Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/B-tc9j2kNUzMK-RAYMbX7Eq2P9k.roa
File: B-tc9j2kNUzMK-RAYMbX7Eq2P9k.roa (raw, json)
Hash identifier: wPqjYfn51EoLfy8slWNkJh5o/h0VQa8lneCg9rGKiqU=
Subject key identifier: 07:EB:5C:F6:3D:A4:35:4C:CC:2B:E4:40:60:C6:D7:EC:4A:B6:3F:D9
Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial: 018CC9BC9582A2F3FBB85D066C9554294A3B
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/B-tc9j2kNUzMK-RAYMbX7Eq2P9k.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48964
IP address blocks: 178.216.224.0/21 maxlen: 21
178.216.224.0/23 maxlen: 23
178.216.226.0/23 maxlen: 23
178.216.228.0/23 maxlen: 23
178.216.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:95:82:a2:f3:fb:b8:5d:06:6c:95:54:29:4a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07eb5cf63da4354ccc2be44060c6d7ec4ab63fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:20:f7:62:cf:a3:71:2a:f8:a7:22:53:85:
b5:23:75:c9:a9:b0:ba:c2:d7:55:26:a5:95:4b:c9:
b4:51:55:00:f4:fa:e3:d5:2d:d7:95:78:35:74:0a:
54:0b:27:9d:f8:d6:53:f6:dc:34:40:47:23:13:01:
24:99:58:86:b5:ad:a9:d4:db:54:13:a3:bf:17:54:
d7:39:6f:dc:35:be:1f:24:08:12:b5:1b:26:27:1a:
f0:97:7c:e5:e0:2e:8d:69:e9:68:91:15:6d:c1:96:
b3:0a:2f:75:fc:a6:75:b8:b1:33:8d:2e:af:3d:6c:
2c:a7:44:3c:fe:d5:b5:9f:f2:2d:50:ac:44:cb:89:
8f:2a:56:ce:32:49:58:91:8a:e6:cd:d7:6d:31:9e:
83:96:3d:52:03:28:8d:ec:a6:04:12:4b:71:10:2f:
7a:95:1b:5e:66:38:bd:56:64:99:c0:7e:8c:4f:10:
a7:4d:c2:da:60:2f:1d:6e:58:cf:a0:0c:40:76:26:
41:ad:84:91:75:e2:4a:75:46:29:dd:cd:34:8e:b9:
47:4d:fd:5f:e8:cb:9e:c5:75:d3:a3:53:46:5f:40:
57:6b:e5:a1:77:a2:45:a9:85:db:1c:f3:b7:2b:8b:
1f:eb:0d:31:d3:04:86:04:85:11:e3:85:a4:64:2e:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:5C:F6:3D:A4:35:4C:CC:2B:E4:40:60:C6:D7:EC:4A:B6:3F:D9
X509v3 Authority Key Identifier:
keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/B-tc9j2kNUzMK-RAYMbX7Eq2P9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.224.0/21
Signature Algorithm: sha256WithRSAEncryption
81:42:1d:62:3f:23:e5:a3:7d:7f:38:b9:bc:67:35:72:25:0b:
67:02:23:2f:05:15:02:35:4b:f7:c4:69:2d:34:b0:e2:db:ea:
18:b1:85:b5:cb:27:6e:cc:ab:c3:c6:c7:9f:81:bf:bd:34:3f:
c9:2a:65:2d:04:62:94:e1:8e:fb:9b:7c:1c:36:3f:57:11:19:
8b:82:32:a5:53:65:59:f7:70:d7:f1:37:12:21:0d:b2:c0:f6:
a9:40:b6:7a:6e:57:64:67:96:16:8a:64:69:e0:1e:55:32:a1:
a2:ef:7b:96:1f:27:53:7a:aa:cb:b9:bd:a8:65:8c:49:25:f4:
04:ed:10:24:90:76:d4:fc:af:f4:dd:15:dc:e1:e9:87:0b:cc:
3b:92:da:69:b2:7d:d4:bd:c8:0d:06:b1:e1:e8:de:73:53:5d:
d6:54:d3:0d:90:6a:43:c5:50:e1:47:7b:35:52:72:b1:c3:f4:
59:49:f8:19:05:05:a9:cf:4a:9b:4d:87:5c:23:b8:df:f0:2c:
0d:4e:71:d0:18:2b:d0:9d:a3:63:90:e8:c5:44:6d:c7:58:56:
25:c6:70:dc:e6:62:70:db:39:4e:20:db:d4:fb:ab:ee:23:06:
fb:84:57:f4:f1:fb:04:f2:fd:8a:83:93:27:e8:42:5a:f5:13:
c3:00:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:37:43 2024 by rpki-client on console-fra.rpki-client.org