Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/AagMDoMdG9v576aVvjqTXP7k2_w.roa
File: AagMDoMdG9v576aVvjqTXP7k2_w.roa (raw, json)
Hash identifier: 9md2GP02XxgyJ7kVJkT88QfCmLz9WOPHdHN/dLfUnI0=
Subject key identifier: 01:A8:0C:0E:83:1D:1B:DB:F9:EF:A6:95:BE:3A:93:5C:FE:E4:DB:FC
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 018CE9C3ED353DD6B3E158267CC182DA499C
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/AagMDoMdG9v576aVvjqTXP7k2_w.roa
Signing time: Mon 08 Jan 2024 15:49:40 +0000
ROA not before: Mon 08 Jan 2024 15:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215759
IP address blocks: 217.145.237.0/24 maxlen: 24
79.110.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:c3:ed:35:3d:d6:b3:e1:58:26:7c:c1:82:da:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 8 15:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01a80c0e831d1bdbf9efa695be3a935cfee4dbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:31:76:f2:2f:3f:4e:c7:77:48:4c:a5:81:
21:42:c0:c8:68:dc:52:75:a7:e6:09:77:e9:db:4f:
5a:21:7e:0c:cc:34:4a:e6:57:8d:17:74:46:d1:22:
71:0f:99:fa:16:6c:7b:13:2b:5d:84:c0:c4:c8:33:
49:14:43:fc:66:fb:69:3e:47:0d:66:e7:5a:34:91:
c1:5c:3e:73:7b:ad:9c:4e:df:cb:b1:c1:33:37:55:
30:70:45:fc:02:13:fa:fe:e6:4c:3c:80:e7:b0:69:
19:32:85:77:a2:55:12:44:27:5d:0b:2d:93:fc:7a:
67:e3:9b:e5:80:0c:bd:5d:81:8e:3c:f2:ab:41:0a:
83:7b:5c:1d:93:5d:f6:4d:c6:2b:c0:51:76:c9:af:
9b:e4:93:9c:a4:7c:5a:b1:ec:02:c4:2b:c6:3f:8e:
18:e2:7c:a5:d7:a8:2e:6a:ec:d2:19:c2:a9:52:80:
e3:e6:44:1f:6e:ad:f5:08:2d:7f:83:d4:56:f4:6b:
b1:73:a0:7b:59:5a:47:0c:3e:46:8f:11:e5:fb:02:
54:37:72:2f:33:9d:60:b0:ab:e4:bb:e3:85:82:83:
7b:b4:ab:cb:e0:29:34:a8:78:90:11:ae:17:1b:7c:
ed:6b:98:a1:c4:07:96:c7:6d:e0:6b:fd:29:96:c5:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:0C:0E:83:1D:1B:DB:F9:EF:A6:95:BE:3A:93:5C:FE:E4:DB:FC
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/AagMDoMdG9v576aVvjqTXP7k2_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.171.0/24
217.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1b:38:8d:5c:1b:56:60:bf:9d:e4:8c:59:37:8a:99:01:0b:
35:cc:a1:83:12:a1:d2:e2:e9:95:27:76:bb:95:f2:93:51:48:
25:d6:3d:8f:03:75:6a:5d:7e:c6:de:2e:71:9d:81:3c:43:76:
c9:32:fe:5f:b7:54:29:67:8b:a6:3e:a7:4b:1a:6f:68:e3:0e:
37:ea:6e:63:ac:4a:f0:12:ca:a0:57:b9:97:de:1a:2d:e3:0b:
a2:aa:76:53:af:00:e6:46:b5:ad:ca:54:6e:0b:4f:38:26:6b:
a5:b9:48:e5:23:23:96:54:9f:6f:d0:08:f6:cd:2b:8f:90:35:
7b:18:d1:b9:0b:00:0a:3f:7d:e5:5c:db:09:9d:c1:b7:fd:be:
71:98:f1:7d:f9:81:b6:8d:11:bf:a8:2f:a2:46:b3:a4:7d:c5:
e2:8d:6e:d0:9d:85:0f:f4:c3:dc:ec:db:e8:94:bc:82:b3:45:
d5:6f:2d:e2:a3:0e:a0:54:d3:fb:07:e4:b6:5d:4a:f8:c0:ef:
90:95:0b:90:6b:d5:2f:38:f6:4f:d3:e4:c4:90:29:d9:23:11:
49:61:e8:09:76:f0:b6:c0:3b:f4:6f:4d:17:dd:e9:65:d2:8a:
59:3a:6c:e2:90:02:bf:28:d3:61:4f:7c:6b:bc:0d:26:6a:47:
dd:cc:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:29:24 2024 by rpki-client on console-ams.rpki-client.org