Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iCQdFrJFr3PkG6MaoghqGHH8bmk.roa
File: iCQdFrJFr3PkG6MaoghqGHH8bmk.roa (raw, json)
Hash identifier: uge8fqDR0/WJUqv5l3VXqoWtXm6w+lI3/FfRQ5OuIp8=
Subject key identifier: 88:24:1D:16:B2:45:AF:73:E4:1B:A3:1A:A2:08:6A:18:71:FC:6E:69
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018F5D1968F1C1613D5FBC96F483ADAC10AD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iCQdFrJFr3PkG6MaoghqGHH8bmk.roa
Signing time: Thu 09 May 2024 11:24:57 +0000
ROA not before: Thu 09 May 2024 11:24:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 178.253.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:19:68:f1:c1:61:3d:5f:bc:96:f4:83:ad:ac:10:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 9 11:24:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88241d16b245af73e41ba31aa2086a1871fc6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:1a:33:f8:be:e6:bb:ee:a8:54:ae:57:1d:
89:70:7b:f6:05:2b:59:85:eb:99:e7:1c:2a:c1:20:
d9:02:73:4e:eb:59:79:e2:ff:ee:90:68:5c:64:4d:
d8:e3:d8:14:52:56:4a:48:f8:52:13:d7:0f:c0:85:
e1:e1:08:fd:dc:13:95:57:13:be:f3:e0:f2:6f:d1:
96:40:7a:32:68:df:d6:e2:e2:37:0c:67:74:aa:b6:
13:6a:9d:31:09:c8:84:7b:16:dd:16:51:a5:1b:62:
59:f8:41:00:7e:84:5f:71:04:5f:95:7b:ba:4d:5e:
86:00:16:71:0f:04:49:5e:55:21:c2:ff:b6:f4:ad:
8c:7a:d3:ec:2e:61:85:0b:32:77:0e:bc:05:1c:a1:
99:01:3d:a2:24:c3:ef:4c:17:90:c3:04:f6:6a:68:
26:57:f1:d4:84:4a:1a:43:6f:a5:1a:c4:9e:41:b4:
c5:c6:1f:65:07:0e:68:9f:92:36:94:b5:b6:54:49:
60:f4:19:b9:cc:76:1d:8d:4d:d3:31:aa:fb:02:90:
ea:7b:21:0b:5e:2b:ce:23:47:85:9c:04:db:f1:4a:
7d:a2:30:7a:43:9f:1e:50:eb:b6:e1:13:05:e8:81:
67:87:86:51:ab:ab:d2:d4:0f:87:0d:4c:6f:a5:6a:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:1D:16:B2:45:AF:73:E4:1B:A3:1A:A2:08:6A:18:71:FC:6E:69
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/iCQdFrJFr3PkG6MaoghqGHH8bmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a5:6b:ea:9b:4e:35:bd:b3:ec:02:b4:98:f1:52:ea:78:e6:
29:8e:9c:c5:3a:4b:e1:d7:c3:f5:5b:df:3b:90:dc:40:02:2d:
44:e1:cd:6c:2c:67:d2:14:61:fe:d6:94:12:48:62:05:a0:12:
92:91:63:a9:24:0d:fd:d9:85:ce:83:c0:e5:fe:35:5d:6a:15:
00:e5:f8:72:57:a3:55:06:94:0c:45:95:84:30:84:31:63:fa:
05:78:20:c5:6a:43:5e:08:6a:5f:99:cc:9d:5d:12:03:ca:3b:
8b:7a:21:91:ea:dd:98:dc:b2:ef:2c:15:18:27:a9:97:64:d8:
05:f1:eb:dc:1e:a7:9c:c9:4a:02:fa:eb:da:39:d7:7c:37:e6:
fb:2d:d5:85:1e:58:11:d5:b4:fa:40:7d:34:77:eb:3d:d4:a2:
d5:e2:96:c1:cb:2a:38:64:0c:7a:82:bf:20:3a:93:63:87:99:
51:93:17:82:84:a7:db:74:be:4a:f2:0e:20:15:3d:aa:7f:13:
86:ec:98:e7:ae:f4:77:71:a4:a3:83:01:61:33:5e:4e:c1:d4:
c7:ac:93:3f:48:05:2f:0b:79:eb:f3:a3:d4:99:95:5d:76:f1:
f4:c5:4a:03:8e:cb:bb:58:80:6b:31:b3:a5:a4:36:b2:cc:ff:
e8:79:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:17 2024 by rpki-client on console-fra.rpki-client.org