Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7mnaIgQpwlQ75UsmXhU-_E3GR6A.roa
File: 7mnaIgQpwlQ75UsmXhU-_E3GR6A.roa (raw, json)
Hash identifier: 7FSASaD4i7VhHvR2a4/fTMjaRuAqA93yh5Rx3KCtGEs=
Subject key identifier: EE:69:DA:22:04:29:C2:54:3B:E5:4B:26:5E:15:3E:FC:4D:C6:47:A0
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018DE4D78E46DE69E6B81D3EE5CC06F99DDD
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7mnaIgQpwlQ75UsmXhU-_E3GR6A.roa
Signing time: Mon 26 Feb 2024 09:55:48 +0000
ROA not before: Mon 26 Feb 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 78.142.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:d7:8e:46:de:69:e6:b8:1d:3e:e5:cc:06:f9:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Feb 26 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee69da220429c2543be54b265e153efc4dc647a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:8f:1c:fd:20:6c:ab:89:74:53:1f:e0:54:
15:bf:a8:53:6c:f8:a0:13:d3:2c:a5:a7:bb:f9:7f:
d6:dd:cd:ef:c1:31:cf:6e:b4:44:13:eb:77:58:63:
ba:9e:7f:e7:2e:86:52:cb:db:91:2a:5b:d8:95:3e:
c4:87:f6:f1:9f:0c:59:10:62:c9:1b:fd:36:01:5a:
f7:4d:45:2d:28:b3:b6:66:89:22:b3:89:8c:3e:39:
5f:02:36:75:8f:d1:16:75:8d:c6:d3:3f:66:3b:96:
0c:fe:bc:36:77:b5:5f:4c:cc:c3:af:27:01:53:60:
b0:37:17:f5:14:15:52:40:e7:36:ed:fa:b4:2b:cf:
42:50:fa:68:f7:6c:ff:51:ab:89:ef:51:7c:8c:7c:
61:b0:7f:80:e4:a4:2e:07:5b:17:06:f0:73:57:47:
be:b1:d0:84:6d:90:ff:f8:ba:f9:a5:bf:dd:75:bf:
96:d8:cc:bc:1b:3c:b0:2d:95:0b:f2:49:29:ce:87:
f3:ea:3d:34:61:e9:c5:ce:3b:ce:bc:75:5d:74:c6:
fc:8d:8e:0c:08:64:1f:43:b0:a5:03:9e:e8:31:82:
e6:7a:c3:41:9b:07:0c:9d:45:de:08:bb:02:5d:d8:
19:30:c2:37:78:0e:80:4f:61:db:65:01:83:68:9d:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:DA:22:04:29:C2:54:3B:E5:4B:26:5E:15:3E:FC:4D:C6:47:A0
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7mnaIgQpwlQ75UsmXhU-_E3GR6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:9d:d4:57:75:36:ce:30:2d:ca:6b:f1:41:0b:4f:70:34:83:
1c:d9:48:ae:22:52:46:ef:85:f6:44:84:d7:e0:33:77:49:dd:
7a:73:80:ea:6d:31:a7:b2:46:18:06:41:da:82:b5:61:38:1f:
d0:9f:89:d1:7a:c9:c6:27:5c:df:22:8b:43:19:e1:c5:8a:16:
88:80:48:e7:52:2c:e8:9a:c9:a3:06:95:90:82:53:07:8f:6a:
cb:40:12:74:4a:eb:2e:ff:ca:41:e0:7d:d7:6d:58:68:12:15:
75:bc:dd:38:2f:6b:56:be:5c:12:34:eb:94:16:f2:8e:24:d9:
bf:d4:66:1d:49:f5:78:c6:15:1b:95:52:44:31:72:8e:7a:46:
14:bb:f6:3a:61:85:a1:85:10:fc:85:e6:5d:93:8b:fd:75:77:
ac:f8:45:26:45:e1:74:8c:0b:56:eb:80:1c:2f:d4:cf:8f:87:
c8:e1:26:0d:5f:f9:e3:13:98:36:7f:41:54:f6:4a:ca:0f:57:
fd:47:5a:3b:c6:29:66:16:98:cd:72:50:1b:44:0e:90:3a:a0:
74:18:62:ef:d0:2e:7c:62:a4:7c:ff:1a:72:2b:53:c5:a1:29:
5f:67:89:a2:83:31:05:44:e9:a2:c9:6c:e4:54:91:18:de:4b:
b0:ee:df:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3k145G3mnmuB0+5cwG+Z3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjQwMjI2MDk1NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTY5ZGEyMjA0MjljMjU0M2JlNTRiMjY1ZTE1M2VmYzRkYzY0N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8iPHP0gbKuJdFMf4FQVv6hTbPig
E9Mspae7+X/W3c3vwTHPbrREE+t3WGO6nn/nLoZSy9uRKlvYlT7Eh/bxnwxZEGLJ
G/02AVr3TUUtKLO2Zokis4mMPjlfAjZ1j9EWdY3G0z9mO5YM/rw2d7VfTMzDrycB
U2CwNxf1FBVSQOc27fq0K89CUPpo92z/UauJ71F8jHxhsH+A5KQuB1sXBvBzV0e+
sdCEbZD/+Lr5pb/ddb+W2My8GzywLZUL8kkpzofz6j00YenFzjvOvHVddMb8jY4M
CGQfQ7ClA57oMYLmesNBmwcMnUXeCLsCXdgZMMI3eA6AT2HbZQGDaJ2JwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5p2iIEKcJUO+VLJl4VPvxNxkegMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvN21uYUlnUXB3bFE3NVVzbVhoVS1fRTNHUjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTo4sMA0G
CSqGSIb3DQEBCwUAA4IBAQCyndRXdTbOMC3Ka/FBC09wNIMc2UiuIlJG74X2RITX
4DN3Sd16c4DqbTGnskYYBkHagrVhOB/Qn4nResnGJ1zfIotDGeHFihaIgEjnUizo
msmjBpWQglMHj2rLQBJ0Susu/8pB4H3XbVhoEhV1vN04L2tWvlwSNOuUFvKOJNm/
1GYdSfV4xhUblVJEMXKOekYUu/Y6YYWhhRD8heZdk4v9dXes+EUmReF0jAtW64Ac
L9TPj4fI4SYNX/njE5g2f0FU9krKD1f9R1o7xilmFpjNclAbRA6QOqB0GGLv0C58
YqR8/xpyK1PFoSlfZ4migzEFROmiyWzkVJEY3kuw7t9/
-----END CERTIFICATE-----
Generated at Mon May 20 16:01:55 2024 by rpki-client on console-ams.rpki-client.org