Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/thfwafdzfNO6wve8VD_S0heqjpg.roa
File: thfwafdzfNO6wve8VD_S0heqjpg.roa (raw, json)
Hash identifier: sX5DgxikpM6Q3W293F8mCoIrlVFLlJF4kx1FfontnZk=
Subject key identifier: B6:17:F0:69:F7:73:7C:D3:BA:C2:F7:BC:54:3F:D2:D2:17:AA:8E:98
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 018CC72765F4D29A81734B633BF3FFFA57B3
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/thfwafdzfNO6wve8VD_S0heqjpg.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198149
IP address blocks: 77.246.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:65:f4:d2:9a:81:73:4b:63:3b:f3:ff:fa:57:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b617f069f7737cd3bac2f7bc543fd2d217aa8e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:c4:fa:37:17:e9:46:fd:55:ad:47:7b:b9:
ab:77:e7:8e:21:27:b8:57:ec:1f:d1:bd:f7:af:5c:
19:fd:81:71:14:ab:2b:47:b1:01:76:e8:49:51:4a:
41:1d:ab:66:26:e7:a5:78:10:d7:f5:85:5b:87:0b:
27:50:04:2b:16:41:04:93:97:5c:22:ce:90:ef:6e:
94:5a:f7:d6:85:f4:04:f4:1a:b0:6c:66:2d:90:16:
a2:b4:a1:b4:8f:c9:bd:58:66:46:27:46:a8:a1:d2:
da:63:92:92:1c:f6:21:62:44:67:a4:f3:76:b2:8b:
75:2d:bb:72:a2:40:5c:20:02:ea:ae:53:ac:11:e3:
68:58:7d:7c:26:bc:56:b5:36:c1:76:f7:ab:b8:96:
13:0b:01:48:e7:57:a6:81:5c:a5:c0:2e:2c:28:eb:
01:96:a8:74:90:4a:6f:4c:59:b1:44:c1:3b:87:f6:
c3:1b:06:3a:a1:26:fa:08:fd:1b:be:c7:49:4a:6d:
42:44:b9:60:ce:25:3e:55:7a:92:08:68:cb:d7:58:
f3:aa:2a:63:38:b3:bb:64:d2:12:9f:14:3a:92:b0:
be:9a:b9:3b:88:7b:09:e0:b8:5f:c6:f9:6b:b7:83:
2c:1c:e2:7d:d4:67:7b:36:cc:00:4a:0e:ee:98:7f:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:F0:69:F7:73:7C:D3:BA:C2:F7:BC:54:3F:D2:D2:17:AA:8E:98
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/thfwafdzfNO6wve8VD_S0heqjpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.177.0/24
Signature Algorithm: sha256WithRSAEncryption
86:27:42:f9:4a:75:19:58:e5:eb:95:63:f4:54:2d:21:02:f7:
25:56:a9:91:ba:5f:43:bf:7e:33:32:c3:00:64:bb:c1:8e:c2:
84:97:e8:61:00:f7:66:08:8f:fb:9f:63:c7:00:8a:8d:0c:29:
92:e5:26:86:ab:24:b3:31:8d:da:ed:7b:e7:ab:60:77:b7:ff:
52:71:22:8a:2b:85:8c:2c:07:68:0e:43:94:72:cc:7c:79:58:
e4:32:86:ad:c3:a8:10:98:02:9b:84:9f:f8:69:28:08:58:13:
61:04:92:44:08:bc:4c:d7:85:f3:7b:58:0b:13:3a:90:db:5d:
5d:b0:73:b6:af:ed:96:68:ae:3a:ea:e5:3f:ea:40:a7:90:55:
e5:aa:b9:f9:7f:49:26:59:60:e2:de:d5:7a:b2:64:39:c5:4f:
66:dd:af:bf:82:a6:25:52:ab:dc:b2:20:bf:0a:f7:43:9b:ae:
4a:b7:b5:62:0e:1b:0b:25:e4:a3:4e:76:89:ec:39:c5:63:a2:
56:63:51:9f:73:b4:ab:d5:63:0c:22:9c:db:69:d5:1b:e0:2c:
99:a8:81:53:33:50:4b:a5:ec:aa:a5:be:2b:57:dc:51:14:eb:
75:a0:5a:6c:cd:14:60:fe:3c:5c:6a:c7:f7:c8:b0:30:34:b3:
c5:62:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:18:56 2024 by rpki-client on console-ams.rpki-client.org