Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7CvWXIC6jHDJ_uXfNDc70ECXlSg.roa
File: 7CvWXIC6jHDJ_uXfNDc70ECXlSg.roa (raw, json)
Hash identifier: PcOGwv3LII66HS8pVR4GNmWoRmYQygnNCGykWpOMAIk=
Subject key identifier: EC:2B:D6:5C:80:BA:8C:70:C9:FE:E5:DF:34:37:3B:D0:40:97:95:28
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E2DFF890E9796DE8803E820AF028A019D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7CvWXIC6jHDJ_uXfNDc70ECXlSg.roa
Signing time: Mon 11 Mar 2024 14:51:45 +0000
ROA not before: Mon 11 Mar 2024 14:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 178.253.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ff:89:0e:97:96:de:88:03:e8:20:af:02:8a:01:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 11 14:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec2bd65c80ba8c70c9fee5df34373bd040979528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:20:da:c3:e2:31:a3:1c:17:10:65:96:2d:
b4:77:41:a4:9a:01:de:9c:06:11:dd:db:0d:80:d8:
3f:79:ae:ad:c6:c8:94:e9:ad:72:1b:5e:1c:04:82:
49:db:26:4c:43:ee:7b:50:92:56:cf:cb:62:68:16:
d4:3c:90:ea:7d:8f:18:30:ea:71:23:bf:d7:4e:9f:
ab:a6:7c:bd:de:71:cd:58:8d:e6:d8:34:9d:46:3a:
9d:24:79:dd:6e:2f:db:8b:96:01:44:36:4b:b8:c7:
b1:09:ea:f8:52:ba:50:7a:29:0b:5d:f4:9e:fb:7a:
94:68:fc:c3:0e:db:8a:e6:1b:a3:fe:b0:74:3a:50:
2e:43:34:85:ea:de:2d:b6:8c:34:88:93:fd:71:86:
fa:22:a7:85:96:36:31:5e:3b:53:89:6d:81:ed:07:
95:46:2c:5f:26:05:5a:4e:e6:8f:e9:b0:e6:ae:e3:
a9:c7:88:1d:cd:7e:9e:a4:18:fd:9a:f4:02:54:bd:
34:11:96:af:e6:d1:04:b4:31:d6:d2:a8:96:66:c3:
e9:b0:9f:28:6e:70:44:99:11:c6:11:7b:ca:34:a9:
dd:be:1d:f0:70:0d:6b:05:cd:1a:03:7a:5c:c0:00:
01:9c:5f:26:be:2a:88:2d:4c:62:60:e0:ac:6c:ca:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:D6:5C:80:BA:8C:70:C9:FE:E5:DF:34:37:3B:D0:40:97:95:28
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/7CvWXIC6jHDJ_uXfNDc70ECXlSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
37:4f:43:ff:7f:d2:f6:05:ae:dd:b2:44:f9:ce:9a:58:93:b5:
3d:36:38:ad:b7:7d:78:83:07:ef:c1:04:80:5c:d0:be:34:c2:
e0:97:9f:34:34:4f:9e:06:d2:5b:f0:d6:fb:40:47:36:a1:e8:
98:63:85:98:8c:a8:de:aa:58:77:d3:ee:af:76:d1:25:ed:03:
24:9e:48:03:de:58:d5:09:a6:8b:bf:f5:e9:c4:8d:0a:ed:d4:
7d:95:68:ab:96:b8:ab:de:fe:8c:71:70:71:92:c9:f1:97:df:
4b:bf:4b:a8:2a:03:30:eb:6d:a4:1b:80:79:0b:87:a9:64:6b:
de:9e:ce:2c:55:fa:81:6d:29:fc:c3:25:d3:4c:e5:cc:47:26:
54:75:7d:41:c5:dd:80:d6:16:e4:54:76:af:61:bd:7f:a1:8b:
ba:b5:28:0c:bd:5a:f0:a8:b5:eb:41:1f:a1:c3:7e:1f:f1:1c:
42:11:c2:51:0c:47:f5:0c:00:8e:8a:62:26:f1:9b:14:2a:87:
c0:26:06:d3:df:df:9c:3a:0c:10:54:f5:d2:05:d0:3e:b5:a6:
be:d7:5f:3c:0e:00:c8:37:cd:0a:07:59:38:0e:f5:99:8b:cc:
10:9c:80:aa:16:95:55:65:1e:90:76:00:32:93:90:1a:19:c9:
95:cf:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:51:25 2024 by rpki-client on console-ams.rpki-client.org