01:53:44:
f4:99:d3:d2:c9:eb:3a:c2:bd:a1:06:47:73:87:b9:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:D4:1B:C9:DB:71:75:10:47:8E:97:2A:30:EA:64:FC:DC:FC:54
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/IBHUG8nbcXUQR46XKjDqZPzc_FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:67:0f:25:18:64:68:ef:a9:53:6d:a5:9b:95:83:94:bc:c9:
77:aa:7b:04:19:5a:94:ef:d0:f6:0d:af:94:df:a6:b6:69:69:
2f:e0:8a:88:d1:d2:98:da:7a:ff:5b:e0:b8:45:ec:d5:dc:9e:
be:af:b3:97:2a:b4:28:1c:13:3d:11:d5:b7:54:e6:d5:e9:c8:
fb:2b:29:54:e5:0d:e9:1f:7e:71:8d:c6:d1:fc:89:94:d7:be:
a1:db:bb:39:e8:a6:ed:b2:3a:00:f0:19:5c:24:87:50:5c:ed:
d9:54:1f:e7:21:16:b3:d4:9f:71:cf:01:ae:7c:f5:d5:92:3d:
30:99:f2:b1:f8:70:9f:2c:ab:78:4b:98:1a:bf:a9:ae:7a:32:
9b:79:6a:04:a2:c5:c1:8a:fc:ca:d3:bc:79:87:c8:20:07:6b:
71:bf:8d:a9:d8:0c:6c:0d:af:2e:10:7d:32:ee:9c:9c:e2:25:
c1:dc:23:16:26:f2:60:4c:dc:2d:83:8e:8e:2b:c8:a6:eb:95:
14:05:a6:e6:ea:b0:3d:8f:18:c5:92:43:89:69:30:83:cf:2a:
0a:a4:92:b7:9f:e0:4b:65:6c:8a:83:2b:1c:bc:82:27:b8:31:
54:bf:ce:7a:eb:d6:b7:20:d7:09:bb:2d:00:7f:7e:ae:71:ff:
e7:50:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:10:19 2024 by rpki-client on console-ams.rpki-client.org