Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/RAISDF8XiD52GdsvcjRxuuRxdUc.roa
File: RAISDF8XiD52GdsvcjRxuuRxdUc.roa (raw, json)
Hash identifier: SJbaMr9n5q3O/d3FRzvj0ztnpB62wdMVdFLUxUlQkwA=
Subject key identifier: 44:02:12:0C:5F:17:88:3E:76:19:DB:2F:72:34:71:BA:E4:71:75:47
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 018CC26D407894322BF79D846688CA4BBED2
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/RAISDF8XiD52GdsvcjRxuuRxdUc.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208925
IP address blocks: 91.237.87.0/24 maxlen: 24
37.77.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:78:94:32:2b:f7:9d:84:66:88:ca:4b:be:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4402120c5f17883e7619db2f723471bae4717547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:8b:58:ec:97:0c:7a:6f:b0:10:77:85:2f:
66:36:94:5f:98:5f:2e:d9:5b:97:da:4a:9e:25:d0:
90:a1:bc:e5:d0:39:55:1b:59:16:7d:4c:1f:c4:3c:
95:01:28:32:9b:7c:78:23:88:46:60:48:90:07:95:
8e:e8:a3:fe:70:3f:fe:71:d3:1c:ee:94:04:5b:79:
40:a0:bf:3f:8c:b1:df:1b:be:79:10:d9:13:0b:5a:
6f:96:eb:f4:5b:52:02:e3:17:02:c6:8b:de:da:a8:
d9:ab:cc:8b:8d:6a:bd:82:ed:da:9f:c2:4a:53:8f:
f2:3c:d3:02:52:2a:61:21:5a:02:d7:67:75:3f:69:
64:21:55:dd:a5:5e:50:bf:11:e3:38:91:dd:06:af:
d0:bf:7e:a1:1c:85:05:7a:e8:94:2c:72:a4:54:d5:
be:34:63:a8:88:b2:2c:24:bd:5a:c7:4f:3f:3b:00:
c5:e7:fc:e1:f1:36:bc:71:ca:74:6c:36:f9:22:a6:
8e:d4:02:c4:27:5c:a6:25:f2:d0:cd:6a:86:9b:27:
ab:0b:a4:21:c4:a1:4a:83:8f:0f:c1:21:59:75:dd:
8a:8e:72:f9:02:42:41:6c:f5:40:cc:2c:86:1e:da:
15:3a:a6:38:cd:3e:91:e0:3b:5a:39:2c:1c:dd:ae:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:12:0C:5F:17:88:3E:76:19:DB:2F:72:34:71:BA:E4:71:75:47
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/RAISDF8XiD52GdsvcjRxuuRxdUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.149.0/24
91.237.87.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e1:ff:8e:9e:4d:f2:06:4a:9e:c0:5a:1e:4d:40:ca:93:c6:
ff:e5:32:17:d3:30:72:af:a7:99:3b:f0:d5:6e:cb:25:da:50:
a6:0b:e0:4b:41:6b:a5:a3:14:03:53:fa:6b:69:4f:dc:63:fc:
6a:c9:eb:5c:c3:a2:21:e6:50:f4:70:94:7c:30:97:0a:b7:47:
5c:0a:74:79:33:d9:6d:53:46:0e:21:0f:aa:60:76:96:1c:c4:
10:5c:45:9d:56:2d:53:c9:2d:e2:a8:26:6f:18:6f:75:9e:8b:
e1:6c:36:cc:00:61:91:fa:c6:3e:a2:21:6e:f9:57:f8:c5:60:
29:3e:7a:2c:44:3a:c9:ca:7d:31:7a:75:ae:56:b1:ce:4f:55:
79:dc:82:4c:d7:9f:b1:37:4e:a0:ae:eb:64:cd:78:21:e0:01:
13:8e:2a:5a:e3:a3:40:33:64:97:c7:b0:e6:fe:95:cc:a0:f9:
af:e8:3f:9f:53:d5:df:07:b8:fe:e4:dc:40:72:12:bc:d8:0e:
e1:c1:62:fc:2d:bf:62:43:9f:c4:89:66:fb:e7:f9:24:4a:3b:
bc:e8:d1:bf:84:8e:1d:df:6a:14:64:b0:5d:8c:c7:2a:3f:5a:
25:ba:c4:67:49:cf:72:0a:94:a0:2a:50:cb:b4:ba:cd:ff:ed:
e8:98:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:02 2024 by rpki-client on console-ams.rpki-client.org