Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zxv27g2xQvDdvPUhorqOtKWu2w8.roa
File: zxv27g2xQvDdvPUhorqOtKWu2w8.roa (raw, json)
Hash identifier: dOiJdlyuY1Tsb2r1MVBCvwcY0vPEBD7zaen87++DEOg=
Subject key identifier: CF:1B:F6:EE:0D:B1:42:F0:DD:BC:F5:21:A2:BA:8E:B4:A5:AE:DB:0F
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018CC801360719A418848B4A9DC7183D4FF4
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zxv27g2xQvDdvPUhorqOtKWu2w8.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:36:07:19:a4:18:84:8b:4a:9d:c7:18:3d:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf1bf6ee0db142f0ddbcf521a2ba8eb4a5aedb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:74:ac:a1:26:55:1d:e6:49:9e:80:a2:ea:
b5:7b:65:25:d9:fc:dc:6c:0c:e1:32:8c:aa:8c:bc:
92:9b:2a:bd:15:5e:84:54:bb:0c:d9:66:9b:d5:e6:
9b:e9:47:5c:26:53:84:d6:8e:a4:e0:ef:de:18:9c:
52:ed:2a:72:9b:3e:11:24:df:c7:d8:48:09:e5:f9:
6e:ed:91:60:c4:03:c1:82:84:9e:a9:e3:3e:c1:05:
db:10:76:25:da:fd:73:62:c6:97:d8:50:e9:33:15:
43:60:79:b0:37:41:09:44:b6:37:a5:78:3e:40:4c:
dd:3f:7c:cd:c8:16:0f:82:6d:85:9b:a8:70:07:56:
fd:3c:c6:4f:fb:b8:1c:2b:bb:95:1b:af:42:01:f1:
e4:d5:08:52:49:27:09:1d:08:79:d8:03:84:2e:55:
39:a5:bc:15:47:6f:5c:62:c6:ad:72:6a:d7:d8:b0:
ec:fd:6e:44:6b:25:73:d5:3c:ac:e8:18:59:d7:e2:
9e:ac:d7:f5:90:3d:ff:db:8f:0e:4f:96:8d:d4:00:
e0:44:8a:48:08:53:7b:8d:fe:96:e2:19:e8:a7:ad:
0f:af:b9:09:f9:7c:12:ac:57:bc:ff:bb:43:21:05:
c6:b0:42:7b:a1:0a:87:2e:90:27:e0:08:3f:e5:07:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:F6:EE:0D:B1:42:F0:DD:BC:F5:21:A2:BA:8E:B4:A5:AE:DB:0F
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zxv27g2xQvDdvPUhorqOtKWu2w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8b:6e:e1:9b:50:82:b7:fc:03:8a:70:eb:f0:23:e0:38:cd:
7d:b2:c9:b9:3b:28:f8:46:f6:ea:fd:35:0e:a2:f4:3c:56:de:
a3:cb:d6:9f:d6:3c:cc:77:e7:8c:41:26:37:db:ec:3b:45:77:
c2:c9:f3:c3:bf:f5:32:09:0b:da:ac:d0:55:26:84:a8:7a:f7:
db:67:6f:5f:f5:eb:fa:fc:bd:f8:91:ff:ac:c2:02:f5:cc:3b:
d9:56:f4:20:c5:24:c0:4f:08:16:58:60:d9:5b:a4:e8:45:92:
ad:d6:96:c4:de:c6:40:98:b0:b1:3d:c9:b7:99:a3:af:a3:14:
36:04:d6:98:61:81:eb:11:d0:80:c2:a9:b9:36:b3:64:01:8a:
b9:be:8d:77:c8:e7:3a:ed:50:53:06:00:f2:13:c6:b2:24:69:
10:e1:63:c4:13:51:ae:59:80:43:58:c9:f6:3d:1d:0e:00:e6:
3f:79:b0:bb:10:82:82:8a:36:62:7a:f2:c6:cf:5e:7a:34:7c:
bd:eb:9b:44:7a:e8:d6:40:01:8d:27:88:34:ca:07:f0:11:9a:
f0:16:8a:73:2b:7b:fa:51:80:b5:8e:26:f9:11:b2:66:85:fe:
a0:c0:9d:4b:c7:2c:00:dc:0d:a1:78:9d:9e:4b:75:96:6c:e8:
3e:91:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:26:14 2024 by rpki-client on console-fra.rpki-client.org