Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/z1CF88vOea4pXQCU-tYyz3wwFjE.roa
File: z1CF88vOea4pXQCU-tYyz3wwFjE.roa (raw, json)
Hash identifier: PFNEpb4HAbeDq3GFImOIIQsCsgLzv8lXKcsyZnAEB/k=
Subject key identifier: CF:50:85:F3:CB:CE:79:AE:29:5D:00:94:FA:D6:32:CF:7C:30:16:31
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 018CC5DCE647322A0F168DD9C0CC6E601CAA
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/z1CF88vOea4pXQCU-tYyz3wwFjE.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 77.223.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e6:47:32:2a:0f:16:8d:d9:c0:cc:6e:60:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf5085f3cbce79ae295d0094fad632cf7c301631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:40:34:da:f8:43:bd:72:58:98:b1:b2:52:
49:64:5d:57:84:09:46:01:49:f8:e7:81:e1:01:1b:
0c:cf:8e:ed:ad:f9:20:ce:87:ce:80:50:0a:32:4b:
45:3b:37:dd:d7:8b:b1:e2:c2:fb:f0:f3:1c:5d:fc:
f0:9d:a0:40:89:54:e2:80:fd:f3:70:ae:ae:8f:90:
ea:4a:26:47:fa:e8:22:6b:64:dd:7b:6a:ea:8f:59:
5a:0a:51:e3:7f:1d:71:ea:36:ec:d2:52:8a:f7:77:
75:32:31:4b:e5:c3:d7:c5:06:f8:8a:3c:29:24:f9:
b0:e7:8e:48:26:91:fc:1e:d7:26:05:0c:5c:fc:ac:
b3:02:8a:a8:27:82:0f:2e:31:ce:d3:fe:0e:7d:6a:
ec:e4:fc:13:20:93:fb:9a:62:7e:7b:61:88:d1:eb:
09:2c:10:db:4f:a9:9e:b5:b8:a2:da:e8:4e:93:be:
d3:47:42:7d:0d:5d:b1:19:c9:49:1f:c3:b4:2f:8b:
96:d9:55:fb:f1:6b:0a:6c:dc:43:3e:e9:3b:bd:c3:
00:98:71:92:3d:0a:7c:36:30:e4:83:80:b6:63:2a:
99:eb:8e:6f:8b:81:ca:32:01:e0:2f:12:24:cf:fc:
30:c8:ad:cf:21:e2:33:6b:14:14:6b:ac:cf:fc:9e:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:85:F3:CB:CE:79:AE:29:5D:00:94:FA:D6:32:CF:7C:30:16:31
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/z1CF88vOea4pXQCU-tYyz3wwFjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.160.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e9:fa:12:ef:3f:7b:71:c0:ff:f8:ea:db:3d:05:a0:4a:48:
96:cd:e0:be:3a:17:fd:33:b0:38:ae:31:76:86:b1:5b:8f:bf:
0b:24:2f:c4:af:38:d0:3d:24:4b:a6:9e:4b:2f:b5:15:80:68:
b6:a2:bb:a2:e4:58:a8:7c:eb:5e:69:06:6c:d5:2e:e4:a1:b8:
05:94:3e:80:dd:d8:d2:68:53:f8:f4:d6:23:05:fc:4d:39:ff:
16:71:1f:f9:24:45:ec:47:c0:4b:9a:ab:16:1b:65:ce:e4:f1:
fd:96:ec:83:aa:61:6b:51:7a:a2:6a:1b:84:5c:75:99:8e:a7:
32:78:f2:fe:4f:26:0f:92:28:c2:ea:c1:39:29:71:66:b7:41:
e0:f0:bc:89:ec:25:33:dd:0c:d5:a4:2b:0f:a6:ed:8e:14:50:
ce:8a:ce:17:93:4e:42:2a:b5:c9:16:d3:42:3c:e4:0b:52:ad:
6d:5b:66:2a:1f:ca:0b:77:22:f0:e7:c8:87:64:a5:0c:e3:dd:
2f:62:c3:3e:d2:5b:2c:7e:16:3d:88:19:41:85:36:d1:24:1e:
20:2e:25:98:c3:30:62:5d:44:ac:98:c0:9b:a2:80:1d:7e:4e:
8e:67:b5:41:04:b5:c5:54:cf:4e:1f:17:a4:e1:af:83:db:0a:
b6:d0:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:00:48 2024 by rpki-client on console-ams.rpki-client.org