Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/KEtFLcWdW2NfyrL58IbivTqYHww.roa
File: KEtFLcWdW2NfyrL58IbivTqYHww.roa (raw, json)
Hash identifier: vK3Fj/ae94GAWpas1F8in1reLGo58MXXdNpnFY761AQ=
Subject key identifier: 28:4B:45:2D:C5:9D:5B:63:5F:CA:B2:F9:F0:86:E2:BD:3A:98:1F:0C
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 018CCA2A90C0E8839C6A7E8C152049CE9D1F
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/KEtFLcWdW2NfyrL58IbivTqYHww.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56340
IP address blocks: 77.91.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:90:c0:e8:83:9c:6a:7e:8c:15:20:49:ce:9d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=284b452dc59d5b635fcab2f9f086e2bd3a981f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:db:7b:01:84:7d:19:fb:42:b4:76:a9:bf:
90:a3:ec:a9:b1:28:3b:e3:d2:7e:f3:b7:da:e3:e3:
48:28:d4:c1:35:27:6b:bc:18:7c:80:6a:ce:ef:b6:
26:f8:98:3e:45:09:ae:af:f0:23:c1:e4:e5:7d:11:
04:81:65:96:1c:a9:2d:10:18:de:cf:f5:c9:63:36:
fe:d6:7b:14:1c:20:78:15:e8:83:90:f7:71:31:5c:
61:a0:1a:03:57:26:7c:a7:fd:34:00:87:0b:9a:40:
67:74:50:e1:c6:8a:5a:61:30:10:f3:56:1c:8b:a9:
60:40:10:00:d1:8d:3f:68:4f:14:50:89:4e:ec:32:
eb:97:32:85:cb:4d:7f:7d:5a:d9:a7:dc:76:16:51:
5c:d8:e9:8b:1d:7c:4a:34:f1:80:58:fa:cd:60:30:
02:ff:e6:92:ae:90:7a:1e:b0:f8:04:8c:66:3d:40:
be:10:d3:2f:b9:58:11:ab:32:b1:b9:8e:57:ff:43:
69:48:44:c2:85:2a:94:82:b5:d0:22:69:3a:13:06:
3a:37:c9:16:52:d5:84:cf:2d:a0:26:c7:a4:45:e1:
f7:49:80:f5:03:e9:e0:42:a4:e5:41:df:86:bd:cb:
24:ab:68:70:84:52:4e:23:2b:36:8b:77:e3:4d:74:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:45:2D:C5:9D:5B:63:5F:CA:B2:F9:F0:86:E2:BD:3A:98:1F:0C
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/KEtFLcWdW2NfyrL58IbivTqYHww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.104.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:d3:33:f3:c7:62:b7:e7:07:89:8b:24:8d:03:d4:92:5a:8a:
72:ee:c6:1a:d5:6b:de:e6:24:f2:99:5f:d6:60:40:19:6b:70:
bb:21:85:3f:55:d1:9f:74:0f:13:68:c9:51:f0:a0:c0:77:13:
b6:4c:08:14:fe:d4:2f:20:14:16:37:c0:43:04:66:64:11:cc:
80:5c:59:aa:bb:31:2b:62:02:31:fe:50:38:a7:35:13:f9:85:
f6:e5:7b:41:29:6f:7e:2d:4c:07:34:9d:cd:aa:69:16:20:cf:
1b:fe:26:75:e8:41:00:1c:33:f1:b9:0f:9e:df:fc:69:5c:1f:
a9:7b:ac:2a:4d:a2:6f:01:82:a6:07:a6:b9:06:13:cb:00:56:
d0:90:bf:50:c3:4b:20:1d:2d:d5:80:d3:b3:8b:66:74:f8:99:
d8:a3:5c:db:e2:74:38:42:d2:a2:c0:e1:91:79:69:30:0b:2b:
71:32:cf:35:7d:67:6b:4e:31:e2:0f:b1:4b:53:11:6f:17:a4:
32:b2:c0:dd:db:8a:5e:4a:72:12:f4:c6:8d:ec:8b:d6:04:0d:
5d:0c:69:5e:6c:25:1e:04:22:07:fe:2b:71:7f:54:97:5e:33:
4a:a4:96:4b:58:c8:ff:c0:07:b4:3b:f0:34:f3:59:86:c9:11:
a4:b9:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:03 2024 by rpki-client on console-fra.rpki-client.org