Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/1-xu-HU1wpc_JwV2simmXQyEt6sE.roa
File: 1-xu-HU1wpc_JwV2simmXQyEt6sE.roa (raw, json)
Hash identifier: Pis9Jr/zWtCpFb3fCq3i2bMxMawwcUNMgkfJUaoK2V4=
Subject key identifier: FB:1B:BE:1D:4D:70:A5:CF:C9:C1:5D:AC:8A:69:97:43:21:2D:EA:C1
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 018CC56DFF2E27096C17DC01FB52AE05E541
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/1-xu-HU1wpc_JwV2simmXQyEt6sE.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51664
IP address blocks: 78.40.90.0/24 maxlen: 24
78.40.89.0/24 maxlen: 24
78.40.88.0/24 maxlen: 24
78.40.91.0/24 maxlen: 24
78.40.93.0/24 maxlen: 24
78.40.92.0/24 maxlen: 24
78.40.95.0/24 maxlen: 24
78.40.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ff:2e:27:09:6c:17:dc:01:fb:52:ae:05:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb1bbe1d4d70a5cfc9c15dac8a699743212deac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:57:56:e9:41:6f:b0:69:de:74:ac:13:8d:
c5:f8:b2:4a:af:e8:06:96:f1:6c:1e:49:cc:9e:4c:
b6:55:4c:72:71:92:f3:7e:8f:25:24:c4:47:14:36:
79:b1:5d:d5:89:08:5e:c1:fe:3d:30:ec:4d:a6:1d:
4d:c8:32:c9:5d:23:69:e2:de:b6:b3:03:e3:70:bd:
75:93:00:a4:44:1d:a2:d8:ad:32:e8:6d:72:f8:23:
f3:2a:c5:75:84:e1:bf:d4:f0:f1:b7:05:7e:ad:91:
e9:92:02:de:95:c7:26:d2:af:2a:85:97:e9:dd:48:
b5:55:c7:36:c0:f4:cd:cf:b2:04:05:39:a4:f9:b4:
97:2b:18:73:0b:ab:8f:c6:d6:bd:32:52:71:65:f9:
7e:8e:69:f3:00:4b:72:47:32:84:40:ec:18:e3:4c:
5b:e5:2d:46:b0:3e:47:8a:ef:08:7c:63:65:42:85:
c2:c4:2b:c4:72:b2:67:a2:22:50:8e:71:8a:28:e2:
fa:43:57:67:0a:40:47:a4:28:3c:41:85:ed:74:0d:
e1:4b:44:2d:50:cb:37:33:35:19:60:a0:6e:28:fa:
b2:f1:89:12:f5:92:42:49:e0:62:dc:57:ca:2f:e8:
b9:be:b7:bb:6e:14:d2:74:67:e7:ee:cf:57:87:66:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:BE:1D:4D:70:A5:CF:C9:C1:5D:AC:8A:69:97:43:21:2D:EA:C1
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/1-xu-HU1wpc_JwV2simmXQyEt6sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:87:21:24:d5:35:9a:e6:05:f6:5b:07:a9:22:10:80:38:4f:
b7:ee:66:67:63:1a:12:01:23:0f:67:38:57:67:07:dd:9d:f7:
02:97:58:41:ac:7c:89:10:e3:d9:7b:7c:58:24:b7:34:da:7a:
cc:7b:37:66:2b:7d:21:bf:c8:98:2a:50:34:80:a0:ef:90:c6:
5b:16:51:16:ad:9c:fc:3a:b8:7f:97:f7:9c:33:6f:dc:a4:64:
f8:55:9e:0c:3a:07:aa:4c:21:7c:af:21:05:6f:5f:68:a0:d1:
86:98:83:c4:02:a1:4d:7e:20:0e:50:91:b4:ce:7a:cd:df:82:
75:82:7f:98:39:13:c1:e7:56:3c:3f:51:48:52:39:d6:a4:74:
8b:79:18:b5:e2:35:de:0c:10:07:be:60:d2:1e:c7:6f:6b:0c:
23:7f:e5:ed:8f:65:19:7f:00:d4:1c:88:c5:11:af:bf:05:2a:
1d:3c:b7:8c:e2:1c:26:50:be:d5:aa:a5:3b:62:00:18:7e:76:
5a:95:86:58:a1:43:94:66:3f:bb:c0:82:ff:9c:d2:6a:34:c0:
01:88:23:b8:57:c9:04:5b:97:3c:2e:19:e9:50:eb:7a:0f:26:
0c:92:f5:a5:60:d1:74:10:2a:ac:0c:4e:91:95:7f:bd:14:e5:
b8:2b:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:15:29 2024 by rpki-client on console-ams.rpki-client.org