Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kHHElzCDPWYoufrhmt_fEr08lT4.roa
File: kHHElzCDPWYoufrhmt_fEr08lT4.roa (raw, json)
Hash identifier: 3nwSYQrL2a+bKfgHAILwq5NNGEaDyb5hUrr2pmPU0Z4=
Subject key identifier: 90:71:C4:97:30:83:3D:66:28:B9:FA:E1:9A:DF:DF:12:BD:3C:95:3E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EA88B7CBD2893F71B71ECF04A5B7AB491
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kHHElzCDPWYoufrhmt_fEr08lT4.roa
Signing time: Thu 04 Apr 2024 09:58:17 +0000
ROA not before: Thu 04 Apr 2024 09:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48877
IP address blocks: 178.34.84.0/24 maxlen: 24
178.34.85.0/24 maxlen: 24
178.34.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:8b:7c:bd:28:93:f7:1b:71:ec:f0:4a:5b:7a:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 4 09:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9071c49730833d6628b9fae19adfdf12bd3c953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:31:d3:e5:8f:ce:df:ae:9e:be:67:51:53:
5d:8b:38:b7:48:b0:d1:0d:cd:37:aa:02:c8:75:a1:
76:c4:4e:bb:b3:64:4b:ff:5b:8a:2a:20:84:79:3d:
14:c0:f7:35:1f:cd:98:75:bb:eb:7f:37:c5:ae:2b:
97:35:9e:89:a9:bb:95:cd:99:bd:89:29:76:e7:95:
b3:ba:07:64:d1:26:5f:d7:a4:99:a0:9a:a0:3e:b2:
b6:fb:2b:a0:f3:a1:7c:8a:a7:7a:b9:b3:a6:0b:69:
ec:38:7e:a2:26:cc:f0:f9:a5:de:f4:87:dc:58:33:
26:48:55:2b:00:8b:d0:c1:88:8a:75:be:a5:b6:45:
76:cf:2d:cd:62:58:e9:5d:b6:ca:4d:db:2b:44:9e:
95:ad:46:b9:9e:ce:bf:9c:ff:0f:d6:c1:81:7a:c4:
bb:e7:cb:cd:63:8c:8c:81:e2:54:15:30:17:58:7b:
d5:ae:91:cd:2c:08:7f:df:61:dd:10:31:7d:e3:06:
e5:fd:03:12:08:98:5f:65:7f:0d:81:70:9d:bc:49:
41:a3:07:b9:af:18:03:4c:8b:10:41:9f:e3:78:51:
59:e9:f4:e8:78:3b:1d:cc:84:4c:0d:c8:66:41:bb:
7a:12:c3:0c:e2:bf:6c:b4:4e:46:fb:d9:8e:62:9f:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:C4:97:30:83:3D:66:28:B9:FA:E1:9A:DF:DF:12:BD:3C:95:3E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kHHElzCDPWYoufrhmt_fEr08lT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.34.84.0-178.34.86.255
Signature Algorithm: sha256WithRSAEncryption
0e:fc:eb:32:7f:32:7f:01:91:ba:0d:ff:5e:1e:b3:a6:4f:d2:
03:5c:26:70:dc:68:b1:86:45:0a:b4:42:95:7c:0d:6d:b7:49:
c7:fa:56:1e:c8:2b:82:4d:f2:5d:43:5c:b2:65:88:91:98:3e:
54:22:a5:18:6e:68:fe:95:49:1f:0c:ea:4d:04:b4:33:5d:83:
ee:2c:65:78:9d:d5:3f:3f:83:bc:30:5b:10:e7:07:19:b7:b3:
cd:5c:15:99:f0:31:99:51:04:17:91:fc:94:a1:3c:8e:dc:9a:
94:03:b7:95:14:0f:1b:1c:bc:c7:25:24:c4:a5:2d:f4:88:54:
7e:4b:71:69:0e:23:07:94:40:62:02:e4:ac:34:69:d8:04:a2:
31:e5:6c:c2:15:01:35:a0:c0:07:d6:84:62:a2:27:45:3c:82:
e7:0a:85:c4:54:fb:99:08:ad:a0:d3:44:4d:33:ac:30:d4:23:
c5:7e:c9:b4:f6:86:84:55:9b:bd:52:4a:9a:63:7e:ae:b3:68:
da:bb:fb:bc:1d:0a:d4:33:a9:a8:13:90:2b:36:16:33:be:fb:
4d:74:9f:0d:bc:3a:8d:86:d8:72:13:6c:04:8b:63:f6:37:3e:
c0:58:78:c9:f3:cc:fb:4b:5b:28:88:95:83:fe:ed:2b:97:68:
dc:78:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:45:20 2024 by rpki-client on console-ams.rpki-client.org