Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa
File: 0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa (raw, json)
Hash identifier: B9yXrZhizgNnwE4CNyb2QK9LPSoKnZI9bBj47+Og7TY=
Subject key identifier: D2:75:1A:FA:1B:3E:93:B1:18:76:80:E1:80:A3:23:6F:4A:7F:74:24
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018EC87CD0911473EC50260FA5CABBA02187
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa
Signing time: Wed 10 Apr 2024 14:50:06 +0000
ROA not before: Wed 10 Apr 2024 14:50:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46475
IP address blocks: 77.37.64.0/23 maxlen: 23
77.37.64.0/24 maxlen: 24
77.37.65.0/24 maxlen: 24
93.127.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:7c:d0:91:14:73:ec:50:26:0f:a5:ca:bb:a0:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Apr 10 14:50:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2751afa1b3e93b1187680e180a3236f4a7f7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:2b:50:01:fe:cf:f9:59:99:c8:ee:0e:e2:
d1:5d:ec:53:42:76:c0:20:32:01:0b:e2:19:44:33:
90:e4:a8:80:c8:c3:4e:10:bf:59:3f:94:20:95:1c:
fb:4d:fa:ac:f3:41:d7:06:f8:f4:5d:82:25:de:cb:
96:59:71:8a:39:42:af:90:5f:9b:6e:0e:dc:8f:63:
a5:39:5f:b1:5c:f2:b0:a2:33:6f:78:c6:6d:0c:1c:
e6:1d:a0:fa:55:db:d3:1c:15:37:39:21:6a:74:b4:
39:4c:b4:20:44:24:0c:5e:21:a9:27:c8:06:13:da:
43:6a:a0:4b:4b:42:4d:42:b4:17:42:23:32:30:5d:
fd:49:a7:2a:91:58:9a:14:ca:8a:6a:2c:3f:6a:47:
c7:a2:d2:4e:a2:43:b6:89:0c:87:ee:89:44:85:f8:
15:d6:0a:1f:74:9e:e6:4b:bc:bf:44:6e:63:be:23:
d5:03:31:96:b5:47:59:50:a7:e6:a1:66:a7:1a:10:
0e:ea:23:3f:a9:1c:36:5f:82:a6:8b:06:a2:04:ac:
dd:ae:a0:d2:8b:2d:92:77:8c:4a:91:5a:68:4c:05:
46:9c:94:07:8e:1a:0a:82:d7:ee:1d:e7:81:72:7d:
d1:2a:6a:69:77:64:b9:b0:cd:52:f6:a7:3e:76:f9:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:1A:FA:1B:3E:93:B1:18:76:80:E1:80:A3:23:6F:4A:7F:74:24
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/0nUa-hs-k7EYdoDhgKMjb0p_dCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.64.0/23
93.127.222.0/23
Signature Algorithm: sha256WithRSAEncryption
18:60:a0:7d:31:43:9a:db:5b:fa:00:2a:8f:4a:0f:f4:c2:9e:
4d:6b:6e:f2:3a:5b:53:22:db:37:43:48:21:1c:b5:b2:44:4f:
2c:f8:c2:cb:3e:ef:06:9c:80:56:5d:f1:bc:64:43:17:62:b4:
ab:ab:d6:b5:5e:a1:d8:96:00:ff:5d:91:a6:6b:fb:09:83:75:
c9:e4:e6:11:7c:59:1c:6a:a2:11:7d:a1:a0:2d:2f:5b:c5:3c:
43:41:75:11:d9:7a:5d:78:e1:88:2c:54:5a:ae:75:98:10:ba:
2a:85:f4:20:39:43:5b:c4:ed:63:f1:fd:65:0e:a8:0b:da:94:
6e:b7:60:c3:0a:8c:c0:c6:af:b8:eb:7f:4f:da:97:e6:08:4c:
5b:0d:5d:ac:7e:90:41:2a:75:33:52:2d:d0:24:6f:4c:97:c6:
b7:77:d2:ad:65:1a:68:18:56:7c:24:70:fc:46:46:c7:a0:6c:
e5:92:25:86:3f:47:20:3e:40:25:db:44:c5:28:8f:86:c5:2a:
e3:f0:c5:5b:ae:05:31:af:e7:51:58:5b:90:1b:01:2e:86:42:
18:c6:f9:b5:c4:f9:49:d6:07:4f:7c:d3:bc:ba:3f:2c:b0:bb:
20:07:5f:55:2d:21:28:75:fb:8e:35:d2:39:6b:1d:51:ed:7c:
39:77:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:52:56 2024 by rpki-client on console-ams.rpki-client.org