Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/2ecBYvHyQpRZfJTkIIBNPM5H0W0.roa
File: 2ecBYvHyQpRZfJTkIIBNPM5H0W0.roa (raw, json)
Hash identifier: buLBc9AjGfXqQyyU0XYtqGiGhecbvwHgUSX2lEmsem8=
Subject key identifier: D9:E7:01:62:F1:F2:42:94:59:7C:94:E4:20:80:4D:3C:CE:47:D1:6D
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 018EFD2F2429B4114368653483FDDB355CDC
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/2ecBYvHyQpRZfJTkIIBNPM5H0W0.roa
Signing time: Sat 20 Apr 2024 20:25:08 +0000
ROA not before: Sat 20 Apr 2024 20:25:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196994
IP address blocks: 178.216.24.0/24 maxlen: 24
178.216.25.0/24 maxlen: 24
178.216.26.0/24 maxlen: 24
178.216.27.0/24 maxlen: 24
178.216.28.0/24 maxlen: 24
178.216.29.0/24 maxlen: 24
178.216.30.0/24 maxlen: 24
178.216.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:2f:24:29:b4:11:43:68:65:34:83:fd:db:35:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Apr 20 20:25:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9e70162f1f24294597c94e420804d3cce47d16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:7e:c3:1b:f0:91:7d:09:b4:d0:42:a0:1f:
de:3e:ca:8d:db:e5:01:a1:50:34:d5:6e:70:6d:3d:
f1:b5:f2:fe:72:e3:60:28:0a:94:ed:da:1d:0c:34:
59:02:b5:c5:a8:b9:53:a6:50:f3:2e:9f:df:10:0c:
8f:15:c6:5a:86:10:d0:95:99:99:86:6a:4a:38:44:
e2:1d:82:78:0d:63:c7:7e:49:78:41:45:52:59:60:
17:85:4e:46:4b:56:99:3b:a9:ff:aa:2d:62:36:31:
85:4a:e0:3f:c2:0b:60:d0:5b:3a:6b:3d:50:a2:e3:
4c:10:e9:e9:8b:eb:ec:f7:60:7a:cb:97:94:59:39:
00:a3:13:00:55:35:33:3f:cd:e4:68:b6:da:52:82:
c6:63:39:a6:f2:2b:e0:a5:63:cc:6f:ed:e7:c8:8a:
66:af:a6:1c:71:86:35:f2:1f:9b:77:ff:05:22:f5:
4a:e0:68:dc:7f:28:81:e9:3a:4a:f9:74:ab:94:dd:
e5:fe:b8:a3:9c:1d:65:3f:b3:25:80:14:c5:54:41:
df:0f:c2:c4:9f:0f:5d:65:01:cb:53:a8:bb:84:29:
67:4a:0f:4b:6d:c7:89:6b:f0:25:9f:f7:c1:25:91:
73:7c:b3:fa:5f:bb:9b:3d:b5:a5:28:d0:48:01:f8:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E7:01:62:F1:F2:42:94:59:7C:94:E4:20:80:4D:3C:CE:47:D1:6D
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/2ecBYvHyQpRZfJTkIIBNPM5H0W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.24.0/21
Signature Algorithm: sha256WithRSAEncryption
11:25:47:71:8e:92:82:b5:fa:96:d7:a0:ce:eb:23:53:18:e7:
c3:3f:d0:0a:77:6c:a6:c6:68:d1:ea:fe:a0:fe:61:ef:e9:71:
19:0a:1c:d5:b1:d3:4a:f9:05:80:42:c9:87:a8:f1:43:82:36:
65:96:71:89:d5:8a:ec:e5:79:15:b3:9e:ee:c6:f4:9c:24:d5:
f2:19:5e:66:22:fb:90:68:a0:97:e7:8f:c0:63:ce:86:dd:be:
f0:fe:08:2a:e8:28:2b:46:e4:67:6b:aa:de:06:b2:ad:79:f2:
d8:dc:8c:c9:01:d3:23:3a:8c:e2:87:ad:4c:f1:8d:52:b4:66:
c0:7b:65:49:68:d4:40:52:4d:f4:79:a0:c9:5c:78:51:3c:ff:
97:a4:c0:cd:80:2a:b7:94:1e:a2:74:fc:93:86:e1:a6:6f:d6:
ae:76:39:75:d3:9b:0a:20:d8:8a:b7:57:2c:c6:a0:e2:3a:0b:
a8:56:46:da:e3:4b:b5:aa:9e:b3:06:54:1a:84:e1:80:69:a6:
94:02:31:46:6b:63:c8:e9:04:be:b1:8f:a6:05:24:e2:b9:68:
95:46:5d:f5:96:cd:c0:fb:04:2b:48:b5:79:f1:02:62:24:d6:
61:8c:a2:cd:1b:e0:4c:b5:fb:0b:47:1a:6f:40:c9:5c:96:92:
66:78:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:17 2024 by rpki-client on console-fra.rpki-client.org