Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rMCrWMIVCGITsMDaAFH4lnAxKcc.roa
File: rMCrWMIVCGITsMDaAFH4lnAxKcc.roa (raw, json)
Hash identifier: GL7r8ElxB3JTVa44CohfjawotjkzE/ZqtBMLAEl5+9s=
Subject key identifier: AC:C0:AB:58:C2:15:08:62:13:B0:C0:DA:00:51:F8:96:70:31:29:C7
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0190B0A30DDD3DBE1238F263BDB967BEE457
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rMCrWMIVCGITsMDaAFH4lnAxKcc.roa
Signing time: Sun 14 Jul 2024 09:46:34 +0000
ROA not before: Sun 14 Jul 2024 09:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 178.239.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b0:a3:0d:dd:3d:be:12:38:f2:63:bd:b9:67:be:e4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 14 09:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc0ab58c215086213b0c0da0051f896703129c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:33:d5:11:88:79:45:d8:f0:c2:75:20:56:
45:86:4c:89:22:48:1c:58:39:e3:4c:6b:53:c9:a0:
dd:89:a7:b3:de:98:1b:ba:ed:df:15:ec:e0:a1:e2:
8c:f0:74:38:f4:26:05:dd:01:7e:40:ca:39:00:7a:
f7:ac:73:fc:8f:8d:1b:d6:f8:22:0c:cc:a8:95:20:
cc:db:76:b3:05:64:e7:f6:a0:ea:e2:34:2d:98:e7:
f7:8f:64:b7:9b:dd:31:65:87:32:2c:9b:f1:8e:93:
ee:a6:6e:56:86:60:b0:c1:05:1d:3b:e0:b2:d0:53:
6d:77:69:ad:c9:9f:85:38:13:b9:da:4a:c6:ca:3c:
bd:ce:cb:50:1b:2f:70:5b:7e:d6:fc:db:dc:2c:53:
29:4f:b7:4c:cd:9e:ae:34:5d:23:fc:79:1b:f4:eb:
e0:e8:a3:bf:c6:bc:55:7f:83:d6:ab:21:d4:0f:ca:
28:24:e5:32:37:21:84:cd:b0:fb:d5:18:7d:78:51:
7c:38:9a:5d:4e:40:bc:f3:31:f0:a4:73:02:ea:6f:
e6:01:24:01:bd:30:bd:9f:b3:da:ca:bb:8a:ef:15:
e1:e1:b9:1e:ab:b8:e0:e6:27:b1:f4:70:7c:c2:34:
b8:ef:39:07:d4:6c:19:d9:43:7c:ab:53:88:5b:3a:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C0:AB:58:C2:15:08:62:13:B0:C0:DA:00:51:F8:96:70:31:29:C7
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rMCrWMIVCGITsMDaAFH4lnAxKcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.157.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e8:e1:74:fe:79:49:29:d7:47:c5:3e:d8:10:33:ae:2d:6d:
b0:2c:b9:f8:69:7e:c9:06:01:b2:00:18:3b:4e:44:44:cd:4b:
ce:62:38:21:79:44:b6:41:75:80:a4:7e:94:9c:86:76:de:5e:
42:25:7b:4b:b0:d6:21:dd:25:9b:8d:4d:3b:6b:75:58:20:1f:
20:b5:02:5d:3f:63:7d:bb:ec:83:1f:d2:18:94:0a:df:43:16:
32:ed:37:25:d1:27:39:3b:51:6b:95:91:79:59:12:09:86:25:
3e:3f:67:ad:0b:34:5d:4c:b4:90:fc:06:41:5f:0e:3d:da:6e:
53:91:0b:29:39:d4:3c:1f:74:08:11:85:ef:49:4c:82:a3:f8:
dc:b1:bc:f3:f7:20:e8:e7:94:9d:cf:a9:20:79:41:2a:2b:69:
c4:07:3e:b6:f0:25:5c:8d:54:25:de:ff:ac:91:c7:b9:39:8a:
64:c2:26:1c:93:91:6d:61:86:21:46:74:b3:71:07:f6:9c:4a:
d2:cb:d3:ef:4a:6f:e9:b6:42:da:eb:17:63:ac:c3:4a:ee:0c:
1c:3e:53:b7:02:bf:61:7a:3e:aa:eb:69:48:5b:3b:f8:44:e1:
d4:74:87:32:e0:ce:1d:f1:a9:9f:b5:6a:45:ed:28:57:ce:89:
05:0c:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:14:02 2024 by rpki-client on console-ams.rpki-client.org