Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/7yZyDYxO3u6lz795h1rlvjWijB4.roa
File: 7yZyDYxO3u6lz795h1rlvjWijB4.roa (raw, json)
Hash identifier: WtzlqWx+kXQehQ3vOYP1fj+0uQZlyOFzV4pPvfhoz6U=
Subject key identifier: EF:26:72:0D:8C:4E:DE:EE:A5:CF:BF:79:87:5A:E5:BE:35:A2:8C:1E
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 018CC5DC96E52B2975794869872890F0E283
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/7yZyDYxO3u6lz795h1rlvjWijB4.roa
Signing time: Mon 01 Jan 2024 16:30:17 +0000
ROA not before: Mon 01 Jan 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47212
IP address blocks: 79.99.56.0/21 maxlen: 21
2a01:a180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:96:e5:2b:29:75:79:48:69:87:28:90:f0:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef26720d8c4edeeea5cfbf79875ae5be35a28c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:9f:46:d9:d8:03:7a:a3:7b:20:8f:5c:dc:
ac:44:5e:e1:3f:a9:e7:eb:0a:61:19:58:c9:b9:3c:
63:8e:15:6c:e5:7d:9b:6c:a0:f8:69:70:17:01:07:
cc:3e:41:6a:be:f5:92:88:a8:5a:89:63:71:bf:4a:
02:00:4e:d5:4a:27:d8:5d:e3:76:22:d8:cb:f5:8e:
f6:3b:85:22:91:f6:87:b9:28:a8:8d:eb:9c:79:ee:
f2:5c:18:9a:14:97:13:6c:6f:45:4f:55:fd:1c:25:
43:a3:51:09:55:ce:52:d6:42:01:e1:a0:90:ee:6d:
34:19:ec:62:c7:7b:55:1f:91:53:89:91:7c:44:8c:
68:e2:f8:73:6a:b6:f9:6d:56:3f:b1:01:02:48:14:
a4:2e:a7:7e:0b:8c:f0:c3:ff:96:74:87:13:81:1c:
a2:e1:1c:87:b3:54:f8:63:6d:f1:ea:3e:e9:49:f8:
94:d4:ea:5c:99:ea:f8:e0:74:02:5d:fa:c6:0e:24:
ac:11:82:e2:a1:47:74:1a:50:74:22:e5:87:22:50:
c2:4e:c5:1f:d7:00:82:e1:10:65:6a:bb:26:79:d9:
c0:b0:c5:56:06:e5:d8:e1:14:43:f7:54:8d:ea:06:
07:05:ec:1e:30:59:b9:54:00:ee:68:a7:ba:db:a5:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:72:0D:8C:4E:DE:EE:A5:CF:BF:79:87:5A:E5:BE:35:A2:8C:1E
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/7yZyDYxO3u6lz795h1rlvjWijB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.56.0/21
IPv6:
2a01:a180::/32
Signature Algorithm: sha256WithRSAEncryption
27:7f:06:0d:32:6a:99:4e:69:6f:15:9b:38:f3:1f:03:d5:72:
32:4e:dc:9c:a5:a3:4d:03:94:f3:d7:82:55:42:69:de:c0:c3:
52:c8:9f:79:08:c4:c1:0e:c1:d2:a2:99:5f:d6:ad:57:cc:4b:
b2:8b:77:de:74:13:8d:c0:82:c2:44:b8:9d:ac:f9:51:26:57:
09:e2:17:42:2a:83:bb:b3:08:8a:a6:90:b9:3a:16:38:27:b2:
18:00:68:44:7c:ea:b7:f2:b2:79:6f:26:49:a5:cd:3b:30:3f:
c3:a8:85:cc:ee:00:8b:09:af:b2:3e:68:a3:8b:56:cc:c8:8a:
b5:56:5f:63:20:38:a4:a6:eb:e0:36:3a:45:ef:5d:a5:22:3e:
16:0c:67:d1:f5:27:9c:d8:4a:81:7d:63:c9:7e:49:db:1c:2d:
ae:a0:95:e1:9b:74:af:f0:7a:94:af:ca:94:68:12:e8:1d:cb:
ef:34:b0:ba:a9:03:cc:72:a0:5a:f8:14:c3:3a:29:4a:2d:14:
49:2e:e2:2d:ea:a4:80:56:9d:75:8f:99:8f:b2:b5:d7:c6:bd:
0d:8f:d4:e6:58:d0:09:b9:52:5c:6b:09:76:7a:fe:15:c2:fe:
ee:8b:e2:02:5e:ab:88:c4:a7:c3:38:21:b0:1f:33:09:d0:ab:
47:5a:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:46 2024 by rpki-client on console-fra.rpki-client.org