Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/c7gJWM0Hge8lch1xgjzG5eUDJ0U.roa
File: c7gJWM0Hge8lch1xgjzG5eUDJ0U.roa (raw, json)
Hash identifier: uHKzRmY3v/qgVQyGTVcB85SyxCx+gbk8QRSkzDRSQoo=
Subject key identifier: 73:B8:09:58:CD:07:81:EF:25:72:1D:71:82:3C:C6:E5:E5:03:27:45
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 018CC3B71BE3C85DF9F374DC59797CAEB33C
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/c7gJWM0Hge8lch1xgjzG5eUDJ0U.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62457
IP address blocks: 95.178.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1b:e3:c8:5d:f9:f3:74:dc:59:79:7c:ae:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b80958cd0781ef25721d71823cc6e5e5032745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:ad:45:66:a3:66:e0:8b:d1:eb:bf:f4:e3:
2e:40:31:7a:67:d8:eb:7b:01:63:45:e7:37:33:6c:
1d:e2:fd:50:fd:b5:01:97:fa:64:99:d0:4a:01:95:
a7:94:58:f5:5f:db:1d:d8:39:18:3f:5c:ba:f5:c9:
f7:ae:ec:f0:97:a5:b3:de:23:f4:cb:9e:87:9d:c5:
78:4a:2d:89:a0:a7:51:d4:70:d4:d0:06:be:32:88:
73:aa:44:73:93:ff:ba:ca:96:03:26:27:cc:07:3b:
36:7d:81:66:5c:f5:48:10:ee:9d:50:28:2a:cb:13:
be:c7:ea:7a:7d:f4:0d:6a:8a:6d:e2:fd:c6:5a:f3:
72:e7:df:2b:16:9d:4d:10:41:5a:7f:e3:fe:a3:8e:
4f:3d:02:b6:55:c9:d3:b4:b7:95:98:73:e4:b3:fb:
2e:21:cd:99:0f:5e:9e:74:7a:09:a1:75:52:bf:de:
d9:28:da:d6:a7:a8:09:eb:ac:ad:29:a3:74:ec:81:
d1:ed:0d:ff:2a:0e:db:71:58:2b:97:7a:15:00:06:
1f:18:74:82:7a:f2:c2:e3:ea:7e:bd:32:a8:f6:e1:
7e:21:c7:f7:d1:fb:d6:5e:a5:ac:5c:08:59:b5:6c:
36:ad:a4:fa:a3:e7:36:e3:a6:e8:08:62:6b:b1:e5:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:09:58:CD:07:81:EF:25:72:1D:71:82:3C:C6:E5:E5:03:27:45
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/c7gJWM0Hge8lch1xgjzG5eUDJ0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:5a:de:63:74:12:4b:36:d9:9f:19:f0:56:a7:65:4c:74:
26:28:5b:02:42:1e:70:e9:65:96:a8:0b:c3:03:ca:a4:1c:8c:
c9:b5:d0:69:fd:31:3d:d5:95:7e:49:53:69:d7:66:f7:b3:57:
65:13:ea:40:e9:3a:89:63:b7:8b:0b:38:f3:38:f2:f2:60:10:
10:e3:6b:c6:8b:6d:9c:fb:46:02:f0:6e:1a:53:10:e5:16:c0:
82:42:5c:48:d8:00:46:22:26:69:ab:10:e3:5c:3b:e0:a8:1c:
ed:dc:96:1c:f6:10:cb:68:b6:8c:38:90:74:8b:0e:0a:fd:98:
81:30:0c:1f:70:71:17:d1:28:9c:11:b1:f4:ac:d4:85:2f:af:
7d:86:6a:e4:12:07:e6:a4:be:e2:a2:84:81:e0:c8:fe:52:bc:
82:d1:9f:cb:90:c6:c9:56:43:4a:d0:aa:86:b8:11:60:a5:c1:
61:88:1f:ac:02:64:3c:da:e1:4e:fb:fd:1a:5e:83:ec:96:4e:
a4:e1:f8:09:f7:7c:5f:b2:e7:a4:ee:f7:2a:ab:5b:f4:0a:a5:
7c:4b:c0:b3:ed:f0:b4:d9:80:1f:2b:23:5a:c0:58:4f:a8:1c:
4c:0f:c8:22:ff:c4:50:68:63:3f:13:46:c7:9f:44:f8:87:b8:
ba:f3:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:41:01 2024 by rpki-client on console-fra.rpki-client.org