Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/snynfBRZSetSFHJE9ME7By_KhE4.roa
File: snynfBRZSetSFHJE9ME7By_KhE4.roa (raw, json)
Hash identifier: PWtdvR/mk3DRcdKYsJc1ApFK+o48mIV6htDkxZ4APF0=
Subject key identifier: B2:7C:A7:7C:14:59:49:EB:52:14:72:44:F4:C1:3B:07:2F:CA:84:4E
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 018CC8018E85A17ABE5B62CABD02F9EE1436
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/snynfBRZSetSFHJE9ME7By_KhE4.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8643
IP address blocks: 87.239.232.0/21 maxlen: 21
195.134.64.0/18 maxlen: 18
88.197.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8e:85:a1:7a:be:5b:62:ca:bd:02:f9:ee:14:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b27ca77c145949eb52147244f4c13b072fca844e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:d4:6e:4c:0a:dc:e6:bf:04:c2:85:92:76:
e7:c9:19:36:00:85:3f:62:3e:42:39:75:80:49:cb:
81:37:95:51:ea:7e:db:3e:d5:3f:86:ad:f9:c5:b5:
83:59:1e:0b:e1:d7:70:d4:96:2a:3a:c8:de:ac:60:
ea:00:05:00:8f:af:e4:c6:10:bb:08:08:d8:7a:76:
7b:55:1b:3e:62:f1:33:a0:1b:91:ae:25:9c:80:3f:
b9:f5:f7:ee:1d:53:2a:4c:57:5f:73:3c:6c:d7:32:
aa:c7:12:e1:5d:cb:08:ae:8d:ab:5b:c0:b7:b5:f0:
ab:01:a9:6c:2e:69:2a:09:72:1d:d9:1b:e4:ca:26:
00:93:c4:84:74:94:46:10:eb:ff:75:42:fb:7d:c8:
3e:a5:96:17:50:3d:1a:13:c0:26:4b:19:9f:93:0d:
fb:31:c3:c1:4f:95:4c:f3:08:03:d3:a7:5e:6b:98:
56:ba:f3:4c:c8:6a:44:84:6e:c8:80:99:b8:1c:58:
6e:a4:bc:25:3a:62:b1:ec:8c:38:46:e4:94:9d:37:
92:a0:32:99:f3:7a:68:c4:2e:b7:e8:e1:6f:f9:11:
92:fd:c7:68:b5:8c:57:59:96:d2:99:56:6e:66:66:
dc:2e:1b:46:d2:60:18:9f:20:df:60:ef:8f:bd:e0:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:A7:7C:14:59:49:EB:52:14:72:44:F4:C1:3B:07:2F:CA:84:4E
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/snynfBRZSetSFHJE9ME7By_KhE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.232.0/21
88.197.0.0/17
195.134.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:7b:e7:37:a6:3a:c6:89:97:0d:40:55:09:4a:25:aa:52:4b:
9a:11:23:81:b1:75:1e:fd:d2:af:ef:87:a0:4b:60:29:23:d6:
82:97:37:41:f2:89:89:b1:db:0e:63:25:02:60:ca:94:93:8c:
f0:65:53:1f:8d:53:80:1b:17:51:30:f7:78:e4:9d:c4:5a:54:
c6:59:51:a7:45:be:0e:72:6d:2a:c8:22:5a:39:a9:a3:e1:38:
2f:70:23:6b:ca:15:89:ac:80:de:67:86:d3:a8:08:fb:4b:d7:
78:d7:fc:12:ae:02:8d:2f:e2:4f:6f:79:ac:7d:2a:a4:a8:da:
80:b7:96:52:39:58:88:21:37:ae:d8:b8:41:f1:0a:5f:2f:6a:
48:94:25:25:e9:4a:34:2d:30:5d:19:af:dc:ac:54:44:50:6d:
ea:bd:0f:25:2c:30:66:13:1c:a5:6f:c4:0e:02:d8:54:31:34:
6c:de:61:41:68:66:47:c8:8f:9d:b6:fe:92:fb:ab:cf:e1:f9:
c2:84:99:49:c9:5d:27:e6:12:27:9a:a9:ac:d2:f7:67:3a:02:
2d:f2:dc:c4:77:30:81:72:fd:c9:69:fb:27:be:e0:e5:5e:94:
ed:4e:70:92:ae:4a:05:97:b3:0b:18:c3:77:42:17:2a:b5:99:
8c:93:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:09:39 2024 by rpki-client on console-fra.rpki-client.org