Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/57hLRygFsxtg7_097xo5DZC_KeE.roa
File: 57hLRygFsxtg7_097xo5DZC_KeE.roa (raw, json)
Hash identifier: Jq6PQlVPP00nEQGukkPyEbjRMqVcIIMQSf1z4y90Ilo=
Subject key identifier: E7:B8:4B:47:28:05:B3:1B:60:EF:FD:3D:EF:1A:39:0D:90:BF:29:E1
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 018CC2DB42773C5EA2664C54C153B02763D3
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/57hLRygFsxtg7_097xo5DZC_KeE.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61275
IP address blocks: 88.84.48.0/20 maxlen: 20
185.9.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:42:77:3c:5e:a2:66:4c:54:c1:53:b0:27:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7b84b472805b31b60effd3def1a390d90bf29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:84:06:4c:1e:cc:d7:48:14:f2:f6:ab:69:
4c:66:ed:eb:cb:a2:33:a3:4b:ff:28:21:5f:9e:1d:
37:c0:98:bc:e2:fe:bd:92:d5:81:d8:36:a2:3b:d4:
03:f0:67:95:d8:6d:d7:4c:b3:33:12:06:b3:92:4f:
a4:e1:a9:5e:71:ba:89:8b:94:29:50:f9:c7:9e:33:
5d:91:17:d1:89:19:2e:15:71:d3:16:db:de:06:f0:
45:6d:24:78:23:97:8d:20:d2:3c:e5:42:d8:b5:a1:
c4:ba:65:8c:55:f5:12:78:ac:c5:34:e2:ad:02:85:
12:ea:2a:f2:4f:52:0c:98:b8:3b:e9:2c:e5:2e:b9:
92:a4:55:a4:48:41:dc:99:56:79:b8:15:b1:c5:f0:
af:36:52:4e:55:29:f5:4a:20:2a:b0:62:ff:ab:54:
b3:31:1e:f1:f0:ff:d7:f4:9c:6b:3b:33:0e:1d:07:
f3:68:7c:68:c8:df:88:60:4a:3c:95:c8:c3:24:10:
41:bc:70:83:bd:f3:b4:f9:15:2e:35:e3:43:ac:9b:
46:28:86:bd:c2:11:cb:bf:0d:d5:c2:1d:76:05:bf:
d4:52:90:94:f5:0e:cc:b0:fd:21:69:44:b0:93:7b:
e7:5d:2f:b8:ee:22:4d:22:17:56:99:74:62:08:18:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:4B:47:28:05:B3:1B:60:EF:FD:3D:EF:1A:39:0D:90:BF:29:E1
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/57hLRygFsxtg7_097xo5DZC_KeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.48.0/20
185.9.90.0/23
Signature Algorithm: sha256WithRSAEncryption
af:f8:72:f1:fe:de:96:9d:4a:eb:d2:0d:78:38:a9:4f:90:04:
b9:75:0f:0d:e5:51:c1:e5:2f:23:e6:1f:99:5d:95:94:a4:19:
fa:b1:50:7c:85:c1:3b:93:06:ce:a2:ec:b5:a7:e3:53:5f:5b:
fd:09:41:ab:06:22:ca:e8:75:6e:bf:98:0c:f8:f8:6b:ec:ae:
9f:2c:57:ee:0b:b5:f5:ed:aa:c8:33:09:50:4c:f9:fa:e2:9e:
13:d8:59:ed:44:1b:1e:82:ed:1a:68:dc:5c:71:1d:5f:fc:c7:
1e:7e:8f:18:c4:75:75:b9:fc:b0:7c:28:97:b9:45:b8:d7:a5:
79:60:a8:4a:2f:af:6a:7d:6b:f6:7d:81:cf:fe:a9:89:22:b6:
46:73:cb:3f:9b:8e:bd:95:d0:f0:8e:01:8d:da:f4:53:d6:34:
0c:7a:d1:cd:7a:dc:4b:9d:45:84:c5:68:f6:b9:05:7e:58:4c:
cc:50:60:9a:02:0e:88:a3:04:49:f1:93:d5:65:8a:66:c0:e9:
8e:22:ac:42:ba:f7:d3:06:33:14:8d:5a:53:3f:fa:1a:ff:7b:
52:75:c3:61:d5:33:0c:cc:02:0e:0f:b0:66:c4:c9:a2:bb:2a:
15:8c:05:03:f3:69:33:6d:14:78:45:c1:c8:27:35:5f:b8:48:
1a:7a:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:43:46 2024 by rpki-client on console-ams.rpki-client.org