Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/DQg4Ihf44wdo5gWc2UYyRCeEIWY.roa
File: DQg4Ihf44wdo5gWc2UYyRCeEIWY.roa (raw, json)
Hash identifier: OaSL+EGBbZD2XWgwlxouthWXd/2MTVgjLpdQzaEJE0g=
Subject key identifier: 0D:08:38:22:17:F8:E3:07:68:E6:05:9C:D9:46:32:44:27:84:21:66
Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial: 0190012C6FADE297F7FFEC6DAEEC97A4AB5D
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/DQg4Ihf44wdo5gWc2UYyRCeEIWY.roa
Signing time: Mon 10 Jun 2024 08:03:27 +0000
ROA not before: Mon 10 Jun 2024 08:03:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196881
IP address blocks: 178.21.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:2c:6f:ad:e2:97:f7:ff:ec:6d:ae:ec:97:a4:ab:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Validity
Not Before: Jun 10 08:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d08382217f8e30768e6059cd946324427842166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:1d:2b:45:08:30:d8:3f:7d:09:c0:9a:04:
5f:a8:cf:b8:72:1e:a0:39:0f:92:cb:27:e6:0f:e8:
27:53:af:83:94:38:ee:b9:9a:9a:85:4e:83:d9:6e:
f2:b1:f3:de:95:81:9c:59:23:98:0c:ae:53:c9:95:
f4:7d:74:32:39:5a:79:dc:c9:bb:68:1d:41:a9:b1:
ed:be:7a:7e:2e:b9:94:98:a0:b8:ab:2d:24:29:70:
a7:8c:f0:99:8a:a1:09:4d:50:b1:c7:86:ec:88:a2:
88:a9:81:5a:5b:01:79:b7:6f:01:b9:44:90:3a:e7:
c4:49:23:17:19:d0:09:ae:3a:48:7f:58:76:66:77:
0d:72:4d:34:a7:be:f6:3e:13:e9:84:2b:6a:22:38:
db:e0:fb:35:d1:b0:c6:2d:fc:76:5b:02:ee:73:54:
1f:bd:76:ae:c1:80:ab:1b:46:25:1f:07:8b:9d:85:
a2:0f:41:61:51:34:84:42:cd:5b:f6:f6:40:fe:e3:
d1:49:e2:18:93:f7:1f:75:34:02:16:fd:8f:77:28:
8e:e2:9e:0c:67:03:f9:68:ec:3b:2b:cf:3a:3b:fa:
c2:23:f2:b7:8d:16:73:c6:ed:77:c4:ec:71:34:e9:
e0:84:c8:06:a5:ec:ae:4f:4c:b2:b1:cd:99:4c:57:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:38:22:17:F8:E3:07:68:E6:05:9C:D9:46:32:44:27:84:21:66
X509v3 Authority Key Identifier:
keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/DQg4Ihf44wdo5gWc2UYyRCeEIWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:a8:30:71:dd:74:43:f3:f7:1e:ac:bd:69:6e:c1:4c:91:
16:a5:3e:aa:a4:6c:d2:d0:2e:e9:6a:e3:66:e8:1b:09:94:45:
71:55:26:68:2c:78:39:da:7f:a0:51:2d:85:06:59:95:cf:ab:
cc:f6:4f:cc:43:1c:51:dd:b8:62:a9:fd:e5:9a:51:36:97:4a:
bc:f9:e1:50:31:9a:40:a3:ee:d2:c9:3a:6f:11:ed:85:2a:ed:
5a:7c:cb:16:87:ac:3d:a9:02:7d:4e:48:ba:9b:26:aa:be:6d:
e8:fe:a4:ef:6e:13:57:b2:ce:c3:1c:e3:f4:24:54:42:c3:de:
f0:62:aa:f9:62:8c:74:c6:ae:59:2c:d3:59:63:5a:a3:40:be:
1b:95:25:05:12:49:d5:2c:f2:c6:68:10:ae:73:6c:6b:b0:4f:
4d:7c:cf:cb:70:ae:9c:01:49:31:dc:1f:3c:03:e3:f8:80:4c:
ae:06:53:68:83:70:d4:ce:dd:e9:a6:12:03:d6:44:b9:1c:c9:
1b:00:84:42:5a:05:67:9d:c1:94:bf:7b:ad:62:ef:eb:4a:6d:
1e:71:0c:3a:16:03:96:a8:2a:50:ba:1c:42:75:ec:fd:79:ee:
67:6b:d3:65:e7:72:ad:90:60:49:89:7f:96:ed:32:b4:af:b4:
a8:84:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:17:27 2024 by rpki-client on console-fra.rpki-client.org