Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/yVqkt8ZzhvIoDK4bLMSalNbpeTM.roa
File: yVqkt8ZzhvIoDK4bLMSalNbpeTM.roa (raw, json)
Hash identifier: QEJCQxg80mU8aV0UcLCIXovF7FaJGiunwnM7s36hRys=
Subject key identifier: C9:5A:A4:B7:C6:73:86:F2:28:0C:AE:1B:2C:C4:9A:94:D6:E9:79:33
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 018CC5013AAF6ECCABFA8B0E298CEBB2CD8D
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/yVqkt8ZzhvIoDK4bLMSalNbpeTM.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204392
IP address blocks: 78.159.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3a:af:6e:cc:ab:fa:8b:0e:29:8c:eb:b2:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c95aa4b7c67386f2280cae1b2cc49a94d6e97933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:fa:6f:49:d6:ed:b0:66:ab:1a:83:50:4e:
4f:35:86:f0:cf:ac:88:3d:5e:f6:29:1f:e1:87:57:
2f:ef:96:8c:3a:bc:11:62:1c:9c:8b:26:ab:b1:25:
c0:9f:23:82:6f:03:63:72:2e:c5:af:b2:65:45:f2:
a0:32:d6:02:17:e0:5a:e7:b8:fa:47:b4:80:d6:67:
ab:40:ec:38:69:6d:7a:23:54:76:37:32:af:77:af:
d0:57:c9:5a:d2:c0:ca:5e:aa:8e:9d:a9:2e:3b:30:
1e:88:5c:61:18:b8:3e:55:62:99:87:ed:9a:6a:c7:
54:01:4e:54:34:0d:bd:f7:db:96:34:94:1b:a2:c7:
61:b0:e7:3a:ec:a5:ea:d6:cb:59:7d:4a:6f:39:29:
7b:2f:9e:bf:b0:9f:f8:3f:6b:27:30:b4:ef:1a:27:
16:87:56:09:40:cc:bc:e1:9e:8b:88:6b:98:a8:15:
20:ff:00:d3:6c:73:2a:f5:38:05:6d:c3:35:75:f7:
2d:14:c0:3f:88:55:ca:b2:ef:bf:de:20:2c:14:60:
9c:a1:94:82:f8:3b:22:ca:54:f9:32:fd:42:00:b6:
81:f4:ef:d9:d6:0f:da:9f:6f:71:43:64:fc:ab:c5:
4a:b5:33:4d:20:66:57:62:bc:ef:79:fd:bd:aa:09:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:A4:B7:C6:73:86:F2:28:0C:AE:1B:2C:C4:9A:94:D6:E9:79:33
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/yVqkt8ZzhvIoDK4bLMSalNbpeTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e4:1c:0f:93:43:69:99:4f:cc:1b:a8:cb:e9:38:ac:f1:fa:
fc:43:3f:25:43:90:2e:c9:57:9b:c5:d2:f0:73:3c:0a:e2:79:
f8:b6:cf:33:45:29:ab:4d:56:ee:85:82:a5:5f:2b:59:c6:ae:
b8:06:8a:07:03:ff:b5:65:d6:da:f9:2b:cc:db:ad:69:24:ce:
e7:28:20:da:38:7b:e4:f6:12:56:4c:50:8f:a1:be:f8:9a:ee:
d9:e7:89:2f:f6:7a:ca:46:e2:55:70:a2:c0:bc:73:fe:08:f2:
3d:47:8e:ed:29:6f:43:3b:fe:98:6b:52:92:40:86:24:91:c6:
dc:7b:d4:f2:ee:b2:67:29:db:3c:99:63:77:b4:e6:06:00:91:
30:76:35:df:b0:be:0f:04:bf:59:a8:8c:2a:29:0b:b7:ad:ec:
67:18:8d:fb:cb:6e:43:c9:a8:4f:07:60:c8:85:b8:7f:59:06:
5c:f0:8e:21:70:d7:c9:59:67:5d:9e:d9:63:18:58:9c:73:6e:
6b:a8:9d:6f:e0:e5:5b:64:21:1e:6b:fb:aa:82:ec:75:23:de:
01:21:81:04:52:a4:5b:4e:ac:80:8d:10:9f:53:f9:de:40:40:
ca:51:81:7c:0e:31:67:f4:01:5a:68:3a:6b:a9:cf:20:f9:33:
13:ef:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:42:55 2024 by rpki-client on console-fra.rpki-client.org