Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0DcdSzskbvvrnDb0eVK9aLuF0E0.roa
File: 0DcdSzskbvvrnDb0eVK9aLuF0E0.roa (raw, json)
Hash identifier: 1ND5dd6lvRwPd5CMasj5TcfRKZ95zTuF8uc7hK7qxYk=
Subject key identifier: D0:37:1D:4B:3B:24:6E:FB:EB:9C:36:F4:79:52:BD:68:BB:85:D0:4D
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE3792A8D1050AC6E1E1C5318CBDE
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0DcdSzskbvvrnDb0eVK9aLuF0E0.roa
Signing time: Mon 01 Jan 2024 18:30:45 +0000
ROA not before: Mon 01 Jan 2024 18:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200461
IP address blocks: 178.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e3:79:2a:8d:10:50:ac:6e:1e:1c:53:18:cb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0371d4b3b246efbeb9c36f47952bd68bb85d04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:02:8a:2d:a6:d5:3e:fa:9e:75:9d:ea:d4:
3a:66:ee:7e:31:89:77:5a:52:c8:13:55:76:4f:18:
e8:35:57:4e:9d:65:25:92:3e:20:9e:b7:97:93:99:
fb:0d:6f:fe:76:9a:42:75:10:2d:ee:d6:e0:08:96:
fa:5d:36:2c:57:3f:fd:7a:ff:ed:7e:30:20:5a:3d:
b8:c9:e2:57:07:47:7e:eb:57:7d:79:b1:39:05:91:
5e:5b:03:f9:76:b6:08:71:92:dc:e6:c9:d0:29:db:
52:aa:02:cb:0d:47:d7:3c:26:ad:c3:64:86:42:66:
fa:24:b4:38:e1:68:40:a4:a6:b9:a4:ca:f6:99:16:
7f:22:90:48:40:3c:9e:ba:c2:4b:d7:4c:e9:c7:c0:
1f:70:1b:e1:75:79:89:59:7f:2d:ba:d4:54:72:2f:
f1:9c:fc:cb:0a:f6:1c:b4:4e:d5:b6:f0:d6:29:49:
e3:8c:99:18:6a:8b:aa:d5:b7:e7:d1:7d:77:6d:07:
6c:26:75:64:41:86:2e:25:d7:3a:12:7b:0c:da:91:
0b:9e:c9:3f:ba:9f:2f:cc:96:90:17:71:4f:82:95:
19:52:32:77:c5:e1:90:1c:e9:ba:c7:4d:43:e7:29:
fe:5f:3e:18:8b:ff:45:e7:6b:4b:f0:9b:10:10:0b:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:1D:4B:3B:24:6E:FB:EB:9C:36:F4:79:52:BD:68:BB:85:D0:4D
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0DcdSzskbvvrnDb0eVK9aLuF0E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:96:34:6e:42:ea:d8:5b:7e:a8:66:70:55:38:00:a2:fc:29:
8b:bd:b3:2a:9f:24:3d:33:ba:39:97:30:35:d6:62:90:64:13:
e5:4c:0b:e2:40:33:cb:25:0c:57:3d:a1:d1:df:20:60:7d:83:
45:6d:eb:92:1a:dc:b2:6a:7c:b2:a1:00:6e:d6:9b:79:b9:34:
04:a9:61:28:53:ae:67:c9:1a:b1:59:07:d5:b9:ba:f5:59:38:
00:4e:84:87:2a:b8:37:6a:60:d1:16:1c:d2:ee:30:2e:cf:ce:
f1:ca:b6:20:dd:64:32:d9:46:28:5d:16:ff:50:5d:01:b1:35:
29:5f:24:c0:be:9a:1b:fb:4a:fe:93:5e:20:d1:bc:70:74:15:
8a:18:18:ca:da:ed:a0:72:cb:ba:5e:05:8e:44:17:95:13:0d:
5f:9b:d2:a8:6b:93:6d:96:a4:ca:cf:c1:fc:ba:54:56:2b:8d:
56:3b:28:51:c8:9d:43:81:4a:89:b6:0e:c2:9d:55:b6:94:65:
aa:e8:f4:ca:0c:93:7c:3d:a0:2a:77:b7:12:7c:f6:d9:53:6c:
4e:52:ef:76:15:88:1d:4a:cc:a2:ca:2c:15:59:16:16:4a:ab:
48:e6:cd:1d:bd:ae:58:41:24:10:65:5f:fe:c8:6b:88:07:25:
a6:ab:c5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:37:05 2024 by rpki-client on console-fra.rpki-client.org