Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Nx9k4CyUiUrRiAGsf6rug4g0Rpw.roa
File: Nx9k4CyUiUrRiAGsf6rug4g0Rpw.roa (raw, json)
Hash identifier: 25wVd7RzxgJuEwsBdJCBzWWkA3MdA05maSSx2wTbuMk=
Subject key identifier: 37:1F:64:E0:2C:94:89:4A:D1:88:01:AC:7F:AA:EE:83:88:34:46:9C
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 018CC2DB5C2AEB2D201E9E56A72ACD3874EC
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Nx9k4CyUiUrRiAGsf6rug4g0Rpw.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34854
IP address blocks: 77.73.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5c:2a:eb:2d:20:1e:9e:56:a7:2a:cd:38:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=371f64e02c94894ad18801ac7faaee838834469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:b2:ab:61:eb:76:02:f9:01:50:55:32:5c:
7a:02:7c:fb:fb:14:af:9d:05:d1:84:b4:56:65:8e:
ff:28:53:6e:d6:a6:7a:c7:1d:29:72:db:da:94:90:
16:a5:fd:8d:1b:e5:90:28:bf:39:26:aa:b8:24:c9:
9e:3f:b9:ef:c8:27:39:a0:c3:87:b7:af:ac:f8:9c:
2f:b5:09:98:00:cb:a9:4b:c6:5d:16:8c:43:9b:7e:
de:eb:f3:dd:b0:d2:22:df:20:ee:0e:61:72:15:34:
f4:6b:15:cc:ce:a8:88:58:af:3c:9c:0c:8b:bc:6f:
bd:c1:c6:f1:88:1a:ef:ac:f1:31:6f:7b:00:53:f8:
89:84:fc:56:6c:ba:6e:eb:37:ee:df:30:1d:bb:03:
72:cc:78:89:9a:70:72:2a:38:3b:0a:0c:79:f1:04:
06:0d:12:d4:ff:09:34:03:8d:6d:22:35:76:9a:26:
0d:7e:b4:d7:69:3a:cd:5e:e2:eb:bb:7d:fd:9e:77:
5a:0c:9e:f5:01:da:0f:ac:34:e5:7d:16:cc:4c:ac:
af:81:b3:6e:aa:44:cb:98:af:b8:ae:29:ef:23:04:
18:ae:d8:f7:4e:80:85:a1:13:bc:6b:c0:20:ec:22:
ef:eb:dc:c8:30:6c:d7:ee:47:ae:91:e9:26:8e:39:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:64:E0:2C:94:89:4A:D1:88:01:AC:7F:AA:EE:83:88:34:46:9C
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Nx9k4CyUiUrRiAGsf6rug4g0Rpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.35.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fe:f2:ae:b8:63:f0:21:82:17:28:b5:a5:ff:69:30:85:b9:
02:23:63:e8:50:2d:d4:09:e7:1c:1a:ad:02:36:ea:4a:66:82:
d3:5a:e6:cf:8f:64:ee:aa:a7:2c:ad:0e:57:b0:9f:09:b0:25:
8b:65:f2:b8:2f:44:ac:b5:ff:48:7e:6f:fa:67:d0:36:29:e2:
f0:5d:db:ec:69:a7:12:60:8c:c5:18:f8:b5:a9:95:05:92:03:
77:18:3d:bf:c9:13:ec:67:c7:1a:c0:7d:9e:7d:c8:78:c2:6e:
f9:96:75:b2:da:c3:41:55:8b:b1:b1:1f:40:9f:4e:fe:d4:c7:
57:db:eb:e6:11:b6:f5:b9:2b:6c:85:b2:40:40:0a:75:a9:4b:
08:8a:78:df:d6:91:09:5b:14:77:8b:41:2f:37:8a:6c:94:b0:
81:22:9d:c6:64:7c:c6:e8:7d:52:e5:53:48:3e:d0:27:a1:62:
5f:0e:2c:c2:64:cf:ec:0b:dd:55:dc:fa:9c:02:1b:22:e6:c9:
a3:da:95:53:d3:c2:6f:16:04:5f:c8:a1:ae:e6:9a:f3:0d:87:
5e:32:4b:90:d6:08:23:c0:03:66:2c:10:4c:80:7a:9f:ef:32:
58:33:e2:82:78:67:85:fa:94:b8:fe:35:e4:28:3b:03:b1:ed:
a3:9b:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:04:14 2024 by rpki-client on console-ams.rpki-client.org