Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Lk8AEBN3t1U_iiY6Ki60LnIxa2s.roa
File: Lk8AEBN3t1U_iiY6Ki60LnIxa2s.roa (raw, json)
Hash identifier: Fgr67xeEzqcJgTRKLrChaVl1nGKUq0h+LoeylDj9WnY=
Subject key identifier: 2E:4F:00:10:13:77:B7:55:3F:8A:26:3A:2A:2E:B4:2E:72:31:6B:6B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D67D7A2E9E6E2D0B7942CD1FEEFA0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Lk8AEBN3t1U_iiY6Ki60LnIxa2s.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203390
IP address blocks: 77.85.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:67:d7:a2:e9:e6:e2:d0:b7:94:2c:d1:fe:ef:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e4f00101377b7553f8a263a2a2eb42e72316b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:04:43:44:3a:2a:67:a2:a5:c2:1a:0f:7e:
f6:0b:1e:b9:43:3a:31:3b:bf:3f:96:cc:06:5e:9c:
c7:50:d6:ce:e8:cc:16:e2:b1:87:18:1d:06:f4:31:
db:46:5e:23:3e:1f:88:a9:c5:a8:c4:7b:03:42:7c:
92:37:8c:5b:41:4d:d2:82:35:df:62:67:c4:07:28:
a0:e7:f6:03:2c:4c:03:5d:04:22:aa:a4:a6:11:5a:
35:65:7d:f6:48:2a:4c:6e:1c:3d:79:af:3f:01:33:
c6:5c:f0:e0:ba:b1:bc:5a:39:ae:56:23:ac:e0:7c:
dc:46:44:8e:71:ab:66:ca:82:83:12:3f:30:b7:85:
de:93:bf:29:e0:76:05:8b:09:ba:04:e2:11:d8:d9:
fe:bd:21:cd:90:9c:e2:31:a0:ad:29:07:14:a1:55:
3b:d6:71:9b:f7:1a:fa:8f:66:99:30:80:80:c1:f5:
32:3d:61:9f:e3:62:d1:0f:30:ef:fc:53:3f:e7:f1:
40:b7:63:6e:97:16:e3:eb:1b:8a:52:87:ed:6f:8f:
d0:37:ac:75:9c:0a:53:24:01:b4:9a:03:f6:d5:f9:
7a:68:c5:b1:c3:65:6a:95:25:0c:63:05:4d:15:de:
7f:42:f6:fb:cc:65:53:29:cd:1a:0f:17:f2:1b:7a:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:00:10:13:77:B7:55:3F:8A:26:3A:2A:2E:B4:2E:72:31:6B:6B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Lk8AEBN3t1U_iiY6Ki60LnIxa2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:37:30:38:f5:f8:fe:ab:c9:94:9f:66:1b:78:ce:3c:8c:03:
c5:db:0f:e6:d5:11:b0:4d:a7:0d:91:3f:44:94:66:00:bc:2d:
0c:1a:30:8b:72:36:7b:52:0f:c1:d9:1a:a0:30:f0:24:a0:d1:
3b:15:df:48:9d:2b:4c:4c:43:f7:e3:b5:89:18:85:63:7b:e0:
ed:ff:0b:b3:2b:5c:85:b1:5c:63:bb:60:9c:38:2e:48:3e:be:
bb:ce:64:48:a4:bd:d0:ef:cd:a6:71:dc:d3:02:c0:b3:f7:7a:
8c:fc:0c:ba:6b:2b:37:73:db:8a:9f:24:5c:ac:3b:7e:5e:14:
92:42:a3:d5:4b:6d:d9:97:6f:1b:3b:b2:37:c4:d9:95:3a:0c:
27:ef:e7:d5:52:82:ef:46:62:99:cc:98:3c:c7:0b:a7:90:66:
15:5b:31:37:c2:3a:25:0c:d1:75:73:5f:11:05:9a:ee:c4:59:
73:e5:56:f9:75:50:ce:0d:4a:60:b0:31:27:e9:b8:59:0e:76:
a4:57:0d:40:f4:cb:72:fb:83:1f:13:fb:36:52:70:3d:b3:df:
95:45:2b:58:d5:d0:79:ae:9b:da:01:1f:43:6b:22:3b:65:5d:
ac:44:d8:2a:47:68:87:6f:ae:dc:ca:80:1a:ff:16:08:80:dc:
31:35:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org