Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/aBzDF5WHKGruxPCuKqSrWlFf_2A.roa
File: aBzDF5WHKGruxPCuKqSrWlFf_2A.roa (raw, json)
Hash identifier: eup6fb3p4KgswNZdlLdI/GzGvbu9kCkzmb4Jj04N8s4=
Subject key identifier: 68:1C:C3:17:95:87:28:6A:EE:C4:F0:AE:2A:A4:AB:5A:51:5F:FF:60
Certificate issuer: /CN=7630eee64d6c18b84f9c8b7f38525e62c15da18c
Certificate serial: 018CC7934482865605902F3857BFE766B43A
Authority key identifier: 76:30:EE:E6:4D:6C:18:B8:4F:9C:8B:7F:38:52:5E:62:C1:5D:A1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djDu5k1sGLhPnIt_OFJeYsFdoYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/aBzDF5WHKGruxPCuKqSrWlFf_2A.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35819
IP address blocks: 77.95.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/djDu5k1sGLhPnIt_OFJeYsFdoYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/djDu5k1sGLhPnIt_OFJeYsFdoYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djDu5k1sGLhPnIt_OFJeYsFdoYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:44:82:86:56:05:90:2f:38:57:bf:e7:66:b4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7630eee64d6c18b84f9c8b7f38525e62c15da18c
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681cc3179587286aeec4f0ae2aa4ab5a515fff60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:37:33:32:bf:9d:08:15:1e:5a:df:51:16:
86:aa:86:9b:3c:da:e5:14:23:dc:ed:52:e7:ff:e7:
e4:10:5d:3f:b0:8e:1d:99:13:bf:64:f2:63:84:13:
00:11:3d:99:6f:ae:8d:2e:2e:fb:27:c8:ca:be:b5:
20:61:55:05:85:ad:02:90:6f:8f:ca:ff:60:ed:92:
b6:f8:29:c5:f0:1b:20:f8:d5:8c:1e:78:06:18:4b:
7b:ab:cc:3a:2c:89:1c:06:80:ae:f5:7d:08:21:9f:
74:84:26:46:c2:6a:a1:5e:af:54:90:f4:df:65:a3:
1b:87:97:f3:ba:04:26:8f:7e:34:4f:47:77:7d:55:
39:d9:3d:37:61:48:bc:c3:b0:a7:a4:1f:c1:ff:74:
8e:4b:ef:cb:34:ff:e5:d2:e4:30:16:9a:51:20:9f:
53:d6:52:6f:56:0b:00:01:5a:ad:6f:1f:fa:1e:39:
69:88:77:a6:b7:b6:48:da:43:40:79:80:de:0e:76:
f5:3d:f2:ba:4f:eb:e1:a1:49:dd:ca:15:82:b8:97:
2d:47:43:2d:8f:0c:7f:5e:c6:b6:de:de:b3:46:e1:
5b:2b:fe:fb:0a:2d:cb:63:e7:e9:bd:16:77:46:e9:
05:5a:7e:91:66:c5:ea:24:94:59:a8:46:26:c3:18:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:C3:17:95:87:28:6A:EE:C4:F0:AE:2A:A4:AB:5A:51:5F:FF:60
X509v3 Authority Key Identifier:
keyid:76:30:EE:E6:4D:6C:18:B8:4F:9C:8B:7F:38:52:5E:62:C1:5D:A1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djDu5k1sGLhPnIt_OFJeYsFdoYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/aBzDF5WHKGruxPCuKqSrWlFf_2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/536758-6ba5-4fce-b774-5c45a4ac2f46/1/djDu5k1sGLhPnIt_OFJeYsFdoYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:74:e6:e8:d6:da:74:e1:d4:a2:c8:cf:7f:cd:ad:4a:34:e8:
00:3b:87:b9:db:ce:1b:b4:a4:f8:4c:54:77:a6:1b:b9:cc:ee:
1d:fe:d5:c4:b1:30:d0:ca:11:2f:2f:27:e3:27:d3:5e:1b:4c:
5c:80:f7:75:9b:37:c2:cc:db:b5:fa:2d:d3:83:07:f5:50:ab:
1a:c6:f8:10:11:af:86:eb:f2:b8:a1:6f:42:46:d3:a3:f6:1c:
1d:ac:49:ee:11:47:da:93:ad:e2:d0:08:d9:b3:16:c2:6e:b5:
7b:8e:3d:ce:e9:7f:ef:92:0b:d4:46:f1:f9:60:be:e9:70:dd:
63:04:ea:01:30:8c:f0:e9:06:0f:b8:37:75:60:42:41:4a:3b:
2d:9e:7a:db:04:9c:21:59:96:61:31:e3:d2:0c:c2:55:c3:c1:
67:bf:af:ab:90:33:5b:f1:e3:40:ce:b3:81:bc:d1:66:88:a6:
4d:fa:b4:cc:45:91:20:b5:b4:9b:31:79:06:07:66:46:74:3f:
eb:62:37:ff:fe:13:49:18:f8:a5:fe:d9:bc:c6:2e:b4:14:04:
0c:f7:d5:28:74:14:2c:e5:c4:28:70:65:72:71:1c:87:fb:34:
b4:90:76:d9:4d:7a:8b:26:79:c2:a1:ec:71:65:b1:8a:32:2b:
46:59:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:46:57 2024 by rpki-client on console-fra.rpki-client.org