Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yNyWfnrvHkIm6RDEnKc2YpSXXkE.roa
File: yNyWfnrvHkIm6RDEnKc2YpSXXkE.roa (raw, json)
Hash identifier: gg/UliN8p1TSjtCVvnyTaRjR92/n828w33VVNO2nlKs=
Subject key identifier: C8:DC:96:7E:7A:EF:1E:42:26:E9:10:C4:9C:A7:36:62:94:97:5E:41
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7943E80D3B071715D32718D39FC686A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yNyWfnrvHkIm6RDEnKc2YpSXXkE.roa
Signing time: Tue 02 Jan 2024 00:30:30 +0000
ROA not before: Tue 02 Jan 2024 00:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8001
IP address blocks: 77.67.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3e:80:d3:b0:71:71:5d:32:71:8d:39:fc:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8dc967e7aef1e4226e910c49ca7366294975e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:74:33:0a:3f:c8:82:f2:cb:cb:8a:c2:3f:
39:37:a8:8f:1b:62:48:82:cc:c2:37:74:02:06:ad:
11:96:be:c7:f4:46:9a:06:21:74:80:06:de:fc:83:
69:fb:da:28:1f:dc:8d:92:39:a6:55:9f:b3:52:fc:
e8:fc:39:62:43:7c:a4:6d:44:e0:aa:19:c8:28:6b:
56:27:41:65:31:d7:0d:24:16:d2:fe:05:5b:a9:68:
34:6d:5a:e8:5f:22:38:f9:46:e6:d3:0f:71:e9:5f:
8b:a8:3e:11:15:b2:7a:b7:81:3d:4b:6b:d5:57:58:
2b:fa:18:7c:b2:63:3f:3b:0e:ea:46:1c:54:85:66:
25:61:aa:81:68:ea:8b:fe:7b:41:24:04:fe:d2:9f:
a8:51:f3:c5:b4:0f:ca:b2:02:71:36:b5:32:dd:0e:
8c:cf:3f:58:9d:f7:3c:01:15:44:73:b4:63:3f:af:
e2:64:37:9e:59:f6:be:cf:f0:44:74:15:91:9a:54:
a0:4e:29:6d:d5:4d:7e:9e:d7:eb:54:10:e3:f9:e4:
75:08:b3:cb:36:d2:b6:a0:16:5d:64:0e:26:da:d3:
ad:69:f2:da:f8:1c:77:4b:fb:85:33:26:6d:c8:d5:
0a:36:0b:f5:85:d8:4c:e5:b6:19:63:bc:17:d8:9f:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:96:7E:7A:EF:1E:42:26:E9:10:C4:9C:A7:36:62:94:97:5E:41
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yNyWfnrvHkIm6RDEnKc2YpSXXkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.101.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8f:11:d5:e4:9d:4b:95:3b:5f:8e:60:4e:88:0a:f8:fb:c5:
ae:7b:d4:25:5f:4b:60:52:ef:79:a0:fc:f5:d1:91:57:1f:bf:
f9:40:79:c1:d8:f0:56:cc:8c:8b:04:a0:9e:38:c9:0d:54:ba:
d2:8b:e3:9b:ed:08:20:b9:40:bd:28:82:95:a1:21:d5:68:46:
05:26:af:8c:ad:50:da:60:77:4c:92:08:ed:83:f1:f6:9a:4a:
d9:87:86:c1:d6:c5:9b:52:aa:f0:a8:ac:50:ac:87:e7:be:c1:
e9:31:25:75:dd:6e:d7:93:27:09:55:26:c8:e8:3c:b1:96:7c:
00:8a:3b:07:9b:93:22:8d:a2:30:2e:a3:bf:72:fd:a9:07:d5:
c4:d4:e8:0f:49:f0:19:19:9d:49:5d:48:9b:64:82:68:94:d9:
6c:76:29:d9:5e:04:26:a2:36:63:c3:47:41:8d:7b:c8:61:18:
10:29:38:e1:f4:26:58:ef:5b:52:66:28:b4:f2:a4:04:b4:bc:
c6:9f:86:11:54:2d:24:94:c5:44:05:69:4c:a1:8f:e3:f5:c3:
16:b6:8e:00:3e:c4:77:3b:1a:af:db:fd:de:26:a1:f8:26:aa:
72:70:ce:10:c0:ed:03:ec:1f:47:d2:c5:f0:e7:ed:0c:88:7a:
b0:cd:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:14 2024 by rpki-client on console-fra.rpki-client.org