Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa
File: RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa (raw, json)
Hash identifier: Mp3gIZ0W6AGHNBD/5FTI3wEC6W4uvmTI1RthaZGnsqE=
Subject key identifier: 46:69:8A:AE:D6:79:0D:EE:CB:54:70:77:FE:84:C0:81:D0:09:E6:67
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 018EF0AA2478493D49070DBE639C770290F7
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa
Signing time: Thu 18 Apr 2024 10:04:26 +0000
ROA not before: Thu 18 Apr 2024 10:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201642
IP address blocks: 77.111.64.0/22 maxlen: 22
121.127.36.0/24 maxlen: 24
185.249.100.0/23 maxlen: 23
185.249.102.0/23 maxlen: 23
194.164.0.0/23 maxlen: 23
2a14:3200:2a14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:aa:24:78:49:3d:49:07:0d:be:63:9c:77:02:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Apr 18 10:04:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46698aaed6790deecb547077fe84c081d009e667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:dd:64:ba:97:6e:7a:7e:30:e8:f3:c2:61:
86:2d:f5:f5:13:f6:aa:1e:d3:c6:e5:ef:17:02:f7:
b9:ec:48:88:e8:55:3c:17:80:d9:fd:ff:fc:8d:9e:
12:b3:4e:35:d5:48:af:c9:5b:fe:57:df:8a:15:89:
51:49:5f:b1:3a:49:2b:3b:c8:cb:64:a6:ee:0c:26:
08:4c:ab:b6:78:f0:b6:b3:10:5c:12:e8:2e:11:96:
94:0d:ab:1c:4b:ee:6c:3f:75:db:f5:b1:e4:39:96:
ea:5e:de:2c:f0:0c:b7:34:d6:30:73:70:f2:48:51:
9c:98:39:d2:48:8f:ac:41:d2:da:e8:bc:05:14:91:
1c:38:86:d1:fd:3d:43:93:60:9c:e6:94:b8:71:df:
ee:82:bc:c0:c3:ce:5a:a9:7a:b2:f8:27:70:29:58:
77:b3:0c:69:ab:80:cd:fd:39:8e:b6:17:8b:3d:31:
d0:92:83:7b:bf:91:75:e6:6b:73:8e:ef:b7:87:9e:
43:fb:8c:20:1d:6c:1f:57:be:f2:e2:44:0b:5a:ca:
be:97:52:a7:24:9a:65:42:01:07:1c:06:bd:18:95:
b9:dd:e7:97:26:b8:ac:fb:88:ae:7d:a3:34:a0:35:
7a:c0:00:26:f8:02:5c:86:c7:4c:58:8b:35:41:de:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:8A:AE:D6:79:0D:EE:CB:54:70:77:FE:84:C0:81:D0:09:E6:67
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.64.0/22
121.127.36.0/24
185.249.100.0/22
194.164.0.0/23
IPv6:
2a14:3200:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
50:2b:9b:cf:8d:92:d9:7e:67:de:3d:c6:cc:5b:fc:58:b6:ef:
d5:89:62:f8:d5:1b:bc:02:45:89:e6:d9:2b:bc:d5:b2:57:34:
fb:fb:e0:df:3a:7d:9d:a7:7d:16:d0:f5:ec:99:6f:be:eb:be:
43:87:a1:6d:7d:2e:3d:f4:de:29:97:b2:cd:e6:8a:96:b1:be:
6a:14:53:d5:f2:f8:21:ca:16:e4:27:25:21:71:5e:a2:05:ab:
40:59:7a:79:4a:e9:b3:70:d3:64:63:b0:97:a6:81:7e:15:0e:
12:df:8e:24:b1:e2:ee:61:5f:c5:bd:7d:14:b5:f6:19:8e:07:
da:15:5f:8d:2d:e0:a8:e2:7b:a5:52:b9:0f:aa:31:47:b5:19:
73:2c:d6:f9:4d:3a:70:b7:86:9a:2e:93:fa:ad:9a:d3:60:b3:
74:80:11:4e:27:ca:21:b3:46:9e:a0:4e:73:dc:0b:e4:58:13:
cd:74:34:8a:8f:e5:0e:01:74:27:c4:41:fd:8e:5e:f8:64:3e:
ad:23:cc:c8:e9:46:9a:86:4a:d5:49:e1:e2:53:0a:95:6f:3c:
29:05:82:69:3b:67:33:15:37:f1:38:b9:60:86:5a:45:fe:34:
8f:7f:c1:89:82:51:a0:44:f8:28:6b:22:21:af:e4:cc:05:30:
b1:1e:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:07:07 2024 by rpki-client on console-fra.rpki-client.org