Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/X0ik40-oEWGT7u3_M27w748unWI.roa
File: X0ik40-oEWGT7u3_M27w748unWI.roa (raw, json)
Hash identifier: 3/CQHXXZIuUecTHL0jMbXmXJO1pXMh63DpIxQephcq0=
Subject key identifier: 5F:48:A4:E3:4F:A8:11:61:93:EE:ED:FF:33:6E:F0:EF:8F:2E:9D:62
Certificate issuer: /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial: 018CC86FF1BA56351E0027BF034BAA10D0AC
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/X0ik40-oEWGT7u3_M27w748unWI.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27970
IP address blocks: 77.83.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f1:ba:56:35:1e:00:27:bf:03:4b:aa:10:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f48a4e34fa8116193eeedff336ef0ef8f2e9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:a1:d9:40:b8:3d:50:3d:85:fd:49:6c:8f:
8a:d6:b6:1a:42:ff:5e:82:c2:dd:44:07:00:e3:79:
7b:a1:ca:61:5c:af:c1:f4:80:f8:96:5a:0c:41:c4:
48:17:cf:33:f0:64:43:90:90:f9:78:bc:45:9b:9d:
3f:4b:ce:2c:c3:b0:99:13:d1:f3:2e:b3:ba:35:fa:
ca:22:51:ad:62:f2:2c:f3:cd:11:42:c5:f1:d6:96:
5c:8e:08:6b:46:07:a3:de:e7:12:9c:75:47:f0:cb:
ea:2f:e9:82:93:1f:47:b1:f2:53:e9:74:60:2c:01:
28:ef:ba:65:e3:55:7e:12:8b:f4:5d:1f:1d:09:60:
0b:be:25:a4:89:79:d6:77:45:78:a2:30:82:47:1f:
d4:56:7c:f0:fc:56:08:93:ea:99:5d:4d:c7:68:c6:
fc:c1:6a:c7:ea:cd:99:c1:15:52:11:7f:9f:1b:2d:
fe:61:db:c5:71:92:e2:c1:a0:d8:db:44:73:9c:60:
47:62:5d:a8:a2:01:86:17:db:a0:28:f5:7a:0c:b7:
18:46:9c:32:b2:d8:00:18:44:cd:d8:33:64:4c:85:
de:4d:60:db:33:a7:0a:f3:8e:da:e2:cf:8b:0c:77:
78:94:c8:86:4f:90:73:db:76:52:51:41:0d:d5:67:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:A4:E3:4F:A8:11:61:93:EE:ED:FF:33:6E:F0:EF:8F:2E:9D:62
X509v3 Authority Key Identifier:
keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/X0ik40-oEWGT7u3_M27w748unWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.58.0/24
Signature Algorithm: sha256WithRSAEncryption
80:63:2a:dc:e6:1d:01:06:9c:7c:04:90:2e:31:d6:fc:62:1d:
ef:49:d7:0b:2b:9c:57:72:60:cc:06:8f:3a:7d:83:79:32:5f:
2b:21:fd:0c:7d:b9:e1:c0:c2:7c:df:9b:48:e5:34:34:f7:73:
e2:0f:f3:35:fa:98:f3:11:4c:e1:1c:c2:48:61:55:c4:d5:d5:
c8:38:3e:25:c7:4d:a1:2e:47:93:82:11:99:09:bc:2d:0c:e8:
ca:61:46:5b:49:ed:76:e9:23:23:c2:b5:7b:54:7c:f7:87:25:
d1:a3:7c:ad:ba:20:9c:21:d0:63:14:90:9c:a8:2a:f1:62:fe:
74:3f:02:d3:d6:46:2d:9d:ab:61:26:19:aa:ea:85:b9:e1:b9:
3b:2e:5e:80:c5:4a:85:53:45:46:a9:41:bc:c6:21:92:eb:25:
8a:62:d9:15:88:77:97:98:6b:bb:13:c6:2b:41:ee:6d:fa:bb:
79:24:6b:20:9a:0c:15:79:f8:15:c3:fa:ad:5f:13:c7:af:79:
b4:81:dd:7f:dc:32:dc:d2:a7:e9:40:65:e0:62:56:26:ff:66:
41:1c:7c:46:b5:44:41:1f:0e:c7:c1:a8:76:ee:d3:22:c2:d1:
8d:b8:31:35:5f:76:7d:8b:32:8a:ae:13:2e:75:2b:ce:ad:5f:
68:f2:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:10:39 2024 by rpki-client on console-fra.rpki-client.org