Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sANY63UAA9cF8BZIJupMl0mEk5w.roa
File: sANY63UAA9cF8BZIJupMl0mEk5w.roa (raw, json)
Hash identifier: YwtVCDPxIXihJpjQP/tRC3pBTcXtA31VLK3VfuXMU/A=
Subject key identifier: B0:03:58:EB:75:00:03:D7:05:F0:16:48:26:EA:4C:97:49:84:93:9C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018ED2FBE33E6FA1CEB616496A50E164EE82
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sANY63UAA9cF8BZIJupMl0mEk5w.roa
Signing time: Fri 12 Apr 2024 15:45:06 +0000
ROA not before: Fri 12 Apr 2024 15:45:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 77.246.211.0/24 maxlen: 24
77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:fb:e3:3e:6f:a1:ce:b6:16:49:6a:50:e1:64:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 12 15:45:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b00358eb750003d705f0164826ea4c974984939c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:77:ed:e9:c3:38:2a:49:7d:7a:6b:44:3d:
9b:5b:0d:35:41:84:f7:48:cb:f9:88:a4:5a:ed:2c:
36:38:79:d9:03:ec:9a:0a:7a:80:d4:54:2f:d7:cb:
3f:01:73:96:39:1e:e4:2e:0f:b5:e5:4c:d5:26:3d:
d6:e2:72:7f:45:9c:55:f2:d5:4f:b1:39:d2:18:58:
63:78:26:6a:74:0b:25:ae:85:b2:82:d9:61:33:f0:
9e:13:c0:a5:eb:69:bd:2c:bd:50:0b:35:d1:9c:1c:
16:bd:ce:5e:42:db:1e:0d:ba:f6:b1:da:54:04:35:
fa:5d:0a:c3:ea:60:ef:d9:9d:52:a0:5a:4b:e6:b5:
03:28:b1:44:fc:f8:23:4e:4d:eb:fe:80:56:f0:c1:
ae:a5:8c:34:7b:e6:95:08:19:55:a6:45:7e:d9:ef:
5b:98:09:58:6e:00:e5:71:d2:76:84:6c:4e:29:e8:
2a:9f:ae:8c:90:e5:88:bf:f2:12:0f:b4:7a:2b:0f:
98:60:37:c9:59:04:f1:50:19:3c:37:52:d7:5c:c6:
9f:5d:77:ab:eb:a4:26:72:dd:ee:09:e4:0e:cc:09:
39:73:dd:46:df:ad:17:2b:26:f2:53:65:84:2d:1f:
8c:54:5c:71:d6:8f:22:84:ab:46:06:8c:f5:37:1b:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:58:EB:75:00:03:D7:05:F0:16:48:26:EA:4C:97:49:84:93:9C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/sANY63UAA9cF8BZIJupMl0mEk5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f5:c6:37:55:19:38:54:c1:00:32:d6:7d:4b:95:ae:3f:93:
1c:e5:5f:71:ad:4f:10:ff:24:64:15:e7:c1:a4:aa:bd:f9:15:
95:66:28:7b:4f:fe:d4:d3:63:9e:8f:26:a5:35:46:69:12:f9:
e7:98:57:9d:1a:47:e6:8f:18:73:54:c8:11:98:4c:fc:dd:e3:
e2:14:d4:2f:0b:b3:65:10:20:bf:3f:7c:02:3d:13:ea:17:48:
46:b9:b2:43:85:98:61:91:06:80:31:8f:6f:b2:81:1a:a8:35:
ba:18:94:6e:53:3a:4b:0c:cd:74:41:0b:5f:30:95:56:e9:08:
a7:f2:b6:93:aa:98:a3:06:e9:3b:2f:e4:f1:44:d4:d7:bc:30:
ad:c1:4b:ea:2e:5a:7d:fd:c3:3c:56:8e:d6:d1:d0:e2:41:ba:
10:71:78:fa:10:dd:4c:4f:15:a0:d5:16:2a:8d:25:31:da:f4:
13:1f:e0:8a:69:93:54:56:a9:6f:5c:07:d0:b6:15:7a:fe:91:
6b:26:eb:41:c0:0f:c8:5a:ae:8f:e8:46:90:62:3b:e6:3c:c7:
05:7b:48:8e:66:bc:85:ba:50:26:33:81:18:20:75:2d:02:55:
6e:6d:67:0d:05:f9:34:a7:52:e5:49:52:7d:dd:2e:d5:a9:df:
d4:0e:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:31:53 2024 by rpki-client on console-fra.rpki-client.org