Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/d0GDpvEKLFwcJ1ATucz-ay4vcQQ.roa
File: d0GDpvEKLFwcJ1ATucz-ay4vcQQ.roa (raw, json)
Hash identifier: /mgAGHbNgWQUe087vez6GTKr150C2Lw9fj3xT0KnG+A=
Subject key identifier: 77:41:83:A6:F1:0A:2C:5C:1C:27:50:13:B9:CC:FE:6B:2E:2F:71:04
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 018CC5013C63DAD9C9A7EB69D9B27A6EA69A
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/d0GDpvEKLFwcJ1ATucz-ay4vcQQ.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212908
IP address blocks: 78.159.64.0/21 maxlen: 21
78.159.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3c:63:da:d9:c9:a7:eb:69:d9:b2:7a:6e:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=774183a6f10a2c5c1c275013b9ccfe6b2e2f7104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:ab:68:25:5b:41:26:b1:b4:23:bf:e5:a4:
2c:0b:00:24:88:2d:a2:4d:46:3f:14:be:41:c3:46:
83:39:93:55:e5:76:92:c6:54:0a:5b:65:d6:f6:2d:
4a:a7:d4:84:f5:75:8f:75:60:1e:23:47:40:48:e6:
d8:ab:02:6d:4e:93:76:23:69:b4:b4:ef:77:60:e0:
23:3e:94:d1:e5:60:d8:09:57:5e:ad:cb:f5:ea:d2:
83:e9:65:50:c9:44:c3:3e:42:f1:f5:59:57:f9:32:
11:d6:5d:08:0f:9e:19:40:cf:95:9b:79:73:63:1f:
e7:69:07:2e:f3:ad:25:c7:4c:ce:1f:8f:99:99:19:
1c:7e:e1:45:10:72:54:73:6b:84:3a:cf:80:0f:31:
58:04:79:04:03:42:5b:52:f0:14:ad:1f:34:ca:41:
8c:3b:81:ca:36:91:ed:b6:41:13:87:f3:21:13:e0:
15:c2:3b:a2:98:0f:91:ee:8c:1b:6a:4c:34:64:cf:
e3:b3:7e:78:b7:9b:fe:b5:ed:99:f5:84:41:ef:7f:
8e:2b:b8:c6:ce:45:cd:f2:8c:67:b7:e7:26:5b:ad:
6c:c1:a8:38:e0:42:6d:1c:4a:bf:73:d4:04:a4:a3:
ef:b8:06:eb:24:c5:8e:a5:c8:30:07:b9:e4:e9:fe:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:83:A6:F1:0A:2C:5C:1C:27:50:13:B9:CC:FE:6B:2E:2F:71:04
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/d0GDpvEKLFwcJ1ATucz-ay4vcQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.64.0/21
78.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:82:e1:10:31:4f:77:b8:3f:ee:70:1a:d2:57:24:01:7e:df:
0c:11:92:66:5f:34:38:06:8a:56:fa:2e:95:0b:e3:d2:bf:45:
38:d2:2d:f5:a2:0e:4c:56:e4:ca:df:32:b8:54:cd:fd:9d:03:
9a:3e:82:2e:cb:e3:71:4a:e6:11:a3:cb:00:5a:be:ad:72:8a:
f4:22:5d:7b:81:2e:d0:c9:9c:10:bb:33:98:d9:85:20:ee:55:
57:6b:50:78:65:ff:8c:c3:c8:9b:b8:8d:73:1a:01:3b:cf:93:
8f:62:5d:35:71:70:f6:1e:98:04:f5:6a:59:1c:9c:bd:a3:a5:
d6:85:bb:f0:ee:6a:3b:23:f3:6c:19:0a:5c:a2:41:8f:6f:02:
67:96:22:10:d9:76:d5:9c:35:bc:e0:39:90:37:be:0b:97:81:
e5:b1:48:22:32:32:1a:fe:ad:ce:4e:70:26:b1:03:e1:60:05:
41:d6:42:01:96:da:ae:2a:31:05:b0:42:ce:f0:34:be:a5:98:
fa:65:94:6e:44:bb:72:1f:10:5e:6e:b5:59:60:dc:a8:e9:c2:
de:06:b8:28:4a:c5:70:68:d0:fc:a8:c8:92:7b:d0:8c:7d:00:
08:63:e5:de:d6:84:53:01:9f:50:a2:e3:7e:d3:de:95:77:b0:
d9:eb:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:25:53 2024 by rpki-client on console-ams.rpki-client.org