Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TuP2N_I_7s2j2B91RpwdsuijQ80.roa
File: TuP2N_I_7s2j2B91RpwdsuijQ80.roa (raw, json)
Hash identifier: V+OBcC5vHD5yWFmmtQc8Z5YoJnghUqSCwcniDUfR/Vo=
Subject key identifier: 4E:E3:F6:37:F2:3F:EE:CD:A3:D8:1F:75:46:9C:1D:B2:E8:A3:43:CD
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E72263525810D386E4E0E5267A41
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TuP2N_I_7s2j2B91RpwdsuijQ80.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206675
IP address blocks: 77.104.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e7:22:63:52:58:10:d3:86:e4:e0:e5:26:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee3f637f23feecda3d81f75469c1db2e8a343cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:ef:ad:22:72:95:25:ac:13:39:8f:eb:45:
1b:59:2e:29:08:18:c1:c5:58:87:e7:b1:00:b6:ee:
98:cb:fd:92:ad:ea:21:8a:6d:79:ed:b0:be:76:38:
81:3a:0f:65:a8:0c:d9:33:58:5e:2d:aa:48:fe:9b:
d3:4e:8d:8f:c4:46:1f:46:66:35:14:94:bb:7e:b8:
04:12:2d:85:08:6a:b0:72:eb:21:17:00:de:cd:c2:
d0:f8:8b:29:86:db:00:de:76:fb:bd:91:65:16:ae:
13:ca:9d:a2:c1:f6:3e:3a:72:bd:86:4c:ca:d8:72:
fe:93:2f:d1:13:f4:04:f7:87:c8:53:43:1c:9a:82:
4c:13:50:56:6f:a5:01:23:ab:ea:91:23:db:5a:4e:
1d:fe:be:88:b0:60:f9:f9:45:23:c0:06:a7:92:2a:
a6:c8:d5:b6:0f:2a:0c:52:1f:80:be:6b:f4:10:00:
36:23:9d:9e:c8:d8:a2:c6:b0:71:ea:e6:4a:ea:c1:
86:27:c5:e9:a2:9c:2f:38:14:7d:b2:2f:bb:25:a2:
2a:0b:ed:04:66:80:0b:14:af:ef:8e:2f:f1:28:fe:
03:8b:bc:e9:e5:de:28:44:8e:1c:4e:72:11:02:f4:
f2:4a:6a:25:c4:dd:df:f8:d0:fe:65:22:46:fb:68:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:F6:37:F2:3F:EE:CD:A3:D8:1F:75:46:9C:1D:B2:E8:A3:43:CD
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/TuP2N_I_7s2j2B91RpwdsuijQ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7a:b7:f6:77:92:8b:d1:09:75:4c:3d:28:a0:2e:9a:0a:fa:
ef:8c:a7:d6:40:bf:7b:d1:ae:80:9c:ef:75:2e:53:06:49:27:
98:cc:e0:7c:b7:3e:53:20:74:09:00:08:da:be:25:71:60:07:
59:ac:6a:32:ba:af:ab:8c:5c:9b:3a:38:cc:53:91:d7:48:6a:
d8:cc:16:1e:21:7b:a7:75:57:d0:fd:73:56:29:d3:70:d2:1f:
1b:5e:43:3c:95:0a:95:1c:05:87:cf:08:e8:64:00:74:aa:df:
a7:f1:7d:cf:b0:e8:a9:14:5e:19:e1:1c:18:8d:80:97:58:84:
bd:02:e6:84:64:01:38:27:47:d6:87:12:46:00:0c:17:6b:6c:
d0:bf:b9:10:b5:a3:b9:9a:d6:22:7c:66:8f:12:26:74:1f:11:
4f:94:b0:52:6d:ed:7a:41:49:8b:55:e8:04:b9:f3:15:8b:cb:
30:9a:74:ae:48:8f:97:f5:9a:d0:ff:09:30:c6:b1:34:26:80:
35:97:5f:c2:b5:40:75:f3:e9:bd:3e:42:a0:04:41:31:33:4c:
12:d2:45:6c:bd:a2:53:9f:c6:33:4a:97:4f:04:d7:50:67:02:
cd:f7:0b:65:cd:28:67:5a:20:76:a3:60:28:0d:38:54:65:f3:
e4:a1:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:54 2024 by rpki-client on console-fra.rpki-client.org