Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/Spr7XYr4Eg0E5NoymTlFVbuRPc8.roa
File: Spr7XYr4Eg0E5NoymTlFVbuRPc8.roa (raw, json)
Hash identifier: +iKawylRL616JcFjbydkive5RVbnS0dDkv/FtKlbFpU=
Subject key identifier: 4A:9A:FB:5D:8A:F8:12:0D:04:E4:DA:32:99:39:45:55:BB:91:3D:CF
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 018CC64B707B0C80851017A501EF5377F61B
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/Spr7XYr4Eg0E5NoymTlFVbuRPc8.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51898
IP address blocks: 77.220.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:70:7b:0c:80:85:10:17:a5:01:ef:53:77:f6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a9afb5d8af8120d04e4da3299394555bb913dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:92:33:2a:77:2e:a3:6a:23:ba:83:ca:fa:
7f:9d:66:71:ab:d2:2a:7f:97:60:7b:54:ed:83:04:
43:58:d7:e8:5d:c2:81:42:30:82:95:0e:91:58:6b:
16:cd:66:2b:0f:28:73:fa:d8:37:33:21:f3:ec:ce:
ee:6b:74:06:c5:ee:51:3b:67:09:02:cb:06:19:ac:
bb:28:70:63:35:02:87:75:e9:4b:d4:bd:7a:2d:aa:
c4:02:50:95:b3:ed:9d:9f:32:a3:d7:98:75:71:fa:
b2:eb:3d:c9:27:27:8b:c5:dc:b9:70:9a:12:de:2b:
ec:39:84:5f:ba:55:0c:bf:7c:46:78:da:f7:84:eb:
e0:df:98:70:ac:bc:6a:23:b4:c0:27:e5:71:93:73:
07:4e:89:96:be:4d:84:26:11:83:ff:75:77:48:4d:
72:ba:17:8f:75:88:9a:76:08:74:c3:88:9f:91:95:
dd:d9:64:0b:9f:6a:ef:f5:fe:af:ff:01:56:4b:b0:
39:c3:23:b3:48:7d:6c:f9:2d:dd:66:60:0d:fb:00:
2d:65:3b:cb:5b:3c:f5:f2:1d:3e:f1:ac:09:64:7f:
a4:c2:26:6a:8f:9b:d2:77:92:7e:da:cd:ae:fb:fc:
90:76:b9:08:0f:c5:26:a4:66:4e:27:b7:60:39:17:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:FB:5D:8A:F8:12:0D:04:E4:DA:32:99:39:45:55:BB:91:3D:CF
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/Spr7XYr4Eg0E5NoymTlFVbuRPc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5c:2d:5f:5a:d8:af:af:3b:79:5b:9c:45:62:41:70:30:b4:
84:94:e1:de:0b:20:27:88:ee:7d:42:1d:98:5f:e9:b7:49:04:
5a:91:2a:26:dd:7a:2e:e8:cb:95:5d:00:dd:30:13:67:65:87:
cb:5a:7e:8f:0a:44:ab:19:88:76:72:b0:c9:dd:3c:2a:a9:8a:
22:d4:36:a2:c2:23:e8:a9:61:0a:f6:48:c5:f4:7f:1c:5f:25:
58:0a:20:7e:68:ba:de:3d:e0:82:0a:3d:e1:2a:80:36:d5:21:
e3:62:0b:3f:f4:8b:12:0f:72:d1:a1:bf:6a:ac:b4:b3:e3:9a:
20:b2:af:f5:77:25:cb:71:42:39:50:ce:13:b8:86:f9:04:b7:
ce:38:b8:a0:ed:f1:52:b7:1e:8c:f4:b9:03:1d:fc:e6:d7:a3:
e3:38:14:e1:1b:d2:75:71:34:c9:aa:90:99:dd:40:15:89:bb:
6d:43:bb:31:6c:4a:38:60:33:3d:10:1e:0a:e0:d8:f5:ca:90:
cb:96:17:96:95:a1:ac:d6:5b:74:25:6b:f5:8f:0c:72:72:19:
a1:5d:38:f6:23:15:22:12:ef:de:64:b0:f0:5c:20:30:dd:37:
b0:76:c2:b9:6c:0a:5e:d5:db:67:e8:f9:18:98:4e:fe:12:a8:
b7:ea:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:15:58 2024 by rpki-client on console-fra.rpki-client.org