Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/xGqTssPdc0HQIXMaXlM8FxqPKWQ.roa
File: xGqTssPdc0HQIXMaXlM8FxqPKWQ.roa (raw, json)
Hash identifier: vnJWf0vd6mz3lkLzII6SdZ7Mubv2QLqZWqc7kvoMMCg=
Subject key identifier: C4:6A:93:B2:C3:DD:73:41:D0:21:73:1A:5E:53:3C:17:1A:8F:29:64
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 018CC6B90FA61121F2A415271DD99F2AE942
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/xGqTssPdc0HQIXMaXlM8FxqPKWQ.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 185.77.1.0/24 maxlen: 24
185.77.2.0/24 maxlen: 24
2a05:5ec5::/32 maxlen: 32
2a05:5ec0:1::/48 maxlen: 48
2a05:5ec7::/32 maxlen: 32
2a05:5ec0::/29 maxlen: 29
2a05:5ec1::/32 maxlen: 32
2a05:5ec6::/32 maxlen: 32
2a05:5ec4::/32 maxlen: 32
2a05:5ec2::/32 maxlen: 32
2a05:5ec3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0f:a6:11:21:f2:a4:15:27:1d:d9:9f:2a:e9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c46a93b2c3dd7341d021731a5e533c171a8f2964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:cb:1e:2b:9c:9a:03:e2:f3:1c:3e:b1:93:
fa:d3:ae:5b:94:ed:1c:56:bd:cf:8e:40:6d:74:14:
92:9c:95:8d:d1:84:32:81:1b:97:d6:50:eb:55:8c:
f9:bc:7a:03:ad:39:42:4e:56:1b:63:c7:a2:22:9d:
11:d1:b0:97:7a:dc:3c:13:28:5e:cb:57:71:45:d0:
f0:d4:0f:b5:8a:17:15:83:01:46:70:f9:bc:ee:d6:
e9:c4:b3:e4:f2:f4:c1:4e:7b:7a:43:db:ae:33:a4:
99:81:42:74:2e:84:1e:f3:5e:16:6b:c9:39:91:b1:
76:45:c1:87:74:e0:01:59:c2:9e:e1:90:ad:6a:3f:
bd:2b:41:45:45:4b:7b:22:d1:f3:e2:1c:d8:02:68:
7e:98:10:4e:af:c4:99:24:18:5d:3c:7e:f3:9b:ff:
0a:1f:5b:e2:31:9c:24:8d:23:d8:39:f9:7c:74:a4:
16:c8:15:ee:23:26:1d:a1:cd:7a:8a:d3:50:da:f2:
27:42:45:94:34:9e:9a:0e:47:ac:83:37:5d:27:5b:
df:04:d0:40:3c:10:d3:c4:5d:93:c7:64:7d:5a:4d:
58:3a:e3:1a:57:c7:24:89:80:1d:73:c8:e4:69:57:
02:dc:7d:f7:c3:66:27:b8:b2:86:e2:9b:d6:21:3e:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:93:B2:C3:DD:73:41:D0:21:73:1A:5E:53:3C:17:1A:8F:29:64
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/xGqTssPdc0HQIXMaXlM8FxqPKWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.1.0-185.77.2.255
IPv6:
2a05:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
87:a1:82:0e:f3:d6:c9:29:f2:2f:50:d7:d9:3d:18:a9:b4:3b:
9f:a5:60:f6:92:7c:2a:56:ff:d9:c6:b9:cb:dc:e3:89:29:0b:
2e:a1:5e:08:68:dc:0f:bc:b2:fb:6c:7b:55:c0:3f:0a:32:26:
3e:67:2b:15:70:04:0e:18:c5:5e:2d:16:a6:f5:a6:2b:8c:3a:
67:cd:28:f7:26:6b:ae:d8:2a:64:d7:e0:49:a9:73:32:40:aa:
cf:3c:be:6f:07:55:5e:e8:eb:2f:af:78:d4:f6:0b:32:c0:34:
60:84:79:b2:33:87:91:ca:28:56:da:e3:32:3d:51:e4:f9:43:
e1:be:03:c8:4e:23:f6:cd:7f:ba:33:cf:5b:4a:cc:7f:48:52:
27:b0:cf:b9:f7:c9:a9:f9:5d:21:75:ec:a1:5e:74:3b:10:fe:
e7:68:96:f6:bc:25:1e:3d:ff:e8:5b:e3:d9:f5:ea:c4:9f:5f:
4a:85:33:35:34:c7:00:87:3b:fb:63:95:c7:9f:ea:92:17:94:
57:82:35:0f:e0:a6:0c:3a:c4:47:ad:89:2b:92:da:a2:31:f1:
80:05:06:0a:8a:83:c1:9d:cb:1c:1f:28:21:62:e4:0d:e4:ad:
4c:2b:e2:4d:7b:76:e9:cc:a0:a5:36:4f:e9:cd:2a:16:6e:c6:
92:6e:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:37:47 2024 by rpki-client on console-fra.rpki-client.org