Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SQf6Ws3vNinFG9WlHDkzJiwDmC8.roa
File: SQf6Ws3vNinFG9WlHDkzJiwDmC8.roa (raw, json)
Hash identifier: 4ST4lWhEy9Jb+b+1mhuEUFVyXRHBLfTB0LDSmKqY3QE=
Subject key identifier: 49:07:FA:5A:CD:EF:36:29:C5:1B:D5:A5:1C:39:33:26:2C:03:98:2F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79556252C6CA303C69E7875C1D6CF3C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SQf6Ws3vNinFG9WlHDkzJiwDmC8.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51102
IP address blocks: 77.81.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:56:25:2c:6c:a3:03:c6:9e:78:75:c1:d6:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4907fa5acdef3629c51bd5a51c3933262c03982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:56:13:f9:5d:17:d0:d2:d6:99:61:de:66:
32:47:da:48:73:70:55:4f:1e:f3:be:8d:e3:28:1a:
5e:94:db:5f:ab:43:9b:61:b4:58:3e:5d:ab:7b:33:
20:bd:47:ea:46:7d:81:84:a1:0f:26:96:98:28:de:
97:2c:ac:4e:47:8a:e7:15:29:22:ae:b0:e8:d9:9e:
64:60:9b:f4:ca:3b:f1:48:f3:40:96:76:10:8e:78:
06:14:ca:ca:27:4d:13:8a:a9:8b:de:ab:73:a4:aa:
c6:d9:d8:17:16:7e:a2:90:f9:3f:42:bc:82:aa:86:
90:1d:a8:40:89:71:0b:18:ad:08:9f:52:c5:87:4d:
eb:77:bd:aa:09:13:f6:d8:8b:b3:3c:ec:5a:8b:90:
f4:42:54:1e:c3:ac:c7:22:e1:a5:34:84:67:4e:42:
b8:0f:75:ea:cd:22:14:27:00:ad:0e:c5:7f:4b:d6:
4c:d7:49:91:f2:d1:fc:3c:95:94:47:9e:44:38:15:
4d:94:30:70:dc:f5:89:6d:0f:e5:fe:a5:75:a5:d3:
ea:2d:14:c4:8b:1c:26:c6:cf:80:fe:4f:23:39:98:
0f:8f:cc:f0:0f:d3:b9:25:5e:f6:7b:f4:1d:e6:4b:
17:5a:03:c4:bf:db:05:0e:c0:6c:83:4a:68:1b:ed:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:FA:5A:CD:EF:36:29:C5:1B:D5:A5:1C:39:33:26:2C:03:98:2F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SQf6Ws3vNinFG9WlHDkzJiwDmC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:61:16:9b:c6:33:be:16:da:4b:ad:be:c5:47:a2:0f:c5:c6:
0e:2b:65:9b:15:90:f6:8a:22:d3:27:a3:c5:8e:2b:32:eb:86:
7b:0a:d3:92:22:e8:cf:58:ac:36:d0:a6:38:30:43:d8:f2:dd:
be:0a:e2:3a:5c:f1:e2:07:26:25:a5:e4:8b:8b:bf:8d:31:9e:
7c:f1:27:00:7c:84:e9:a0:b3:4a:87:af:47:be:cd:f4:b6:d6:
41:6c:60:cf:23:16:4f:92:55:d3:23:6b:14:f1:78:b3:ef:da:
5b:58:8f:27:d0:dd:d2:d9:d5:a2:a7:07:11:89:aa:19:0c:5a:
9d:ad:2d:0d:f4:b2:ee:65:21:6f:fc:1f:e5:25:91:4d:41:73:
59:75:a8:56:04:01:12:ed:fa:15:63:c6:7e:63:72:46:cc:7c:
13:cc:5b:0a:a8:82:f6:1f:54:74:e9:d2:ec:50:a3:1c:a6:65:
3c:76:a1:4c:7c:8c:65:9a:88:4f:0d:87:73:b0:b8:e7:0f:bf:
72:30:22:e1:58:bb:5d:eb:f1:3a:48:a4:84:6b:52:90:e1:e3:
3d:39:7d:ef:35:b6:ea:e4:61:78:24:1d:fa:40:aa:a5:4c:01:
c3:a4:b7:d4:aa:f5:1e:3b:25:75:42:c8:25:f9:6f:66:7a:c4:
e1:4d:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:22:20 2024 by rpki-client on console-fra.rpki-client.org