Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4eqJRfDfJgyfFr1YGCri3I8EB-s.roa
File: 4eqJRfDfJgyfFr1YGCri3I8EB-s.roa (raw, json)
Hash identifier: L0s3J70yqpyTLJUuSH2xu4tRfb4EC9f5GwgPHkCVB8I=
Subject key identifier: E1:EA:89:45:F0:DF:26:0C:9F:16:BD:58:18:2A:E2:DC:8F:04:07:EB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC794446452E1AC9F39EBE3C6378DC6AF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4eqJRfDfJgyfFr1YGCri3I8EB-s.roa
Signing time: Tue 02 Jan 2024 00:30:31 +0000
ROA not before: Tue 02 Jan 2024 00:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26476
IP address blocks: 77.67.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:44:64:52:e1:ac:9f:39:eb:e3:c6:37:8d:c6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1ea8945f0df260c9f16bd58182ae2dc8f0407eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:37:af:e3:36:d3:49:35:f7:7b:94:d3:94:
73:8a:28:a1:74:9f:ec:7a:f0:0b:95:b9:58:1c:9f:
87:59:f8:be:2a:4f:a9:b1:43:0d:ce:8a:d1:60:87:
4b:01:0f:e3:6b:bf:14:05:9a:8d:81:b3:d4:89:1d:
64:28:dd:b0:87:7a:41:c1:5f:cd:d4:a9:5b:c1:f2:
5f:a4:b7:13:46:b8:1c:79:27:34:91:4a:cb:cd:85:
fe:9f:7f:e9:8d:5f:12:48:a4:0e:b3:55:cc:cd:43:
8c:f5:b4:82:48:eb:5f:47:27:01:d7:24:16:2c:e8:
a9:15:ac:d3:0e:b4:bb:c8:1d:6c:a0:5d:e6:3e:9b:
96:71:8f:62:92:02:12:15:64:a0:71:25:e0:ff:48:
15:e5:db:b3:4e:74:f0:97:13:71:14:c3:8e:08:35:
d1:fb:4c:63:91:1e:0b:26:45:26:bf:16:f5:e5:2f:
5a:d0:3c:43:d3:29:46:9f:56:7c:df:a0:fe:d9:48:
c0:75:ff:d0:e6:d6:8f:7a:c6:63:04:08:19:4f:5c:
21:73:41:e4:32:0f:43:ab:21:bb:a9:8d:4b:03:b5:
52:45:df:19:7d:12:6c:0b:46:41:17:d2:02:7c:ae:
88:b8:3d:27:65:30:9e:ad:a3:bc:79:25:11:1f:a3:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:89:45:F0:DF:26:0C:9F:16:BD:58:18:2A:E2:DC:8F:04:07:EB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4eqJRfDfJgyfFr1YGCri3I8EB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:07:65:85:0a:07:b9:65:73:51:92:2a:15:7a:08:7e:2d:ee:
50:36:17:3a:8b:6f:67:f3:9a:3d:fc:6b:47:5b:ea:88:a7:21:
95:cc:6f:1a:c4:83:26:ba:86:6d:07:2f:1c:e4:83:8a:2d:08:
04:1e:0b:10:a6:5b:9a:28:99:75:ac:9b:da:cd:ab:59:a7:f6:
89:15:d9:97:d1:82:46:ed:dc:24:85:7c:a8:94:7c:63:9e:7f:
02:52:67:2a:b5:8e:27:47:cb:80:0f:a1:1f:6e:64:57:fd:93:
e0:9f:37:3e:ea:5f:99:97:57:3d:d0:3e:52:99:0e:e4:cd:c0:
61:8c:66:b6:c9:75:b0:22:5e:82:f0:87:5c:0f:d9:59:52:04:
e0:7c:e2:47:63:f8:50:fc:e1:aa:84:6e:89:2b:cc:41:0c:30:
58:7e:23:9c:26:90:42:b7:0e:6a:c0:83:09:e4:86:c8:94:65:
27:7d:89:b0:f8:bf:8a:92:22:ba:98:39:3e:79:75:07:a8:07:
a0:83:18:23:9f:96:cf:e0:c0:2e:83:ad:32:c0:2a:ff:98:6d:
db:5f:38:ba:8d:2b:8b:9e:74:4f:99:fc:f9:b7:93:2d:7b:d8:
8f:9b:96:08:c2:26:3e:45:d3:af:d4:66:a6:36:a0:02:10:85:
6d:63:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:30:17 2024 by rpki-client on console-fra.rpki-client.org