Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/8XCmT9SKUS9qDycx3PoUzSdXDHw.roa
File: 8XCmT9SKUS9qDycx3PoUzSdXDHw.roa (raw, json)
Hash identifier: +dBM+dOYb7HmNsXxnqglyUeg4JyK15DnhemUXAX1XOw=
Subject key identifier: F1:70:A6:4F:D4:8A:51:2F:6A:0F:27:31:DC:FA:14:CD:27:57:0C:7C
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 018CC5003928E4BB40AB833C891FC00B89C5
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/8XCmT9SKUS9qDycx3PoUzSdXDHw.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4809
IP address blocks: 147.78.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:39:28:e4:bb:40:ab:83:3c:89:1f:c0:0b:89:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f170a64fd48a512f6a0f2731dcfa14cd27570c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1a:46:2f:bb:5f:6f:de:12:9d:af:89:83:3e:
a7:96:7c:36:c0:cb:00:3a:7b:27:71:ea:80:9b:fc:
a0:1e:0e:1c:1c:01:41:5a:97:a9:4e:2f:7b:14:99:
32:6f:02:49:65:d3:81:84:4a:fb:9f:e4:09:73:9b:
75:30:f4:b5:22:e9:75:de:fb:ae:2f:bc:2f:49:59:
b5:39:f6:66:34:7d:5e:f8:85:2e:61:f4:a9:a0:43:
de:ad:17:5b:03:7e:14:75:1a:70:45:d2:18:a8:ec:
e8:a9:23:4c:f1:c4:1c:7a:c7:ef:e2:b3:b6:57:c1:
b0:cf:fc:b8:53:9b:34:94:07:e4:70:ea:40:4e:78:
64:db:1a:8b:f7:39:8c:19:28:3b:23:2a:17:59:37:
d9:41:f3:34:11:5d:75:11:40:cc:70:2f:a5:e5:ee:
98:aa:8f:7d:d9:43:f1:48:1f:b6:f0:0a:19:96:71:
b2:fb:9c:b7:0b:b1:b5:36:70:66:72:d0:5f:8c:35:
3e:87:0a:ae:58:72:cd:00:9b:17:e6:fc:39:df:e3:
ed:2f:bf:0e:11:c7:ac:21:03:67:c2:88:a8:46:8d:
12:dc:4a:89:29:a6:68:f2:8d:5a:b6:86:bc:aa:1e:
1a:ce:1d:d9:15:c3:dd:44:e7:d5:5d:07:d3:66:c9:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:A6:4F:D4:8A:51:2F:6A:0F:27:31:DC:FA:14:CD:27:57:0C:7C
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/8XCmT9SKUS9qDycx3PoUzSdXDHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2a:30:ab:bf:d2:95:74:b8:0f:bd:eb:22:ab:ad:4a:4a:f5:
fb:a6:17:bf:69:82:f1:9c:8d:38:ae:26:5c:2c:c7:f8:2f:a0:
a1:83:45:ab:23:79:08:29:56:24:84:6d:93:e3:1e:01:d4:0f:
3a:eb:fd:14:e5:a9:a7:07:a1:de:e2:33:f2:1c:e1:8f:98:21:
c6:34:2f:62:27:ea:77:e8:53:c6:41:26:e7:58:ac:3f:70:6d:
d7:be:d6:f3:2c:40:89:bb:83:3c:bf:c2:5c:c1:92:84:82:73:
c5:63:ca:92:75:f8:b0:33:e2:4c:82:21:f3:14:91:a6:93:26:
70:87:e3:3a:8b:8b:5b:2b:d2:7b:3e:69:d1:9c:44:3e:28:43:
e1:4d:c3:82:82:21:fa:f1:70:fd:9a:8d:f9:ff:8c:15:50:2c:
89:25:61:97:f1:46:50:d6:09:87:d9:c4:7d:83:b9:7c:ff:bf:
54:de:0a:c5:e7:a4:08:d2:b6:c0:40:57:66:e2:5f:1e:ed:a8:
92:0f:2a:1c:9f:54:1d:28:e0:5f:f1:3a:5e:b3:93:64:6d:eb:
66:a9:15:66:cb:b8:24:99:46:82:c7:4f:6a:db:7d:8d:cd:44:
34:37:ed:f1:c6:5a:81:d2:22:2c:12:b3:44:a9:a0:45:a8:45:
65:9a:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:50:41 2024 by rpki-client on console-fra.rpki-client.org