Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/D99EYUvNE2Hx77WF9rLDEE77JBQ.roa
File: D99EYUvNE2Hx77WF9rLDEE77JBQ.roa (raw, json)
Hash identifier: pmu6DsdJNAUlYRzgCcRbWYOY9GaPcvSLNrMp/kPNEmg=
Subject key identifier: 0F:DF:44:61:4B:CD:13:61:F1:EF:B5:85:F6:B2:C3:10:4E:FB:24:14
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 018ECD9F83DCE06BF51E313469C905C664D2
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/D99EYUvNE2Hx77WF9rLDEE77JBQ.roa
Signing time: Thu 11 Apr 2024 14:46:06 +0000
ROA not before: Thu 11 Apr 2024 14:46:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50872
IP address blocks: 79.110.144.0/20 maxlen: 24
176.123.208.0/21 maxlen: 24
193.243.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:9f:83:dc:e0:6b:f5:1e:31:34:69:c9:05:c6:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Apr 11 14:46:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fdf44614bcd1361f1efb585f6b2c3104efb2414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:f2:f6:00:8d:13:d0:4a:ad:4a:44:b2:11:
89:67:72:75:e8:c9:e7:e8:17:0a:49:ef:77:63:be:
c6:13:5b:3e:87:ba:59:16:26:62:e8:4b:47:06:ec:
9e:dc:32:17:f7:cb:4e:37:43:51:92:17:9b:44:40:
a5:58:96:5d:0a:2f:3e:fc:0b:41:da:57:89:0d:48:
0d:dd:3a:92:8a:5f:bd:87:10:1f:ee:be:da:ee:71:
ef:5c:bf:88:0f:67:b1:03:3e:76:f4:ec:68:30:95:
26:98:f6:37:05:5d:f8:03:9d:b5:51:61:76:09:f2:
af:d5:0c:cc:73:5f:bd:21:0e:51:66:2f:71:2e:a2:
ac:80:1e:79:45:6c:fe:3b:9d:c2:6d:4a:15:18:40:
50:b9:42:56:72:49:7d:49:89:7d:24:d3:32:f7:94:
aa:42:44:20:ad:a5:ca:d1:18:c5:4f:3d:59:74:74:
8e:a2:0a:6e:58:b3:4d:f6:b7:27:d4:ea:ed:52:24:
bb:9f:14:82:2a:50:ce:c2:63:c7:66:78:3b:4e:12:
67:44:95:84:8a:95:e3:71:e4:80:2e:27:ac:67:87:
33:d9:0f:5d:b6:8c:79:11:f9:55:76:e7:a4:e1:e2:
5b:b5:20:9f:15:cf:6e:6e:fc:62:52:2b:2a:ca:45:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:44:61:4B:CD:13:61:F1:EF:B5:85:F6:B2:C3:10:4E:FB:24:14
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/D99EYUvNE2Hx77WF9rLDEE77JBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.144.0/20
176.123.208.0/21
193.243.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c1:ec:b5:e0:c6:53:65:a3:a6:de:f6:69:10:a4:c1:59:d5:
26:2b:2a:f6:8a:af:e0:d8:88:b9:83:55:e9:1c:af:55:d5:b9:
b9:0f:cc:e5:40:b6:50:e3:a1:21:57:60:64:45:28:7f:35:bd:
09:cc:55:93:af:47:5d:54:e9:99:09:c1:fc:3a:85:7e:2e:52:
01:be:9f:15:fd:42:0a:7a:c2:40:7c:27:0f:ed:2d:a9:48:a4:
70:30:54:69:ec:00:ec:c6:b2:88:a4:9d:90:e5:6b:11:dc:79:
ea:d2:71:ad:93:af:b3:93:0f:54:b6:95:79:3a:16:de:3c:25:
2a:fc:fb:cb:1e:08:44:4b:5f:0b:fc:5e:c9:ed:07:78:4c:b4:
ac:9e:9e:d6:37:b2:47:cc:8e:93:0a:b5:cc:9c:a4:97:d5:de:
8d:0a:96:96:85:42:03:d7:c7:e5:b7:2a:f9:af:bd:c4:58:c9:
55:5e:08:c7:df:b4:70:80:a9:3f:30:4a:e6:74:f0:12:3d:f2:
bd:d3:61:68:b3:d8:c0:87:1c:67:40:f9:aa:4a:e6:2f:4a:4b:
7d:9c:15:6b:f2:12:f7:b3:38:a9:4d:0d:11:32:1f:6f:b1:50:
3d:d1:fc:00:a8:97:0d:a1:90:06:2c:37:43:c0:ec:5d:68:e1:
b0:89:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:12 2024 by rpki-client on console-fra.rpki-client.org