Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/x5MOxIZ7q-qJkqyaseWTTTeL77g.roa
File: x5MOxIZ7q-qJkqyaseWTTTeL77g.roa (raw, json)
Hash identifier: jdtR9DRApAC63bxwU9GlbdYjqDkIhx2eTfzVkPHuVFs=
Subject key identifier: C7:93:0E:C4:86:7B:AB:EA:89:92:AC:9A:B1:E5:93:4D:37:8B:EF:B8
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018CC8710403D65835BB8A5C0505958432BE
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/x5MOxIZ7q-qJkqyaseWTTTeL77g.roa
Signing time: Tue 02 Jan 2024 04:31:38 +0000
ROA not before: Tue 02 Jan 2024 04:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43349
IP address blocks: 178.16.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:04:03:d6:58:35:bb:8a:5c:05:05:95:84:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 04:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7930ec4867babea8992ac9ab1e5934d378befb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:8b:e9:74:47:cf:9a:b3:3c:99:62:9e:d8:
65:9c:dc:24:c9:82:99:6f:ce:7b:1a:f5:8a:c4:d6:
e4:7e:98:3b:8f:79:22:bd:8e:39:aa:94:be:b5:51:
d3:d4:84:af:20:34:c8:53:ec:0c:56:16:da:1c:93:
dd:cd:9c:a9:75:c5:43:2a:41:70:8e:29:7f:f7:72:
a8:0d:66:05:ae:6a:82:05:77:b5:3a:70:47:1b:f7:
c6:07:06:df:c6:d1:25:ee:63:48:2e:35:52:95:7d:
e5:eb:ce:21:a6:61:84:46:8f:a1:6d:99:61:5f:07:
dd:71:ac:fa:36:9e:ac:50:3e:7f:45:83:1f:c6:cd:
74:f6:4c:d7:7b:23:97:20:d4:41:1a:8e:08:6d:2c:
9b:34:22:ea:c8:b3:48:a3:1d:ae:7b:43:16:48:09:
c8:56:ba:2d:8e:5e:b5:8b:09:2b:16:93:13:ea:b9:
f5:b0:56:ad:f4:62:9a:b0:af:1c:dc:2b:49:0c:e4:
02:1c:89:8f:51:db:09:c0:97:85:8a:9e:76:1b:62:
b3:c6:d7:55:a8:d6:8d:0b:dd:78:70:52:76:d5:65:
0e:f0:d2:ae:0c:e9:5e:ea:10:c0:7f:99:ca:17:03:
27:62:b5:ed:0d:fa:cb:bb:6f:3e:77:ae:e2:c5:d0:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:0E:C4:86:7B:AB:EA:89:92:AC:9A:B1:E5:93:4D:37:8B:EF:B8
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/x5MOxIZ7q-qJkqyaseWTTTeL77g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.148.0/24
Signature Algorithm: sha256WithRSAEncryption
af:13:5b:dd:ad:50:21:e7:37:f1:3e:50:cd:fa:6c:bf:7d:4e:
32:b1:1a:53:96:9a:0f:3b:df:f6:4a:74:4e:f8:19:f9:d1:19:
77:c4:08:81:f0:71:2f:b5:21:7b:fb:a8:92:d9:34:2e:53:53:
e0:d2:37:2f:0a:ec:64:75:61:6d:b2:4a:2e:8f:04:54:f1:de:
8d:fb:c7:c0:ab:66:8d:ae:34:49:97:85:0d:6b:85:90:8a:ef:
67:aa:e1:79:6b:a9:07:87:5d:e6:29:cb:9f:7b:a8:b8:cc:30:
45:53:a3:ba:b4:30:7a:61:38:d7:0d:12:11:20:bd:94:b7:ef:
37:56:f3:34:1b:f2:ad:d2:f3:2f:5e:d8:07:eb:5f:61:ca:2c:
0f:b6:da:b2:a9:57:3b:7b:b9:f9:95:83:57:34:2a:cd:f4:d2:
d9:ea:d3:0f:98:06:e3:c5:1c:c7:e6:35:fb:c9:05:ce:5c:c3:
32:bc:1c:56:f3:68:90:a6:f8:28:f7:01:b3:48:0e:9d:aa:09:
f5:f1:9b:ef:82:99:75:4e:47:47:e3:48:f1:63:b7:bd:e6:18:
51:7c:4f:11:56:d3:ed:51:8a:8a:1c:46:83:95:56:83:e9:b8:
ab:87:de:db:bd:db:92:2e:3d:ea:c2:fd:8d:ea:2a:72:42:b8:
76:ff:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:46 2024 by rpki-client on console-ams.rpki-client.org