Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/dx5G68QhApAj4mBapVxJN2GIou0.roa
File: dx5G68QhApAj4mBapVxJN2GIou0.roa (raw, json)
Hash identifier: /v/XeUYn730iCqzSvSulcpPpAS4xOj8h6XThidjzF5s=
Subject key identifier: 77:1E:46:EB:C4:21:02:90:23:E2:60:5A:A5:5C:49:37:61:88:A2:ED
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 018CC94E273F0D05BA61A8ECB41AB8FDDB50
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/dx5G68QhApAj4mBapVxJN2GIou0.roa
Signing time: Tue 02 Jan 2024 08:33:11 +0000
ROA not before: Tue 02 Jan 2024 08:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51002
IP address blocks: 178.217.12.0/24 maxlen: 24
178.217.13.0/24 maxlen: 24
178.217.14.0/24 maxlen: 24
178.217.15.0/24 maxlen: 24
178.217.8.0/21 maxlen: 21
178.217.9.0/24 maxlen: 24
178.217.10.0/24 maxlen: 24
178.217.11.0/24 maxlen: 24
178.217.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:27:3f:0d:05:ba:61:a8:ec:b4:1a:b8:fd:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jan 2 08:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=771e46ebc421029023e2605aa55c49376188a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:89:c5:ed:66:89:68:0f:a1:df:e2:b0:9a:
69:0c:1e:2f:0b:57:02:b5:20:7a:91:a2:76:01:29:
91:30:f9:1c:34:8e:d1:f1:f9:9c:1a:c1:c7:af:1f:
72:82:fa:0f:51:92:82:49:10:56:e5:f7:f3:65:de:
aa:15:9e:be:ec:75:3a:fb:26:1d:80:58:0e:6b:90:
74:19:8e:1d:75:e2:de:e8:09:76:8c:32:7b:a7:24:
9d:95:f7:f4:ed:24:f7:96:a8:a2:e7:f4:24:3d:83:
10:40:cc:e2:31:c9:2f:8f:8f:f6:a2:5e:70:6f:4f:
16:8c:ab:f1:b0:bc:9b:5c:a6:22:7b:ab:f5:ef:36:
2c:56:ee:97:2d:49:ca:a0:c7:2f:92:e1:16:a9:b1:
37:b4:ce:ea:67:68:ff:ec:d2:78:02:07:8d:cc:9a:
0c:bd:54:94:41:91:b4:34:21:5b:0d:10:18:22:f5:
c1:c6:d5:e4:e4:1e:33:f8:c8:e9:12:5d:ba:d8:93:
04:9e:1d:ef:79:74:6c:62:71:99:fd:88:9f:d3:df:
70:62:6c:ef:48:69:e8:7e:5e:7c:03:52:fd:4b:b6:
d4:d4:40:12:04:d5:e8:a6:d3:62:fb:43:07:b6:ff:
4e:ad:af:d6:45:fb:d8:97:50:99:dd:f0:b4:e1:72:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:46:EB:C4:21:02:90:23:E2:60:5A:A5:5C:49:37:61:88:A2:ED
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/dx5G68QhApAj4mBapVxJN2GIou0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:89:68:ad:2f:e3:ff:50:7d:12:1a:5c:fb:8b:03:7c:0a:59:
6e:35:d1:d1:ea:ea:43:d7:96:9c:c3:8e:39:4d:9f:e1:32:02:
97:a7:c3:6c:1b:09:26:f1:19:be:78:2d:c7:e7:2a:e4:df:84:
bf:c2:17:8e:10:44:04:b4:52:9c:f4:46:9b:c7:36:f2:a6:7d:
47:c6:84:af:a1:b5:30:7b:f1:80:cc:58:00:ac:e1:a0:89:dd:
48:31:63:03:cb:5d:d8:6c:01:cc:0f:4b:0a:21:45:91:73:0e:
73:9d:5e:aa:89:2f:27:5d:52:cd:f3:52:84:60:f1:31:09:57:
70:7f:db:7d:a8:c0:fd:a6:d4:79:d3:38:ee:17:ed:9b:fc:ef:
1f:55:5e:e2:b2:22:75:2a:d2:8e:40:a3:d0:2f:75:a0:1b:e9:
18:27:4e:39:6a:31:15:ec:29:81:3a:8d:92:dc:66:3a:2a:94:
97:32:8e:f2:b3:74:6e:4c:cd:61:aa:3c:e9:0f:fe:29:3f:cb:
fd:bd:b5:f5:59:e3:e8:a1:aa:30:9f:10:01:59:90:eb:0e:e3:
8f:e2:c9:f8:72:86:26:be:87:75:83:0f:d0:37:82:f0:58:89:
96:e2:bc:78:b6:7b:ef:ba:ab:4c:f3:e6:2a:3e:97:3c:f1:1b:
17:39:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:58:41 2024 by rpki-client on console-fra.rpki-client.org