Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/t7wfsbumCtzEFhtO_zwFsVMOsS0.roa
File: t7wfsbumCtzEFhtO_zwFsVMOsS0.roa (raw, json)
Hash identifier: inUVSf6ugFbmv6Sk1IwXOFBN8cJHoH7JIirciLPPC10=
Subject key identifier: B7:BC:1F:B1:BB:A6:0A:DC:C4:16:1B:4E:FF:3C:05:B1:53:0E:B1:2D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01932E49382CDD46CBE302BCDC3D3D3588D2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/t7wfsbumCtzEFhtO_zwFsVMOsS0.roa
Signing time: Fri 15 Nov 2024 05:26:10 +0000
ROA not before: Fri 15 Nov 2024 05:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196894
IP address blocks: 178.185.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:49:38:2c:dd:46:cb:e3:02:bc:dc:3d:3d:35:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 15 05:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7bc1fb1bba60adcc4161b4eff3c05b1530eb12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:46:ab:d4:51:64:bf:99:cd:b5:09:23:64:
c5:1f:b8:ac:f9:89:51:b4:9d:a4:5d:1a:0d:71:d4:
29:8e:86:c8:35:79:b5:b2:2d:55:9f:98:11:1f:c0:
80:77:f8:72:05:86:9e:09:af:ce:72:f5:49:97:84:
d9:46:36:ae:a4:4e:cf:c7:80:6c:58:46:27:73:bf:
f1:6a:4c:b4:32:dc:5e:22:bf:44:2b:b6:68:58:41:
60:8a:30:9f:98:66:1e:ef:35:29:f2:f6:cc:ef:b7:
6d:69:8e:15:1a:97:e5:f6:70:64:d3:c4:ad:83:58:
2e:8d:2d:e7:f2:a9:74:29:73:05:58:d5:05:53:f7:
7d:b1:17:0e:4f:ea:51:a3:7c:ec:af:46:b2:51:61:
05:93:fc:a7:5c:52:59:76:29:44:b0:ad:a0:02:8b:
e5:51:72:a3:d7:9a:1d:7b:5f:7c:f6:2a:a5:30:35:
f5:ba:26:2e:ca:a2:10:04:7a:8a:9a:1e:48:05:12:
cf:9a:14:5e:cc:17:61:3f:72:30:30:92:52:d4:3d:
80:49:21:a2:67:8c:82:00:1b:ee:bb:75:fa:27:ce:
98:89:fb:27:6d:f3:5b:2a:d4:86:52:5d:b6:a7:54:
3b:53:12:93:ee:14:c2:c8:4b:36:2b:1a:7c:3d:10:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:1F:B1:BB:A6:0A:DC:C4:16:1B:4E:FF:3C:05:B1:53:0E:B1:2D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/t7wfsbumCtzEFhtO_zwFsVMOsS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.185.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:98:b2:87:c4:59:74:ff:e8:16:ca:1a:bc:e6:2e:6d:4c:56:
26:84:33:64:d7:e1:e7:12:83:6d:ca:cd:8c:10:36:76:1e:4d:
8f:b4:23:fe:2c:f6:25:aa:72:fc:dd:3c:a1:9b:be:ec:90:b5:
74:9d:a1:b9:e0:e8:92:ce:00:d2:23:fd:1c:b0:62:3f:8b:22:
fe:52:b6:2b:b3:5c:79:c6:77:8d:56:5a:00:c5:36:63:92:03:
dd:f1:cf:21:f2:8e:12:31:59:b2:33:6e:3e:4c:e7:34:34:3e:
66:35:3f:e8:1e:b0:e5:28:38:53:25:d8:a0:0c:8d:6e:c1:7c:
cd:34:a7:2e:c8:c3:9e:9f:02:3f:0a:49:ac:1a:15:92:df:33:
93:04:6c:94:e5:be:d9:29:d2:2a:d2:a3:fe:3b:39:c4:f5:c7:
1c:eb:dd:1e:23:34:e3:43:f7:30:df:3e:22:62:d1:f1:ea:42:
eb:8c:62:10:a2:2f:fb:f0:e2:48:25:7f:8f:86:93:78:ad:57:
d3:ca:83:55:c7:71:9e:e2:b9:ba:96:95:e9:f2:62:79:79:db:
eb:e0:81:c6:cb:9a:7c:68:a8:88:49:69:59:fc:ca:5d:75:2a:
29:dd:7f:2f:05:4a:44:6a:07:34:04:4c:ce:c9:5e:8a:fa:29:
9c:b5:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org