Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8f8bj9f412uO2_ZoZbWSf3L4gAI.roa
File: 8f8bj9f412uO2_ZoZbWSf3L4gAI.roa (raw, json)
Hash identifier: my5aHFCnvcRWoh3RY6z3hGlHMAENx/9WdAFGO99zvIE=
Subject key identifier: F1:FF:1B:8F:D7:F8:D7:6B:8E:DB:F6:68:65:B5:92:7F:72:F8:80:02
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BC30749EC4470C8E5CAD64E6FA67F
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8f8bj9f412uO2_ZoZbWSf3L4gAI.roa
Signing time: Tue 02 Jan 2024 12:35:14 +0000
ROA not before: Tue 02 Jan 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207206
IP address blocks: 77.79.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c3:07:49:ec:44:70:c8:e5:ca:d6:4e:6f:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ff1b8fd7f8d76b8edbf66865b5927f72f88002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:2e:44:cb:3d:7e:f0:3c:78:e8:23:9f:ea:
2d:c5:56:e9:b9:b8:bb:f6:9b:bb:53:6b:f4:f0:6c:
c1:21:f3:5c:c9:73:45:7e:78:fe:af:7b:33:c7:cd:
4c:62:04:96:3b:e4:57:81:30:b4:bd:44:67:df:82:
2b:35:f2:9e:d5:81:e8:d1:3e:ff:ec:ee:1e:92:01:
ff:cb:bb:ab:2d:1c:bc:7e:5e:32:dd:d7:67:f1:be:
85:a1:86:99:d8:2d:d1:88:4a:3f:53:11:7e:09:47:
26:98:b1:dc:ac:1b:3b:91:7f:a1:64:7b:15:50:7a:
fb:d2:a5:f8:88:04:7d:25:09:5d:13:66:22:cf:43:
21:0c:0c:63:06:a7:3d:0b:e8:be:44:f6:70:b1:71:
ea:d1:20:e6:49:07:d8:b7:69:c7:98:b5:d0:a8:af:
db:97:ed:95:7e:7c:67:2e:aa:f8:bf:55:53:e6:8f:
0b:61:76:fb:40:e1:d4:f3:62:0a:c9:93:ac:2f:a3:
15:fd:3b:c5:30:86:b3:4f:01:b2:eb:19:67:83:af:
d4:88:4d:3f:73:3e:dd:a0:21:51:fa:6c:74:1b:cb:
0d:a8:2d:b6:73:b4:9d:e0:6e:51:14:3b:9b:1e:ff:
75:fc:ba:5e:80:e6:1c:af:79:a8:90:fe:dc:41:8f:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:1B:8F:D7:F8:D7:6B:8E:DB:F6:68:65:B5:92:7F:72:F8:80:02
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/8f8bj9f412uO2_ZoZbWSf3L4gAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d4:df:34:53:47:f6:ee:2e:5a:ee:5f:37:e1:7d:ec:14:f9:
6c:dd:bf:70:71:73:5a:07:c2:11:93:64:a3:7f:5c:e1:dc:68:
db:ee:ec:86:cf:90:2d:82:28:c5:ff:96:cf:26:38:54:84:90:
b3:a2:dd:ac:b2:b9:50:08:73:0e:31:a6:b7:72:2b:3c:5c:56:
b2:21:64:57:0f:c2:ca:0b:5d:e2:be:75:3f:c2:39:39:3b:8b:
81:6c:02:71:68:45:19:39:a1:8a:a1:78:34:ad:eb:49:81:af:
95:06:e9:bb:f6:42:1d:17:17:13:de:d3:57:99:4a:eb:46:3b:
59:e1:e3:28:53:25:e1:60:ad:de:e4:1c:bd:65:6d:1c:5a:99:
2b:8a:d2:8c:11:bf:ec:30:4c:38:e2:8a:01:cf:81:93:95:f4:
cb:78:06:9f:f3:aa:72:03:99:c1:45:b6:ad:60:d2:a7:4c:67:
a8:e5:d7:69:da:bf:ca:3f:d8:f0:f5:3a:a3:5e:d5:69:3b:c9:
fc:2f:62:0e:27:8a:34:d7:06:4f:72:78:70:94:ff:30:1b:d0:
21:a6:f0:d4:a5:3e:ed:01:54:80:91:34:4d:25:74:a5:36:77:
6b:bc:2a:d0:22:19:5a:aa:da:e8:90:e8:68:3d:62:62:25:c3:
ab:24:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:09:24 2024 by rpki-client on console-fra.rpki-client.org