Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2sGhhLeEq-Fl27hZC-tAdefd_Ps.roa
File: 2sGhhLeEq-Fl27hZC-tAdefd_Ps.roa (raw, json)
Hash identifier: ulnSeEInOLDR71vy3w1VCumODF25LX3Yz6O5hs41n38=
Subject key identifier: DA:C1:A1:84:B7:84:AB:E1:65:DB:B8:59:0B:EB:40:75:E7:DD:FC:FB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA95A2F6B7689D787D3664627334EE
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2sGhhLeEq-Fl27hZC-tAdefd_Ps.roa
Signing time: Tue 02 Jan 2024 10:31:37 +0000
ROA not before: Tue 02 Jan 2024 10:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20891
IP address blocks: 178.253.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:95:a2:f6:b7:68:9d:78:7d:36:64:62:73:34:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dac1a184b784abe165dbb8590beb4075e7ddfcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:7d:4f:23:68:f5:5f:bd:90:da:ce:bc:5a:
c3:17:2d:dd:70:5c:fd:27:ba:cb:9a:39:1c:ee:1a:
4c:71:8e:85:8b:5b:18:ed:70:70:33:a9:82:22:38:
94:95:33:14:7c:37:2b:1a:fe:80:7b:bd:04:08:ee:
80:5b:c6:5b:46:72:08:bc:79:26:ad:8f:d1:70:a7:
dc:08:40:33:c6:70:05:74:ac:54:a3:3a:93:3e:6b:
14:6c:ec:c8:c7:29:d1:c8:83:76:3a:3c:a8:66:81:
34:87:49:aa:23:23:22:4b:5f:cc:50:94:1d:04:7b:
c4:aa:b2:c3:ef:73:d4:42:c9:e7:6d:89:68:4d:fb:
6b:ff:31:79:1b:03:70:9e:2e:88:a3:9c:ce:66:73:
17:93:10:73:c7:de:9a:55:17:ee:61:e0:5e:e6:20:
44:db:46:16:05:9c:89:dc:0b:b2:4e:2a:9a:3d:9e:
f4:ed:14:1f:62:f8:45:29:70:e9:df:80:76:6b:66:
20:6c:57:c2:b0:b3:a7:56:ed:69:e9:76:60:1f:00:
8d:49:0f:43:6a:9f:04:ab:76:9d:8c:c4:4c:9c:6a:
21:ef:c6:1b:5e:ee:73:94:6e:08:83:55:24:97:00:
31:6c:e4:46:57:cf:07:d0:81:f9:09:64:b8:78:71:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:A1:84:B7:84:AB:E1:65:DB:B8:59:0B:EB:40:75:E7:DD:FC:FB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2sGhhLeEq-Fl27hZC-tAdefd_Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:29:16:ad:aa:22:f3:30:51:f4:58:f6:57:eb:de:5d:43:a7:
ed:8a:b0:b5:03:01:32:d1:50:b5:33:3e:3e:aa:70:ca:28:be:
b1:87:11:c8:84:17:ba:1a:33:42:96:8f:c8:52:dd:50:9b:99:
ec:f8:38:f3:7a:db:da:09:67:ee:99:d3:ea:4d:fb:5d:41:73:
4d:c8:aa:ea:6d:75:5a:7c:f2:0a:97:09:16:fb:f6:58:68:e5:
ea:69:41:79:0d:50:91:b0:32:28:e5:7d:4d:30:ef:64:92:51:
f2:98:90:e5:3d:16:1c:d0:5e:f1:7b:73:fe:d9:31:48:62:61:
d6:41:d6:1c:82:27:28:f4:18:67:4f:06:c4:20:a7:32:96:b2:
7a:bb:11:58:c3:e3:38:3d:9e:4d:09:3e:83:8b:ea:32:cb:01:
e6:af:9c:cb:69:b0:a0:c9:98:33:da:09:89:a0:17:ca:f8:a0:
4e:cc:3f:e4:2b:52:21:9d:0a:7a:32:be:b4:0d:69:9b:57:81:
4d:d6:4c:03:1a:97:b0:58:b6:91:b2:11:c9:cd:9a:85:19:ca:
a8:fb:e2:11:fb:6f:af:71:c9:25:12:12:ca:ab:4a:b2:98:48:
48:51:da:17:36:e7:ae:64:74:8a:07:dc:6d:30:3c:65:75:79:
e2:7e:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:18:21 2024 by rpki-client on console-ams.rpki-client.org