Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/FbJt-hQKNz7mqNpUP1G-Yz-QeKU.roa
File: FbJt-hQKNz7mqNpUP1G-Yz-QeKU.roa (raw, json)
Hash identifier: xX5akRuHKQ0u+gLhH8AL3lCqiXfgW5SRZuTauqHSX6I=
Subject key identifier: 15:B2:6D:FA:14:0A:37:3E:E6:A8:DA:54:3F:51:BE:63:3F:90:78:A5
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 018CC348B6A44A2F335EF87FFC30F82003C0
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/FbJt-hQKNz7mqNpUP1G-Yz-QeKU.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 77.72.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b6:a4:4a:2f:33:5e:f8:7f:fc:30:f8:20:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b26dfa140a373ee6a8da543f51be633f9078a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:1f:f9:31:9f:55:57:39:72:ee:e5:24:a7:
a6:e4:30:f5:42:40:52:9f:c2:44:14:a6:81:85:ec:
77:81:2e:9d:3d:8c:90:42:0e:48:48:d4:92:22:22:
04:ee:59:d6:0b:36:3f:bf:0f:ef:a6:4b:61:92:51:
df:fd:32:66:c7:bd:4f:d6:78:29:9a:79:77:07:e8:
b1:7f:a9:47:a3:f4:62:9d:f9:75:d6:21:4f:0a:87:
5b:0b:59:df:4f:0c:3e:60:cf:55:a6:cf:86:a1:79:
a4:2f:ae:ec:aa:f5:1b:6d:3c:58:f2:74:7c:be:5a:
47:6f:33:6b:7a:7d:e7:93:3f:5b:90:55:86:95:2a:
73:f8:53:30:6d:fd:f6:cb:6b:26:72:bb:82:96:2f:
62:96:75:9d:31:2e:ff:67:da:e5:b3:46:b7:49:78:
ac:d3:ae:36:b7:3e:1c:ba:91:5d:b4:31:84:1a:7d:
0d:f4:2f:07:be:6f:9b:e7:7b:55:77:14:1c:0a:f2:
dc:79:06:c5:a7:77:cb:5b:9b:73:b4:1d:e7:8f:b0:
20:15:d0:30:22:bb:69:f6:43:59:05:53:5e:a6:66:
02:c1:d0:43:cd:7f:30:07:cc:52:ab:3d:67:8e:c0:
2f:4f:8d:14:6e:f0:cd:bc:98:6f:54:d5:5b:c8:56:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:6D:FA:14:0A:37:3E:E6:A8:DA:54:3F:51:BE:63:3F:90:78:A5
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/FbJt-hQKNz7mqNpUP1G-Yz-QeKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.239.0/24
Signature Algorithm: sha256WithRSAEncryption
15:77:9b:49:a3:81:59:c2:44:cc:a5:8e:5f:c1:cf:73:ee:cd:
9f:66:3a:ff:4b:52:b9:80:39:da:3b:e8:6b:4d:48:33:07:df:
35:98:77:ba:e8:d6:4d:46:f0:e3:f7:6c:72:4c:83:f4:ca:71:
3d:d0:95:4f:4b:2c:35:a3:8d:3f:13:71:da:d7:00:b9:65:1a:
35:4f:18:be:3a:6a:85:ab:70:1c:20:c8:64:da:1c:4c:12:97:
f2:fd:2e:7f:8b:d4:fa:97:72:06:86:08:36:ef:3e:b7:d7:6a:
79:77:3b:09:ab:78:16:b1:a5:7f:b9:eb:9c:a6:7e:02:e5:3f:
7e:1f:7b:dc:4d:4f:a2:3a:1c:82:6b:fa:ee:04:c5:3b:83:37:
fa:2e:76:34:2c:92:8d:88:49:65:17:93:44:f9:90:fb:0b:17:
37:82:d6:42:45:b9:1a:0b:e5:1f:f6:75:36:1e:5a:da:a4:38:
d5:cf:eb:c5:d8:4b:31:37:26:ef:ba:2e:0b:88:62:cc:0d:af:
7d:e4:81:6a:af:8b:9f:15:6e:93:50:a4:70:01:eb:70:9a:cd:
cc:ad:74:b6:12:0d:21:93:85:00:97:4f:02:3f:8c:21:96:ed:
fc:10:c0:89:32:e7:70:00:19:45:04:5d:ec:76:c4:f8:8b:50:
10:40:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:46 2024 by rpki-client on console-ams.rpki-client.org