Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/t6BBRoAfbQPWUhbrQpsFmV1LgK8.roa
File: t6BBRoAfbQPWUhbrQpsFmV1LgK8.roa (raw, json)
Hash identifier: gIc3skZmirN/X6tgkan0COYZCmI6XYnSdzK9IuQRUGg=
Subject key identifier: B7:A0:41:46:80:1F:6D:03:D6:52:16:EB:42:9B:05:99:5D:4B:80:AF
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E8282C1AACEB53F2583BE82D92AF
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/t6BBRoAfbQPWUhbrQpsFmV1LgK8.roa
Signing time: Mon 01 Jan 2024 10:30:11 +0000
ROA not before: Mon 01 Jan 2024 10:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209836
IP address blocks: 77.237.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e8:28:2c:1a:ac:eb:53:f2:58:3b:e8:2d:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7a04146801f6d03d65216eb429b05995d4b80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:92:d1:57:71:f0:6e:12:05:48:6a:c7:3e:
a8:9a:a2:93:9c:c2:60:a3:f2:91:18:84:6f:34:ba:
04:61:a5:3d:9a:55:21:6d:99:ce:1a:d8:30:e8:ad:
30:a9:eb:45:42:95:0a:f2:91:6f:27:2e:ea:f3:99:
96:38:b8:a4:3b:f4:bf:d1:24:94:e9:6f:84:e0:e8:
a6:00:b6:8e:75:d9:49:5a:6f:6d:c7:31:36:bf:ef:
7d:1f:68:8d:d2:e6:7d:f9:c0:be:b7:36:d2:f9:bf:
6f:bf:b4:2a:84:c9:1a:93:7b:68:1d:0c:30:de:48:
f2:ee:9f:5b:fa:b9:e5:cf:29:bb:b0:5d:24:63:23:
f6:cf:dc:85:44:93:2e:e8:29:fe:64:78:b8:14:a6:
91:7a:6a:b0:e9:d7:51:84:d1:9b:77:9e:bc:ad:8c:
ee:4b:5c:a1:11:3d:28:76:4f:02:c8:b1:ad:19:cc:
aa:c6:61:8f:4d:82:d2:1e:84:35:cb:90:24:da:af:
03:3e:28:54:cb:d1:2e:e1:ad:b7:96:d5:3c:f2:bb:
07:5c:8b:9a:46:4c:ce:ae:bc:fe:69:c3:28:7e:4d:
26:e6:6b:0c:f3:6a:d3:eb:9f:3d:6d:76:9c:b5:b2:
db:1e:31:9f:f5:90:a1:56:6f:d2:94:f3:08:8a:47:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:41:46:80:1F:6D:03:D6:52:16:EB:42:9B:05:99:5D:4B:80:AF
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/t6BBRoAfbQPWUhbrQpsFmV1LgK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.73.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a0:e3:77:42:89:dd:5e:38:ea:f1:c9:da:5c:3d:a9:ef:1c:
57:b6:dd:f0:20:7f:ba:cf:54:d4:14:de:14:54:d8:83:83:60:
69:d2:18:79:90:49:5a:e3:5c:7c:73:6f:41:89:60:36:36:86:
98:0a:4e:9c:b5:d0:b8:05:31:ab:ca:8d:55:1a:a1:d4:bd:6e:
5d:da:07:f5:e5:ae:b5:0b:74:d7:e5:b0:b7:80:97:55:ff:cc:
86:cf:d0:8a:3a:73:f3:c9:26:1d:95:2b:ea:94:0c:ab:57:ea:
55:61:95:ed:ed:3a:bc:6c:fe:43:87:6b:78:91:91:86:7e:92:
11:7d:df:28:70:16:57:4c:3a:07:70:f9:a1:32:73:ec:ec:6b:
20:43:bc:2d:f7:79:8f:99:3e:8f:7b:36:cd:64:41:4b:2b:e0:
b2:80:89:89:be:8b:27:12:a3:05:68:7e:59:fd:6e:5a:4d:24:
85:2b:18:fa:b3:5d:0b:30:bc:e7:b9:e4:ce:ef:42:63:2e:66:
0c:6a:11:43:06:2b:0f:38:ba:d8:8e:94:37:4e:60:3b:e9:40:
17:e0:94:19:6b:20:0b:8c:37:db:76:b1:8a:fe:2a:a2:ed:28:
cb:d8:32:a8:af:52:ee:4f:bf:dd:1d:f8:9c:e8:79:47:6f:08:
51:09:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:04:53 2024 by rpki-client on console-ams.rpki-client.org