Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AspCK5TBg1_v9LV3t4Xv9HNmLag.roa
File: AspCK5TBg1_v9LV3t4Xv9HNmLag.roa (raw, json)
Hash identifier: jPSlqat74sQF73PWFC8+xzHHKWe+dZ53RTKnV9t1kJg=
Subject key identifier: 02:CA:42:2B:94:C1:83:5F:EF:F4:B5:77:B7:85:EF:F4:73:66:2D:A8
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018E8663B48ECE7FB84EE95CE67208F8D505
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AspCK5TBg1_v9LV3t4Xv9HNmLag.roa
Signing time: Thu 28 Mar 2024 18:47:44 +0000
ROA not before: Thu 28 Mar 2024 18:47:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 77.93.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:63:b4:8e:ce:7f:b8:4e:e9:5c:e6:72:08:f8:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Mar 28 18:47:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ca422b94c1835feff4b577b785eff473662da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:2f:4d:53:ff:2b:6c:46:4e:ce:ad:91:54:
28:1f:6f:d4:c5:61:48:67:d4:81:97:53:1a:11:ab:
c3:ee:ba:31:55:4d:c7:b5:c1:a6:b3:f8:16:b0:c8:
10:fd:da:80:fe:a9:07:1c:ac:aa:1e:32:81:dd:51:
62:3d:ac:b9:2b:96:8e:0e:9f:56:e2:4e:68:80:a7:
33:db:2d:2f:f1:00:5c:cb:07:40:78:d5:a3:66:7b:
ac:69:e0:b6:81:09:3f:a9:1e:81:76:1c:d6:25:d9:
25:a3:bd:26:2a:8b:b6:45:07:df:5e:a6:3c:c6:9c:
cc:89:78:bd:8a:c2:b2:67:30:59:45:e8:ca:5e:78:
ca:29:d3:73:15:fc:b3:21:ce:d9:9b:39:a5:f7:6b:
5d:ea:a2:60:5f:bb:9f:23:e8:e2:6c:97:27:d5:43:
44:04:f1:6d:26:91:8c:c2:af:50:d7:4a:e6:8f:2b:
64:72:a4:20:e6:33:ed:59:a0:a8:a1:d0:30:1a:dd:
cf:66:8e:4b:d7:e0:5c:73:05:cd:41:2b:fe:f2:b0:
e9:ed:cb:81:a2:6d:fb:98:e6:e6:a6:f2:58:73:d0:
6d:60:05:b5:54:c8:a7:cc:ea:36:3a:99:b0:6e:6b:
1c:73:d8:1c:61:8c:b5:1a:d0:4c:af:c5:13:e9:f2:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:42:2B:94:C1:83:5F:EF:F4:B5:77:B7:85:EF:F4:73:66:2D:A8
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/AspCK5TBg1_v9LV3t4Xv9HNmLag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
53:32:2a:20:aa:da:64:f5:42:2e:40:f9:dd:7f:c4:3f:8d:8f:
c8:d0:b3:70:0d:a9:e3:db:30:10:e0:22:ab:61:5a:f4:23:29:
72:25:6a:84:6c:4e:a4:3c:a7:49:ca:d3:bc:25:e2:c7:8d:d3:
62:e3:4b:f3:ee:7d:f9:e6:71:83:38:5e:0b:f9:61:b5:1d:fd:
38:4c:bb:1a:fb:ad:58:fc:3b:49:e0:32:12:57:ce:72:97:7e:
ef:09:ad:50:ff:97:a0:0b:c8:f0:0b:92:f4:74:be:29:7a:03:
07:ad:33:38:34:59:b1:e9:af:23:dd:74:91:2a:ee:46:08:1d:
ac:fe:b1:97:d8:a8:18:c3:a3:05:9a:7a:aa:70:ef:db:e8:db:
26:c1:cd:59:05:67:b8:27:1e:83:32:78:85:82:18:7f:6c:c8:
03:25:72:8c:66:24:55:67:e0:35:d2:7e:5a:bd:5e:ef:d1:7a:
03:2b:af:72:68:a3:81:db:a7:f8:d1:48:3b:db:6e:52:1a:f9:
13:d6:1f:83:ca:f0:0a:a0:e4:48:9f:17:66:4d:a2:97:c0:67:
5f:f7:ac:cf:e7:6f:c2:ca:db:cc:b4:53:08:db:55:07:7b:39:
84:3b:e8:a7:db:cd:62:6e:e2:c5:65:06:58:14:41:da:d5:cd:
08:4a:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:01:30 2024 by rpki-client on console-fra.rpki-client.org