Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/t4YxBTd1AZ7UzVvaIJx5Yl1Iikw.roa
File: t4YxBTd1AZ7UzVvaIJx5Yl1Iikw.roa (raw, json)
Hash identifier: XC8uBkYyCOtZjf1ykunwIfwK1IIAXozpkZHJ5PvVbpw=
Subject key identifier: B7:86:31:05:37:75:01:9E:D4:CD:5B:DA:20:9C:79:62:5D:48:8A:4C
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 018D8FA93C6130602CE5E73E1E2FC7298DBD
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/t4YxBTd1AZ7UzVvaIJx5Yl1Iikw.roa
Signing time: Fri 09 Feb 2024 20:57:29 +0000
ROA not before: Fri 09 Feb 2024 20:57:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47526
IP address blocks: 78.138.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:a9:3c:61:30:60:2c:e5:e7:3e:1e:2f:c7:29:8d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Feb 9 20:57:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b78631053775019ed4cd5bda209c79625d488a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:13:11:d2:6c:57:6f:87:bf:45:4d:62:78:
be:a4:b1:6e:18:4b:02:89:5f:e2:8c:ee:fb:9f:e7:
7b:cf:b9:2f:7d:73:4a:67:82:5c:5a:e1:70:3c:b3:
c3:ed:b6:13:34:fa:35:a3:3c:5f:94:8b:cf:17:fc:
a1:17:e4:4e:94:98:9a:09:da:7d:6e:30:4d:89:9e:
d7:eb:5a:46:d2:88:39:b8:02:79:c1:fd:68:7d:76:
97:20:ac:26:8b:f4:81:d8:ad:80:a2:47:8c:82:7e:
29:4b:02:e5:ca:b8:a3:cb:87:11:62:fa:60:e3:70:
78:e6:c5:32:f0:dc:11:f6:ed:20:68:92:87:c8:68:
fb:c5:cd:98:1f:d7:c5:be:2d:90:07:30:5e:91:25:
69:e2:d1:c5:8b:2a:8b:73:24:a5:b5:c0:c2:d3:95:
dc:93:5c:12:9a:e3:ea:24:fb:a0:f1:7b:37:02:9b:
d2:71:10:62:24:57:73:a4:ac:8e:2d:44:47:1b:a4:
f9:f2:64:98:a4:ca:3b:aa:76:ab:10:31:f0:ed:ba:
6d:86:dd:60:96:9e:7f:eb:6c:c5:3b:b3:b9:77:af:
36:fa:9c:60:bb:22:cb:74:37:55:fe:a1:46:52:19:
fc:0b:ab:02:ad:2c:ef:76:42:9a:e1:68:6d:35:f0:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:31:05:37:75:01:9E:D4:CD:5B:DA:20:9C:79:62:5D:48:8A:4C
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/t4YxBTd1AZ7UzVvaIJx5Yl1Iikw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:6f:d6:47:cf:d2:01:ef:be:f1:3e:ee:64:48:41:95:6d:2a:
34:47:e9:72:37:ec:40:63:69:5a:4e:6d:13:6a:9e:72:d5:93:
e4:ae:6e:36:a4:cd:79:aa:93:ee:a3:3f:04:e7:5e:d3:be:f5:
82:fc:40:04:12:3f:d1:65:eb:7e:35:41:38:aa:1c:3c:53:03:
6e:f0:e8:16:db:b7:60:4d:6c:c8:12:e8:b8:49:a9:78:8d:83:
22:79:a0:da:d5:af:45:59:65:95:32:df:4c:59:8f:f1:81:6d:
93:34:8f:6f:71:0d:a8:aa:e5:b6:7f:10:7a:f7:d3:66:f6:2d:
3c:67:8b:1a:d4:61:85:57:d2:78:8c:64:83:bd:a2:59:a0:a1:
d9:49:4e:34:be:e9:7c:c2:4d:79:31:42:0b:ea:38:0a:fa:2c:
e9:b4:76:30:ef:0e:96:46:b1:b9:69:c1:57:e0:d6:07:4a:ab:
2c:9d:07:27:0f:e1:39:e4:74:75:1c:0e:e9:c5:eb:80:19:98:
34:82:c3:6d:bf:99:70:d5:7e:33:58:29:f5:3b:dd:a3:5c:ad:
eb:e4:4f:b1:af:87:a4:af:6d:40:00:ba:71:c8:20:ac:b0:73:
3b:4d:9f:e7:5f:05:8d:d7:83:89:0d:7d:30:46:c7:03:2d:ed:
1b:5d:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:18 2024 by rpki-client on console-ams.rpki-client.org