Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/n3Kwy7xKBsaOLeVP_5QOKZDU-fc.roa
File: n3Kwy7xKBsaOLeVP_5QOKZDU-fc.roa (raw, json)
Hash identifier: Dr8eTADF/f3eb8EAmHnvtm5WJQxOkaOJU1+TMV73qD0=
Subject key identifier: 9F:72:B0:CB:BC:4A:06:C6:8E:2D:E5:4F:FF:94:0E:29:90:D4:F9:F7
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 018CC9BC2F2B7E1B42D7B51403AEDFCCDB69
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/n3Kwy7xKBsaOLeVP_5QOKZDU-fc.roa
Signing time: Tue 02 Jan 2024 10:33:22 +0000
ROA not before: Tue 02 Jan 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 77.223.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2f:2b:7e:1b:42:d7:b5:14:03:ae:df:cc:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f72b0cbbc4a06c68e2de54fff940e2990d4f9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:a3:11:2b:66:5d:0f:36:dd:c3:c7:42:80:
d1:ae:2a:a1:db:a3:7d:07:f7:62:15:bb:56:3d:2f:
87:99:81:e3:17:55:6e:85:5f:0d:3c:fb:4b:7c:06:
5c:08:dd:d5:48:cb:9e:4e:83:12:31:33:82:d8:b1:
ff:fc:2c:b0:fd:d9:8f:f0:ba:d9:de:d1:0a:a1:1a:
11:cf:47:bd:bf:17:d8:80:5b:dc:5f:f9:4c:e9:4a:
9d:44:5e:1a:52:df:44:65:39:b8:ac:c5:c5:2b:72:
91:91:c5:8a:03:f8:c7:9c:ca:5b:f8:75:9c:9b:dc:
ae:25:de:e2:f3:a3:52:05:d8:af:cb:d8:89:ef:43:
17:bb:49:ae:df:81:c2:3a:4e:77:fc:15:94:4f:30:
82:35:51:12:07:94:6b:99:6f:23:9e:b9:6d:25:8d:
5a:e8:56:16:15:68:60:0b:0b:98:b4:78:82:34:16:
ee:a3:65:cf:c9:97:4e:75:5f:db:08:06:48:c0:93:
76:cd:0a:c7:a8:e4:c8:4d:60:32:24:d6:db:ce:9d:
ec:13:fa:06:3d:26:90:18:af:15:df:98:00:b4:28:
c5:87:ab:22:77:22:b1:c4:7a:a9:21:08:57:45:22:
0d:b2:f5:d0:66:74:52:ab:5f:60:e6:85:75:e1:e9:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:B0:CB:BC:4A:06:C6:8E:2D:E5:4F:FF:94:0E:29:90:D4:F9:F7
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/n3Kwy7xKBsaOLeVP_5QOKZDU-fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.144.0/23
Signature Algorithm: sha256WithRSAEncryption
57:39:3f:ad:5e:8d:a6:6d:10:4c:22:4f:4f:86:37:49:e2:dc:
86:c8:a5:23:a6:a7:d5:c9:ff:30:80:b0:17:74:80:58:02:72:
c8:ea:ed:c7:2a:d6:42:55:ff:b2:df:fc:4b:9b:37:e3:93:be:
f1:15:e4:86:af:79:1a:f0:20:25:61:a2:c0:6a:ab:9c:da:90:
13:23:e3:5e:e2:6a:33:0e:32:e6:e5:67:d9:a0:e7:ad:8b:7e:
fe:97:c1:54:4e:34:a1:79:44:63:57:6a:9b:bc:7d:b3:5c:dc:
5e:c5:b9:fd:5c:95:85:4a:59:34:46:cc:72:0e:43:16:2f:05:
62:93:c8:87:a2:68:ef:84:b0:82:e3:f1:67:66:63:34:a5:04:
fe:45:a9:54:cf:15:95:7c:44:b5:65:cb:7d:17:40:72:e5:5a:
7d:db:80:cb:14:0b:9f:48:e0:32:16:1a:9f:85:85:80:48:57:
26:e7:4e:35:df:15:5e:ab:da:7f:fd:06:40:3a:23:f4:1a:73:
c2:7d:a5:ac:d6:a2:df:d3:7f:4d:df:be:47:6d:1a:73:8f:15:
6f:94:94:4c:84:88:62:5c:96:ac:dc:a7:ca:e9:3c:75:64:45:
5d:5b:7f:5b:7c:44:3d:fb:e1:31:f5:41:02:36:a4:38:ed:85:
d6:5e:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:23:23 2024 by rpki-client on console-ams.rpki-client.org