Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R6bq1sKcawF1QZ4j4zJ1T_zK9nY.roa
File: R6bq1sKcawF1QZ4j4zJ1T_zK9nY.roa (raw, json)
Hash identifier: IXwsaC9Lo4c1It/mu9SXi4rL+71csP7L3sU5eu0yvqw=
Subject key identifier: 47:A6:EA:D6:C2:9C:6B:01:75:41:9E:23:E3:32:75:4F:FC:CA:F6:76
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9BC3B3E0EFC67E563BDC1592923D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R6bq1sKcawF1QZ4j4zJ1T_zK9nY.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210379
IP address blocks: 77.65.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:9b:c3:b3:e0:ef:c6:7e:56:3b:dc:15:92:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a6ead6c29c6b0175419e23e332754ffccaf676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:a9:4c:6a:42:3a:24:25:3e:c4:64:10:e4:
39:af:21:53:14:1c:2a:65:f9:19:14:dc:84:37:6e:
88:ee:ac:9c:74:e8:35:7d:39:2a:c3:34:e4:7b:b2:
fa:85:34:7f:65:f4:ae:75:c0:98:39:03:66:d1:64:
2b:ba:a4:b0:ec:34:08:1f:7c:e5:03:f6:b4:e0:f4:
73:07:ba:9a:11:88:78:62:30:b7:b0:24:19:7c:f0:
d5:d0:97:34:8b:7d:06:37:35:28:91:e3:c2:ec:c5:
c7:ff:02:75:83:bd:3c:73:51:7d:b1:95:14:e3:e5:
48:89:34:96:8a:da:18:0b:6e:18:6a:78:79:eb:a8:
60:33:d2:a4:be:fe:e1:69:7c:a0:eb:ae:7a:f9:3b:
40:48:2b:85:94:3c:4e:4e:7b:3b:4f:31:15:20:16:
86:2d:5b:2b:b4:45:68:8d:08:85:41:2d:e0:c8:9f:
4b:2a:d0:8a:1e:24:17:1f:ef:82:d7:47:26:ff:5d:
90:eb:ee:18:79:1b:f7:fc:77:be:9a:dd:48:b4:a6:
06:ae:74:78:36:e1:96:c3:d5:2a:a5:67:97:48:1a:
ce:36:00:3b:6a:e3:98:bc:4a:d7:7d:3f:73:78:6d:
bb:ed:f8:82:f9:80:06:27:2a:44:65:01:69:cf:5c:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:EA:D6:C2:9C:6B:01:75:41:9E:23:E3:32:75:4F:FC:CA:F6:76
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R6bq1sKcawF1QZ4j4zJ1T_zK9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3e:45:bb:1c:f4:cc:90:27:a8:9f:03:c6:ec:c2:77:60:ae:
44:7b:91:96:94:1b:8f:2e:0c:cf:a2:a7:f7:5a:71:d2:fd:fa:
95:c4:eb:8b:d0:38:23:1c:36:5b:aa:c2:e1:e2:94:bc:c7:9a:
29:00:a3:75:60:f7:58:92:f0:2f:d9:81:47:39:9c:ae:08:62:
ca:c3:88:b5:0a:ec:1e:fc:af:a7:fd:9f:7f:cc:13:cb:ce:6c:
a7:1c:90:75:b2:57:8e:97:bc:19:61:ae:c9:b3:7a:62:f6:fc:
67:b9:75:bb:fc:51:e3:05:61:97:bd:00:4a:0e:95:f6:51:56:
ef:68:ac:f8:a3:9a:d8:61:57:54:8e:f8:eb:7d:6d:3a:d4:cd:
98:ec:12:13:08:64:d1:e4:b3:f0:10:94:a2:e9:40:e7:3e:b3:
fb:bf:91:a4:99:25:8d:a9:c4:29:aa:ad:12:b4:8c:5a:ba:d5:
b1:ce:bd:81:38:ae:81:87:19:8c:e3:5c:aa:89:f2:e7:28:03:
db:62:27:91:24:ed:2d:e3:5c:8d:7f:a4:5b:6b:3e:50:2a:3a:
8d:64:82:51:3e:05:a5:aa:ae:36:ff:85:5f:10:15:d7:95:14:
e7:ac:a0:4f:65:18:b6:0d:7a:25:22:de:a5:e6:0e:63:2f:03:
b3:d6:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org