Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o7u27uQWbXD0Ys5cSqylY2g4V4s.roa
File: o7u27uQWbXD0Ys5cSqylY2g4V4s.roa (raw, json)
Hash identifier: 0fTukYhqoTS8wN5m1HlrP9wYh6GarIpL3EpN+xiLxWY=
Subject key identifier: A3:BB:B6:EE:E4:16:6D:70:F4:62:CE:5C:4A:AC:A5:63:68:38:57:8B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE693273FDA3C7D4F36FE911A6FB25A9E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o7u27uQWbXD0Ys5cSqylY2g4V4s.roa
Signing time: Tue 16 Apr 2024 11:03:07 +0000
ROA not before: Tue 16 Apr 2024 11:03:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43574
IP address blocks: 78.156.224.0/19 maxlen: 19
109.172.56.0/24 maxlen: 24
109.172.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:93:27:3f:da:3c:7d:4f:36:fe:91:1a:6f:b2:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:03:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3bbb6eee4166d70f462ce5c4aaca5636838578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:50:c4:bb:59:dd:41:30:16:d1:de:3f:f8:
8c:a4:fa:51:f4:68:c0:9b:fe:50:19:5e:b5:91:6c:
c1:cd:60:cd:b7:ce:72:f6:9d:48:63:a3:33:f1:2f:
3f:ec:ed:46:28:45:79:d3:52:c0:50:41:b2:e2:7a:
ce:2e:25:38:c4:bf:49:af:2d:67:4c:c4:7b:0d:90:
a6:73:15:d9:ce:4f:85:4e:51:d8:e3:8b:51:a4:8f:
aa:62:84:ed:fb:0f:1d:44:d9:52:a1:6c:55:bf:fc:
29:e0:77:11:97:cb:0a:57:8d:b7:02:ba:26:ba:60:
48:1d:39:55:50:eb:81:62:73:f7:38:69:f5:aa:7f:
ac:9b:21:58:5c:5a:51:07:d4:03:3a:41:00:4e:e3:
4c:ac:83:d9:d2:93:b6:b2:87:77:e3:93:99:66:6f:
45:ef:2e:d5:c1:98:32:0e:fb:c2:50:27:01:f4:45:
2a:d3:47:57:5f:2e:38:36:c8:c3:13:f3:d8:5b:8a:
8e:42:73:8c:ba:4a:4c:f6:ef:c4:d1:23:a3:ec:09:
cc:6e:51:61:62:9d:f3:49:a3:d5:f4:3d:b4:d3:ed:
28:54:aa:b9:51:27:73:9c:63:a6:cc:cb:7d:66:c9:
ed:a6:f2:e8:1a:c8:f3:77:48:76:58:8c:8c:72:46:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:B6:EE:E4:16:6D:70:F4:62:CE:5C:4A:AC:A5:63:68:38:57:8B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o7u27uQWbXD0Ys5cSqylY2g4V4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.224.0/19
109.172.56.0/24
109.172.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:07:f7:4e:94:de:f2:17:25:4f:25:8d:e5:13:e9:36:8e:4e:
1c:c4:f5:e5:51:6b:2f:20:d4:4c:69:81:b0:4b:f2:cc:21:3c:
a1:ee:56:56:9d:de:b4:9b:dc:cb:b9:fd:c1:0a:07:3a:c9:b2:
fb:9f:f0:1a:0c:c4:fc:70:6d:b2:75:e8:ed:26:ba:f4:3d:65:
c7:bf:60:80:e9:fd:eb:a9:73:8a:bd:43:fe:da:9d:5d:4e:fb:
12:c9:0e:af:b5:84:27:27:cc:8c:4e:c3:75:80:63:23:52:55:
d8:23:04:7d:84:75:1f:9d:9a:a5:d0:74:35:5c:6a:e9:6c:29:
10:de:7f:31:2c:62:59:35:77:2e:0d:b0:ea:1c:14:e1:08:21:
a6:26:68:a8:47:ac:32:82:72:f9:3b:eb:af:73:bf:84:82:1c:
a0:84:9b:41:31:ff:ca:d5:85:d0:0b:29:31:be:42:1b:b6:e8:
65:39:b9:fa:45:15:c4:e3:03:67:49:0e:27:92:21:5d:d7:74:
6e:06:04:26:60:f9:28:05:4e:1a:88:84:9e:9c:93:61:4c:5a:
f8:8c:48:bf:4b:10:a5:09:b9:bd:ed:f0:fe:6f:2c:76:9f:65:
ae:3d:3c:cf:4a:e6:76:31:0c:75:c0:03:74:ed:d7:d4:b1:6c:
36:50:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:57:19 2024 by rpki-client on console-ams.rpki-client.org