Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/BIfvHViqk5dU4XhdabHUKjLVbgc.roa
File: BIfvHViqk5dU4XhdabHUKjLVbgc.roa (raw, json)
Hash identifier: ijoTbhbdDsNUuBacP84Udl/uDzBVMRmkKdwE6fAVec4=
Subject key identifier: 04:87:EF:1D:58:AA:93:97:54:E1:78:5D:69:B1:D4:2A:32:D5:6E:07
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EDF86CEE47ABA915C39EEE76AAB3A
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/BIfvHViqk5dU4XhdabHUKjLVbgc.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:df:86:ce:e4:7a:ba:91:5c:39:ee:e7:6a:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0487ef1d58aa939754e1785d69b1d42a32d56e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:88:e1:05:16:9a:cd:71:d8:6d:80:06:35:
25:9e:c2:b7:fc:61:2e:a7:ec:5f:9b:18:94:49:66:
01:e1:af:96:ee:c2:c9:88:c7:e8:1f:5f:62:97:4c:
d2:8c:e7:96:ec:fd:e3:1e:bb:9e:58:16:0b:39:ad:
78:f2:14:87:d1:4e:ea:d0:da:00:b5:62:f9:3f:24:
76:25:e3:ab:57:be:c3:6e:f0:bd:0a:17:59:0c:4e:
98:87:fd:cd:5e:4b:39:8c:b4:83:16:4c:c6:d4:02:
a0:a8:bc:74:f4:ee:14:38:58:19:96:58:eb:f7:8c:
5d:12:78:f4:f7:d6:ec:f7:92:0b:18:a2:8a:38:18:
64:da:e0:55:7a:83:56:67:9c:ae:05:a6:73:55:02:
73:ef:7b:a7:19:e2:9a:d5:a0:2d:0c:7f:cf:eb:b6:
9b:ea:aa:85:9c:9a:7e:3a:79:9b:08:c6:61:dc:e3:
f8:59:57:58:c9:d0:4f:11:a2:fe:1e:4a:fa:1f:d6:
fe:b6:0d:71:f9:79:85:ee:20:c6:fd:13:4a:77:f9:
83:72:91:50:de:01:98:98:42:e8:93:b0:11:eb:a6:
df:c5:a3:f6:91:33:f2:0e:25:47:20:d6:ff:b4:43:
d0:fd:bd:d9:09:0c:cf:a0:f2:a3:2f:38:fd:ba:be:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:EF:1D:58:AA:93:97:54:E1:78:5D:69:B1:D4:2A:32:D5:6E:07
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/BIfvHViqk5dU4XhdabHUKjLVbgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:2a:a4:ce:5f:42:c6:28:28:89:40:af:5b:29:3f:cd:26:
55:7a:3c:ee:56:2b:57:f5:ce:0e:63:dd:fb:57:49:13:97:9b:
3f:af:34:89:33:dd:12:de:82:64:69:8a:dc:bc:6d:c1:1c:37:
fa:0b:b2:78:fb:a2:62:ec:08:88:ed:a0:43:05:ed:a3:b7:f5:
0a:8d:c5:97:1c:58:96:50:9d:bc:99:eb:b5:d5:a6:16:79:28:
26:d8:98:87:b2:6f:80:bb:f2:f7:3f:cd:9c:a3:b6:d2:d5:ae:
40:9c:5c:72:ec:6d:6e:b1:db:34:5f:74:88:6a:ca:70:e2:9c:
69:b5:5b:9e:06:ec:28:98:c8:0f:06:85:ea:a2:a7:9c:d3:79:
f1:9a:f9:c9:09:a5:d7:0e:7f:95:7f:c1:c0:30:27:3f:b5:c4:
b0:46:f1:f1:f6:bd:70:cf:bf:f1:5f:4a:b0:b9:c7:cd:93:df:
9a:85:fe:e6:07:1d:97:84:c7:ca:67:5c:dc:32:40:67:76:78:
4e:eb:f5:d1:7c:3f:e5:10:e5:ed:e3:49:b6:4b:fc:b5:1a:87:
58:78:7d:7b:0b:70:2d:96:40:ae:88:8f:48:9c:70:c5:b6:00:
e0:5d:37:b9:88:7c:d4:bf:77:5c:1e:30:59:cd:57:45:81:9c:
71:45:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:31:16 2024 by rpki-client on console-ams.rpki-client.org