Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Sdhb_6SvZjLm1TEgIHqMk3JqGeA.roa
File: Sdhb_6SvZjLm1TEgIHqMk3JqGeA.roa (raw, json)
Hash identifier: oBHNCkUE46Jr3IaJk4x+V08k7JdSHjwNhE7/1ux9Sk4=
Subject key identifier: 49:D8:5B:FF:A4:AF:66:32:E6:D5:31:20:20:7A:8C:93:72:6A:19:E0
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 018CC5013A4220DABDE5C0EC04DF5B6C2331
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Sdhb_6SvZjLm1TEgIHqMk3JqGeA.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203828
IP address blocks: 78.159.91.0/24 maxlen: 24
78.159.89.0/24 maxlen: 24
78.159.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3a:42:20:da:bd:e5:c0:ec:04:df:5b:6c:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d85bffa4af6632e6d53120207a8c93726a19e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:0a:48:3c:4b:62:95:da:0b:9e:d5:3f:58:
c2:1a:16:56:94:c2:ba:68:ad:90:24:c5:05:94:5d:
45:a8:13:b6:5f:de:0c:7d:1a:43:74:b7:f0:65:0b:
3f:25:4a:dc:30:76:7d:03:c0:29:42:4b:6a:1c:76:
a2:bc:82:01:93:55:cd:d4:d7:e1:f6:0b:9b:55:37:
aa:e6:e6:96:04:11:4d:d0:bc:16:8d:93:46:10:c8:
ca:03:96:56:f4:58:be:35:4f:30:a0:38:6d:d4:c7:
fe:4e:e8:11:8a:92:35:15:ce:f1:59:42:6b:fa:30:
b6:cb:84:2c:d6:f5:95:54:53:0f:3c:93:e6:4c:85:
ce:77:54:0c:77:31:7b:aa:20:4b:ca:41:93:0c:fc:
a5:ab:a7:f7:7b:47:20:91:a4:d3:2a:d8:1a:96:51:
39:cf:33:4c:db:5c:12:3f:34:22:25:55:c0:77:33:
3f:21:3b:9e:cf:a9:47:6f:f2:01:14:d9:4d:7f:b6:
5e:cd:89:b9:71:9c:f6:49:ca:81:c0:16:a3:28:a0:
eb:92:76:1b:b8:48:71:41:4c:5b:0f:db:9e:eb:c9:
3c:d8:a4:c1:ab:9e:ce:96:bb:42:09:6f:7b:8d:60:
2b:73:40:72:3e:91:e7:9e:9b:02:b1:6e:0d:19:bf:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:5B:FF:A4:AF:66:32:E6:D5:31:20:20:7A:8C:93:72:6A:19:E0
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Sdhb_6SvZjLm1TEgIHqMk3JqGeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.89.0-78.159.91.255
Signature Algorithm: sha256WithRSAEncryption
6c:e4:2a:e7:55:95:51:23:0b:6d:1b:18:a9:d6:6d:61:8c:e1:
9d:e6:87:e8:bf:e5:7f:59:e9:1f:32:26:b8:0e:1c:ff:62:90:
6f:0e:bf:ee:73:74:5c:e2:0f:91:b8:a6:05:e2:53:b0:44:bc:
cb:31:5f:70:14:20:02:5e:2c:8b:99:30:2f:43:a6:4c:85:59:
3f:e4:f8:ef:26:f3:08:80:98:51:6c:11:27:06:28:e0:62:ce:
97:b8:e9:9e:e8:8d:23:75:3e:ca:4a:33:0c:85:8c:1f:89:6b:
03:42:fe:c6:04:2f:a8:bd:42:d6:af:96:bb:ca:08:43:4a:dd:
ab:da:d7:cd:7b:69:86:a4:8a:39:0a:a0:2a:5f:97:c3:be:cc:
0f:a7:65:98:9f:6e:28:1e:7a:0b:2e:7d:a9:30:2c:80:7a:70:
9c:d1:1b:c4:55:17:a6:35:f0:c4:04:d2:a2:c8:24:3c:1f:7c:
ac:b0:4e:57:c3:c1:86:68:82:a7:1b:65:e1:1d:ba:6a:50:78:
b1:93:e3:ce:52:f5:1d:10:79:fa:4d:b7:5f:bf:47:b9:c9:18:
57:ce:d3:07:51:55:44:30:52:9e:21:fd:b2:99:2d:d3:68:a3:
8a:6e:b8:64:ca:73:c4:f1:88:f0:e3:fc:03:ee:0d:16:ff:df:
e6:1a:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:04 2024 by rpki-client on console-fra.rpki-client.org