Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e1g1r4XLUoU_hgDjdjaQ7q41180.roa
File: e1g1r4XLUoU_hgDjdjaQ7q41180.roa (raw, json)
Hash identifier: tVTIJWa7+jneDSH/NULkAbb2M50FFHByjIgdegx2g6c=
Subject key identifier: 7B:58:35:AF:85:CB:52:85:3F:86:00:E3:76:36:90:EE:AE:35:D7:CD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF89AC5E86EEC30480E44D9858DA4B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e1g1r4XLUoU_hgDjdjaQ7q41180.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206558
IP address blocks: 77.92.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:89:ac:5e:86:ee:c3:04:80:e4:4d:98:58:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b5835af85cb52853f8600e3763690eeae35d7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:e3:b2:95:37:3d:8e:01:65:38:7c:d9:ba:
97:6a:71:e4:3a:a8:92:3c:a4:65:6f:61:43:cd:91:
00:8a:88:ab:c7:85:4f:71:bb:03:b9:de:21:04:6f:
c4:36:00:8f:69:2b:a7:1d:fc:88:40:7e:48:78:a1:
4e:ec:78:7d:a3:56:80:2c:cf:ab:13:58:be:88:99:
09:f4:48:cd:0b:2b:b1:5c:44:90:45:d4:58:7c:7d:
dc:b3:5d:32:4e:a8:6a:19:72:ac:c8:3c:a3:84:94:
9e:be:63:73:9c:c7:51:19:2e:9e:c1:30:e0:93:79:
0d:7f:13:47:bc:a0:76:bf:63:b0:f3:e8:90:70:74:
0a:cc:69:cd:48:be:80:69:f2:45:93:d2:da:d1:2d:
9e:75:52:fb:03:7d:ae:00:c5:7e:94:7f:20:4c:b2:
6e:df:81:77:44:7a:7d:6d:93:27:0c:90:27:ac:af:
47:29:4f:03:83:cf:a7:db:f6:35:fa:11:59:89:45:
15:7d:7e:f6:82:4b:f6:9e:d7:4b:2b:a9:9f:21:83:
83:7e:ed:8a:01:58:96:bf:80:fc:c7:9b:b9:c0:ee:
ad:bb:9d:db:09:91:ba:42:5c:85:97:db:e5:ae:2b:
c1:07:09:68:10:c9:36:2d:2e:8b:fa:26:c1:85:d2:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:35:AF:85:CB:52:85:3F:86:00:E3:76:36:90:EE:AE:35:D7:CD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e1g1r4XLUoU_hgDjdjaQ7q41180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.150.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a8:75:75:16:01:27:c1:df:2a:e2:6b:1e:ae:fc:c5:c7:34:
37:dd:e2:51:93:1d:d8:ef:20:6b:3d:8a:e0:a5:6c:78:aa:81:
4f:1a:00:e6:8d:68:90:f8:5d:fb:df:42:1f:89:c8:51:54:64:
36:3e:69:ac:4c:33:0e:d1:85:96:37:75:91:b9:65:40:47:87:
20:f2:37:1f:40:e3:14:3a:34:a8:58:4d:31:15:39:f1:72:d3:
71:a8:eb:ba:58:46:8e:a6:84:ab:91:4f:b6:f5:8e:03:f6:00:
27:13:f9:0a:f9:2f:92:ef:1d:a2:8a:1e:60:b5:7e:7a:17:80:
aa:c0:70:58:de:49:57:4a:6c:19:02:e3:99:0b:43:da:a2:a1:
4f:91:a4:46:3e:71:cd:cb:e8:f6:af:99:47:ea:22:7a:c6:fd:
88:bf:ef:01:08:27:65:fb:e9:5b:57:4e:19:95:d9:c8:47:6c:
7f:53:e8:81:1c:8b:c8:db:d2:6a:8a:27:c4:dd:49:d1:5b:f2:
d3:c0:b8:22:a1:a3:7f:78:42:ce:8e:b0:4d:41:6e:ed:21:84:
af:6b:73:3f:58:ed:e5:48:23:46:d2:3d:b1:c1:8a:20:59:a2:
96:f9:d4:4e:6a:70:12:44:80:84:3d:6a:70:47:59:3a:7d:e3:
f8:99:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:48 2024 by rpki-client on console-ams.rpki-client.org