Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Jyip4TVrefgeuF-ZfGIi8kbIS-Q.roa
File: Jyip4TVrefgeuF-ZfGIi8kbIS-Q.roa (raw, json)
Hash identifier: +8DiJgsF/t+XAOjq/IEiF1OoSv/9b2SP3t8DpBgIzJo=
Subject key identifier: 27:28:A9:E1:35:6B:79:F8:1E:B8:5F:99:7C:62:22:F2:46:C8:4B:E4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01933F098A42C4FA9A337B0EB33CAED50A95
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Jyip4TVrefgeuF-ZfGIi8kbIS-Q.roa
Signing time: Mon 18 Nov 2024 11:30:10 +0000
ROA not before: Mon 18 Nov 2024 11:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42805
IP address blocks: 78.142.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:09:8a:42:c4:fa:9a:33:7b:0e:b3:3c:ae:d5:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Nov 18 11:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2728a9e1356b79f81eb85f997c6222f246c84be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:c3:44:9e:0f:b3:19:1d:71:42:f8:8b:4e:
5d:50:a5:8d:70:3d:03:60:01:29:0b:58:94:c7:8e:
dd:03:9d:b8:cb:9d:bf:da:5c:cb:66:fd:75:4a:98:
be:cb:c7:8f:dd:38:b8:5a:2a:2a:4a:3a:a7:8d:26:
cb:52:64:d3:95:f7:fe:7e:1b:65:f2:8f:0d:5c:e0:
ab:2a:86:76:16:8f:7c:2c:c2:3b:fe:bd:61:e5:db:
46:af:14:bc:7f:2c:1a:c5:cd:d2:2a:de:7c:19:41:
39:95:e4:c0:ce:4b:20:41:80:b0:0d:e0:4c:79:3d:
50:1f:06:76:ba:82:37:42:37:9d:1e:49:bb:e1:1b:
f3:50:df:a3:0a:21:c8:f9:11:a6:02:f1:6f:c1:70:
76:e4:6e:cd:52:91:f3:00:08:d3:a5:39:71:9c:59:
0c:75:e6:a4:bb:d0:05:11:bf:1d:dc:50:a0:ea:57:
98:2b:91:f4:ad:db:a8:35:ce:2e:58:bc:23:29:eb:
10:34:f2:a3:d3:e7:86:af:cc:b3:7a:4a:79:92:f8:
a0:9c:87:3c:51:c2:2c:0f:a4:dc:90:6f:b5:7c:23:
06:86:e2:b4:79:73:74:0a:ef:b5:dc:4b:73:e0:8b:
5d:49:df:0f:da:8e:7c:63:4d:0c:c4:3e:ce:61:b0:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:28:A9:E1:35:6B:79:F8:1E:B8:5F:99:7C:62:22:F2:46:C8:4B:E4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Jyip4TVrefgeuF-ZfGIi8kbIS-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.46.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7d:f8:f2:2d:7a:df:a8:64:f4:1c:a2:20:2d:8a:75:f8:67:
87:e1:a9:e5:0a:ef:19:34:40:d8:52:0a:c2:ee:ce:11:63:44:
75:90:96:89:dd:98:96:d1:ca:4c:87:29:b5:77:fd:d8:d3:98:
07:8e:0d:e2:04:6f:2c:c2:81:03:20:0e:0d:e7:14:80:5b:19:
0e:ed:1b:6c:bb:a2:a8:b9:d8:a7:01:68:a1:72:2c:08:39:36:
9e:22:02:35:62:37:8c:fa:da:10:24:bd:5b:eb:24:f6:9a:d1:
24:81:fe:82:26:e9:99:e0:95:b1:9d:23:6a:60:d3:4e:8b:39:
1c:58:f4:4b:eb:40:42:44:d6:d8:34:a8:91:6e:f6:03:e1:56:
d4:2e:1f:05:59:8f:7f:bd:3f:bf:26:f6:3a:90:d8:be:d5:6a:
e8:44:91:82:a8:67:20:d3:5b:0a:56:27:f5:0e:5b:23:20:d6:
55:82:51:39:5d:f7:e0:44:7b:01:99:2a:9a:62:a3:90:95:50:
26:0b:94:9c:23:2a:b6:2e:bd:2a:b1:b1:e8:78:41:c9:cc:df:
a4:85:14:59:f1:fd:e4:16:13:1c:a6:a7:79:e0:2f:a8:93:0d:
64:63:92:ea:a0:29:9c:d9:e7:b5:c7:8b:7c:7a:b4:88:3c:ba:
75:c2:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:30 2024 by rpki-client on console-ams.rpki-client.org