Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/aLcjKNfBxPiBC4PBcUFrh8VDrSo.roa
File: aLcjKNfBxPiBC4PBcUFrh8VDrSo.roa (raw, json)
Hash identifier: 5ag9blLQ5WSaDQ1hqk7yQgTJP1MdKJbmc9rQASQnBHA=
Subject key identifier: 68:B7:23:28:D7:C1:C4:F8:81:0B:83:C1:71:41:6B:87:C5:43:AD:2A
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018CC87106C60785E569270602440C1F8D71
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/aLcjKNfBxPiBC4PBcUFrh8VDrSo.roa
Signing time: Tue 02 Jan 2024 04:31:39 +0000
ROA not before: Tue 02 Jan 2024 04:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201775
IP address blocks: 178.170.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:06:c6:07:85:e5:69:27:06:02:44:0c:1f:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 04:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b72328d7c1c4f8810b83c171416b87c543ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:37:09:b0:2e:ae:a8:71:93:57:f9:ae:15:
14:c6:39:f4:03:c4:85:bc:ec:cb:20:16:09:bb:52:
59:5e:df:12:2e:1a:9f:32:82:e1:1f:2a:1c:6e:ac:
80:67:5b:4f:4b:c6:19:39:1c:f6:19:9c:99:73:2b:
9f:3c:af:06:9e:0a:0b:20:23:e7:07:80:cd:a2:31:
9f:8e:06:bb:8b:90:39:e6:78:a2:5d:f4:93:4a:c6:
d3:d2:fb:46:a8:05:97:47:19:76:a5:5f:9c:fa:25:
3e:d6:c6:c7:fb:ee:17:32:00:98:64:c9:34:ff:d3:
ac:b2:1d:d7:57:52:39:6c:47:2c:65:88:04:ee:38:
e5:83:e5:8e:5a:f4:fa:b4:35:1d:bd:f5:02:a7:be:
eb:38:62:4f:2d:ad:26:24:c9:ad:fc:61:06:5e:51:
e7:2e:33:d9:69:34:13:11:db:74:f5:67:bc:aa:3f:
0f:1a:f5:2f:a5:4d:9a:b2:04:b7:91:a7:18:ac:2c:
7d:57:4e:9a:71:56:60:92:e2:17:b3:c6:9e:7a:34:
c2:ad:21:30:cc:54:58:70:91:b7:5a:63:0a:5b:dc:
0e:02:c0:57:84:73:30:26:b8:71:e3:ae:d6:40:f5:
12:f6:93:87:7f:a6:c3:24:57:05:9b:94:5a:c6:4b:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:23:28:D7:C1:C4:F8:81:0B:83:C1:71:41:6B:87:C5:43:AD:2A
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/aLcjKNfBxPiBC4PBcUFrh8VDrSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f2:91:4f:7b:e0:1b:91:8c:75:51:cd:92:31:5b:b8:13:80:
9f:85:1a:6a:3a:39:f0:3d:a4:e0:db:74:73:8a:ff:00:be:d9:
b1:eb:ae:2f:15:c2:f0:4e:d3:87:03:7d:89:ff:b6:17:41:ab:
d7:e7:7d:1c:96:5a:78:68:ef:14:3e:f5:27:1a:cf:bb:fe:f7:
c1:11:2b:38:2c:cf:5e:bc:b7:d3:f4:d7:9a:85:11:de:cc:85:
17:86:13:0b:6e:fa:b3:1f:6a:6b:c4:3c:78:55:49:73:b6:39:
f3:72:d6:d2:6c:3e:26:d1:01:e6:8c:f5:4a:0a:4b:bc:2b:18:
6d:73:e4:cb:13:d3:21:7e:e3:0e:0c:4d:83:01:94:04:d5:af:
c4:93:01:bb:39:cf:df:c7:b7:9d:e8:7a:7a:3a:fe:18:ca:b0:
5d:d8:8c:2c:77:7a:90:2a:b9:6b:f4:4a:75:7e:34:9d:e9:de:
1d:01:3b:e1:97:74:e2:4b:3c:a0:45:72:fa:b2:c3:a0:1e:f7:
0b:ac:3a:a0:e8:07:ce:0e:07:d2:6a:7f:b8:76:e0:62:92:9c:
78:69:d8:b7:11:8b:1a:6a:93:eb:63:d0:21:75:17:14:af:9d:
e3:37:23:19:50:fb:ab:6f:98:af:a2:0d:67:ca:d7:60:01:a5:
a9:77:30:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:49:24 2024 by rpki-client on console-fra.rpki-client.org