Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vEfQM1ii_peUCkJzGJE7yH9aBI.roa
File: 4vEfQM1ii_peUCkJzGJE7yH9aBI.roa (raw, json)
Hash identifier: tFw4HS5/qxM1jMyf+G3GvB4eBOO5hcIPOszaxMaafzs=
Subject key identifier: E2:F1:1F:40:CD:62:8B:FA:5E:50:29:09:CC:62:44:EF:21:FD:68:12
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B95D61357645863552AA0A8681835
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vEfQM1ii_peUCkJzGJE7yH9aBI.roa
Signing time: Mon 01 Jan 2024 18:31:31 +0000
ROA not before: Mon 01 Jan 2024 18:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205708
IP address blocks: 193.192.161.0/24 maxlen: 24
193.192.162.0/24 maxlen: 24
193.192.160.0/24 maxlen: 24
193.192.163.0/24 maxlen: 24
77.65.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:95:d6:13:57:64:58:63:55:2a:a0:a8:68:18:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2f11f40cd628bfa5e502909cc6244ef21fd6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:a6:c4:6f:26:fd:8a:f9:3a:fa:d6:2a:70:
43:ae:b8:57:29:39:d6:ea:35:28:23:f8:31:a8:06:
14:d0:68:b9:62:ea:79:8c:ac:06:96:ba:8b:19:ce:
e6:9b:4b:1b:59:3e:8f:e5:39:fc:4d:92:52:cb:f4:
4d:fc:60:6e:b9:2c:bc:be:3b:9a:74:ac:3f:18:f0:
5a:fe:af:58:8d:e8:98:67:15:a0:6b:f2:c5:6d:89:
53:cc:3b:68:15:9e:07:2c:04:0f:47:11:84:56:56:
64:2b:ac:fb:17:0d:3a:ef:d8:b3:ab:5c:83:9d:1b:
3d:86:5d:91:43:26:4c:11:51:7d:59:cb:a1:0c:5c:
cd:35:81:12:c4:48:17:d3:27:03:a7:ed:39:e0:de:
d7:4f:c0:91:50:a8:aa:a3:af:83:5c:c1:66:79:3e:
3b:56:51:1a:a1:b4:0a:9b:fe:6f:e8:6d:59:82:c4:
e8:a8:6e:27:4e:53:b6:38:7a:7f:5b:4a:2e:3f:b4:
5e:76:d8:c9:1e:eb:1a:be:3b:1c:be:28:9b:40:e7:
6c:df:ed:bb:7d:72:e2:bd:3d:09:94:17:72:92:1c:
8b:6d:e6:9e:1f:26:dc:55:2c:5c:05:fb:6f:04:ce:
df:ed:28:06:b5:f1:8f:76:93:0b:4b:b0:9c:9d:67:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:1F:40:CD:62:8B:FA:5E:50:29:09:CC:62:44:EF:21:FD:68:12
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4vEfQM1ii_peUCkJzGJE7yH9aBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.141.0/24
193.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:12:30:c8:f2:7c:fc:40:7b:f5:04:d6:aa:f4:ee:bc:4c:df:
d3:99:e1:b6:c5:54:7d:62:8b:c8:8d:c7:90:a7:bf:d2:a9:df:
a9:4a:1e:d8:32:25:24:a1:96:bc:a0:fd:fa:c8:fb:2b:96:b0:
ae:bd:c2:a6:33:af:b6:6f:a6:d3:be:26:f9:14:58:b3:8e:74:
52:1f:f4:98:da:40:de:d4:72:7d:cc:c0:f1:da:ba:c4:ba:50:
d2:52:e1:a2:c3:e8:0e:d1:5c:fe:2a:22:3b:8f:29:3b:d7:2e:
77:f4:e2:8e:e1:85:02:43:93:51:de:7a:58:90:c4:7d:56:cd:
d6:9d:da:4b:04:03:08:80:9a:e5:32:a7:94:43:f9:da:8d:16:
99:e6:62:21:5e:0a:32:c2:b1:9a:ce:71:f0:9f:7e:ea:15:d1:
52:d2:19:3d:55:7a:5a:ca:35:9c:f5:5a:cb:4f:dc:ce:21:51:
08:c3:fe:22:2b:bb:93:72:1e:d4:6b:a1:1b:2d:41:fd:85:52:
2f:42:05:9d:eb:0a:d0:a3:57:5b:3c:31:a6:3c:6d:54:4d:ca:
48:02:38:aa:03:52:83:bf:62:c0:93:ee:92:54:4f:68:74:41:
f9:61:db:95:2b:47:30:a7:ae:55:f5:4a:52:81:3a:f8:45:b8:
ff:af:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org