Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/3qKI9nW-WcVhSthRfLoDbYau-wg.roa
File: 3qKI9nW-WcVhSthRfLoDbYau-wg.roa (raw, json)
Hash identifier: IQIz54ysxyNeHETnk77/eb6Fbhqcrs840PAcQ4htnu4=
Subject key identifier: DE:A2:88:F6:75:BE:59:C5:61:4A:D8:51:7C:BA:03:6D:86:AE:FB:08
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 018CC424828C073411DF9206D3752333DEBE
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/3qKI9nW-WcVhSthRfLoDbYau-wg.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30722
IP address blocks: 212.78.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:82:8c:07:34:11:df:92:06:d3:75:23:33:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea288f675be59c5614ad8517cba036d86aefb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:e0:ec:28:f0:63:d0:72:da:74:fc:1c:fd:
c2:17:58:18:17:db:50:46:54:ef:b2:9a:48:b2:86:
71:71:23:e4:7a:29:c5:b7:fa:7d:de:9b:21:f6:83:
de:b3:32:30:63:ec:8e:ca:38:0b:3c:3d:1d:c9:55:
8e:91:75:eb:23:ed:6e:e5:4c:d5:78:60:b7:35:45:
5e:f9:1f:3b:92:57:99:01:7a:ea:7a:bd:34:2b:22:
bf:a4:b8:37:e5:07:c6:16:b9:e1:60:7c:c5:08:12:
bb:c6:4f:d9:8a:24:e2:00:43:ce:c7:2e:44:9c:1b:
5c:e3:68:b5:8b:28:e3:cb:c5:e2:60:80:6c:7a:50:
1a:d5:79:cc:f6:8a:8f:e2:10:d0:6f:7b:22:c9:88:
01:ae:a9:d4:e8:8e:12:e9:de:d7:13:4f:ef:56:81:
a0:94:a8:d6:55:b0:b0:71:36:4c:a7:b9:45:88:bf:
c1:21:27:26:5b:08:a4:4f:07:73:e7:66:68:9c:d9:
b9:40:f2:b7:6d:93:4a:73:6d:4d:1d:42:ca:24:7c:
57:0c:2c:20:4c:7e:57:b1:37:5f:e2:87:56:46:b8:
99:46:f2:3a:3b:23:42:8a:8a:dd:71:5c:51:f0:55:
9a:1c:f4:8e:40:5c:52:c6:9c:bf:be:1b:42:8d:b1:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:88:F6:75:BE:59:C5:61:4A:D8:51:7C:BA:03:6D:86:AE:FB:08
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/3qKI9nW-WcVhSthRfLoDbYau-wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2a:3c:5b:22:d6:a6:03:af:ce:72:b8:33:7c:ea:23:e4:8e:
a5:d1:13:98:20:08:76:ab:f6:08:09:5f:f5:db:0d:bf:b4:44:
eb:94:fd:e1:38:ac:90:59:ca:f1:fe:b0:c0:ed:f4:8b:48:8d:
7b:65:7e:c6:7c:a4:21:2a:18:04:49:04:fe:66:ac:2d:2a:84:
3c:26:de:1b:bc:48:d9:7d:3c:20:9b:8c:9c:89:2b:88:82:02:
15:43:11:e2:50:dc:07:ed:e6:5b:2d:7a:b6:a8:65:4f:35:2f:
f4:05:ac:67:33:7e:25:42:47:35:51:7e:8e:00:1b:7b:3d:9d:
e6:70:bf:82:ed:3e:7c:81:a4:f4:04:66:5a:3c:b9:51:d6:47:
02:cc:8d:af:e9:30:fd:2f:97:9b:10:1a:82:35:06:15:cd:e5:
72:90:7a:b2:00:f6:2f:39:df:53:3e:3a:64:40:bf:4c:3d:50:
3a:3c:6b:25:ec:d7:28:97:2a:52:0b:bb:9e:b7:71:2c:3e:ba:
3d:0e:3e:3d:e2:34:c0:b9:7e:77:7f:91:fb:ff:ba:29:85:e4:
3b:03:88:1b:9a:2a:96:7d:9d:26:f2:f9:f5:4f:b4:e5:1e:88:
c1:d3:dc:cb:56:4a:60:17:e0:ab:74:f7:2e:63:37:5c:c0:15:
24:76:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 08:20:53 2024 by rpki-client on console-fra.rpki-client.org