Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/IOBd2POXbGnn5KU_U8FAlEDub08.roa
File: IOBd2POXbGnn5KU_U8FAlEDub08.roa (raw, json)
Hash identifier: ZGml1aGLYoTV7HuHDmrMJx1RrHXzZOljdZ3jBhcwWzo=
Subject key identifier: 20:E0:5D:D8:F3:97:6C:69:E7:E4:A5:3F:53:C1:40:94:40:EE:6F:4F
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018CC8016CB0C0C7BC03B0F97F3A34883CE3
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/IOBd2POXbGnn5KU_U8FAlEDub08.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57626
IP address blocks: 77.87.56.0/21 maxlen: 24
91.123.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6c:b0:c0:c7:bc:03:b0:f9:7f:3a:34:88:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20e05dd8f3976c69e7e4a53f53c1409440ee6f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:7f:f3:c1:03:a4:8b:ea:8e:ee:20:8c:3d:
89:82:68:a7:ec:c8:50:e4:ba:ef:e4:eb:b4:a2:ee:
12:d5:4a:fd:35:3f:57:64:cb:9d:e1:ea:c3:b4:d4:
e0:d6:7e:f3:d4:ca:61:d6:eb:eb:a1:47:a3:45:dd:
9b:80:9c:3e:02:b8:76:4e:9e:d7:c3:af:50:57:dc:
55:84:56:5f:a8:83:6d:f5:49:65:85:b1:2a:8a:65:
c8:c7:d4:6e:80:25:cf:8a:d4:a0:e5:aa:43:f6:1a:
a5:23:aa:d7:b5:6f:21:f9:6e:52:e3:ae:25:47:35:
38:1f:33:29:17:1d:e2:24:90:6a:02:83:af:6c:6f:
5a:a9:e0:ba:bc:8e:f4:cf:51:03:91:01:f6:06:bc:
8f:1f:6d:f5:e1:b6:21:ad:9e:cd:84:78:c9:d9:d7:
13:56:d3:c7:39:f1:9f:9a:f6:b1:36:00:73:50:e8:
ad:08:0e:14:cc:d8:bb:1c:e3:56:85:2a:17:3e:96:
c4:95:af:a8:6e:b5:2a:3e:be:ca:2f:70:3a:29:5c:
97:db:e3:35:72:67:f5:1c:a5:7f:33:16:dd:c1:67:
bb:82:56:7c:15:9b:b6:10:00:67:0c:d8:e2:8d:07:
79:df:53:92:1a:26:f2:2b:21:65:1e:c3:fc:d0:65:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:5D:D8:F3:97:6C:69:E7:E4:A5:3F:53:C1:40:94:40:EE:6F:4F
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/IOBd2POXbGnn5KU_U8FAlEDub08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.56.0/21
91.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
50:cf:ba:51:c6:8c:0c:66:01:ac:3e:d5:f2:8c:50:20:23:7d:
b4:42:7a:a3:fc:c8:84:62:14:53:c4:cf:3f:b7:55:58:c9:d1:
78:08:d8:ba:5f:5d:a4:2b:d3:24:23:c7:86:14:61:51:fa:b5:
ed:77:50:c0:84:c2:ed:fc:43:eb:84:a2:c9:45:2f:9b:db:64:
1b:d5:1f:ae:fe:99:15:90:a9:c7:3b:64:05:77:1f:d4:04:e2:
3a:79:7c:d3:db:bf:f4:92:c4:e8:fb:60:4d:60:0b:8b:b4:b9:
b1:06:79:6e:d6:73:11:6c:e6:2c:5e:be:b9:eb:d3:5f:6e:f9:
42:60:6c:66:c2:56:c5:66:7f:7f:fe:e3:04:06:04:08:66:02:
d4:a4:c8:d8:ec:97:ba:42:63:96:ff:6c:cc:de:28:d9:0e:ca:
67:15:30:e2:47:3b:b4:09:01:5a:53:0a:01:7c:17:c9:b0:63:
a6:27:99:3a:fa:6f:72:4a:d9:8b:2e:d3:d7:04:fa:f8:94:48:
be:d8:5f:84:f2:3d:00:be:ed:4b:d4:b8:b1:5a:ce:47:57:4e:
50:2c:68:0c:b1:bd:5e:d4:e8:42:08:57:17:c9:e0:11:ab:42:
a1:18:ee:d5:9b:36:6a:1b:80:04:21:05:3e:d6:8e:af:cd:7d:
08:77:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:19 2024 by rpki-client on console-ams.rpki-client.org