Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/78yDUHCiIUHo2JZPgLTfMrahV0k.roa
File: 78yDUHCiIUHo2JZPgLTfMrahV0k.roa (raw, json)
Hash identifier: 8ghWjGlgmBMhyk9fnhN5119qSce7DtXlxZO0EAg19GQ=
Subject key identifier: EF:CC:83:50:70:A2:21:41:E8:D8:96:4F:80:B4:DF:32:B6:A1:57:49
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D6E85C305AAEA5FCADBDE7FFB8B09DC72
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/78yDUHCiIUHo2JZPgLTfMrahV0k.roa
Signing time: Sat 03 Feb 2024 10:31:16 +0000
ROA not before: Sat 03 Feb 2024 10:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57935
IP address blocks: 178.239.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:85:c3:05:aa:ea:5f:ca:db:de:7f:fb:8b:09:dc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 10:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcc835070a22141e8d8964f80b4df32b6a15749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:35:8d:f4:c9:28:c5:dc:7a:c4:34:df:de:
0f:a7:3f:0a:f6:b1:b9:4e:85:c9:85:f2:fb:7d:61:
1d:86:1d:bb:ad:72:45:de:71:f7:27:59:d7:19:a9:
26:4b:9d:23:2a:1c:97:f6:d7:b0:de:bd:53:ad:39:
85:27:3a:3a:ef:a2:76:4f:90:54:16:62:68:86:65:
a6:b2:66:1e:ce:67:9b:fd:3a:5f:da:a6:ab:58:89:
7b:1c:9b:ab:b3:1c:2a:0c:a5:4a:50:4f:40:62:e4:
1a:09:65:03:a3:68:76:91:f8:41:88:86:d3:a8:4b:
48:77:39:02:ad:91:e4:ce:0a:74:1e:0f:25:02:75:
e0:d3:57:13:7e:e7:8e:63:dd:e8:a0:b0:42:a3:2c:
15:49:13:d9:f4:c4:54:9c:81:9f:4d:31:1f:13:15:
1d:74:96:1a:81:b4:d1:db:e4:3d:b4:c9:38:96:e8:
2f:0c:f3:bb:5c:b6:5d:7c:ae:e7:84:ce:0d:4c:f2:
2c:18:39:f0:f3:03:2d:04:6a:c5:0a:b5:0a:db:1e:
b1:84:03:2b:8b:23:d6:95:0b:23:c3:c1:91:9b:9d:
d6:d5:6c:82:ee:93:ac:d0:f4:7a:e4:8f:46:34:63:
6d:29:e9:a6:0b:d1:70:24:41:a6:f6:6a:5f:ca:ea:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:83:50:70:A2:21:41:E8:D8:96:4F:80:B4:DF:32:B6:A1:57:49
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/78yDUHCiIUHo2JZPgLTfMrahV0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.204.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cf:3a:1f:46:da:3a:f9:76:1c:90:4a:25:bf:40:87:96:4e:
b8:3b:75:c4:9f:21:1a:2e:cb:2c:d7:28:c2:3a:a6:3a:25:4f:
df:a2:95:1e:56:9b:a9:7d:b9:b9:ad:87:f9:5a:1c:b2:b9:dd:
e2:cb:fc:21:66:18:79:b7:7c:ad:03:7d:ef:a9:6e:94:56:28:
fa:b4:43:a2:1f:1d:65:31:4c:d6:c7:e2:5c:27:fc:cd:43:bc:
67:d6:15:aa:26:16:82:e3:d8:13:80:c7:77:a0:b2:a9:08:aa:
23:d5:d4:e1:45:43:e4:ac:a8:5b:bc:3f:36:54:57:8b:23:f3:
d4:28:87:7e:24:47:ef:f6:5e:ec:0a:c4:23:46:3c:c6:bc:7f:
aa:dc:c8:16:19:e1:44:d7:8e:00:b3:d9:d2:d9:d0:08:52:0d:
36:c2:44:78:ab:91:47:b0:3c:9f:d9:c9:65:7f:e6:4c:ec:09:
8c:81:26:04:d5:87:ef:d4:1a:e4:b2:56:ce:78:c6:85:91:65:
62:21:33:c3:b8:99:09:7d:2a:a2:ef:6d:2c:f6:af:c3:47:bc:
be:fa:e8:dc:4b:07:11:7b:25:3f:76:df:a1:a0:34:b1:38:d5:
41:04:76:8d:57:14:7a:5a:a2:09:20:81:0b:1e:48:5f:34:44:
49:a4:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:13:25 2024 by rpki-client on console-ams.rpki-client.org