Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/exPc0bZCYDlmv1W-kR67j4h7OhU.roa
File: exPc0bZCYDlmv1W-kR67j4h7OhU.roa (raw, json)
Hash identifier: mMFSebYB3sYo7j971q3JY+DWFuT1ZzOomrkIzj9FEWE=
Subject key identifier: 7B:13:DC:D1:B6:42:60:39:66:BF:55:BE:91:1E:BB:8F:88:7B:3A:15
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E0C375B30CA3B7543A20D9E7B3AC1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/exPc0bZCYDlmv1W-kR67j4h7OhU.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27796
IP address blocks: 201.77.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0c:37:5b:30:ca:3b:75:43:a2:0d:9e:7b:3a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b13dcd1b642603966bf55be911ebb8f887b3a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:1c:e6:d2:ec:4b:66:5d:ed:9a:88:80:8c:
33:6a:3a:c3:6e:d2:12:74:9a:2d:6a:fe:87:71:a9:
7f:32:bc:fc:ac:52:ef:52:96:85:e9:77:b7:65:d9:
db:17:48:79:2f:d2:dd:d9:90:41:61:90:ea:ad:0c:
33:3a:33:a6:aa:1a:f1:2d:d3:f0:d2:a7:a0:ce:c5:
9f:8e:30:f5:03:d6:45:b6:79:64:ef:80:9c:08:e0:
35:9f:d7:f7:8a:13:3a:d0:94:03:97:d9:8c:ee:44:
b5:2a:13:8b:5c:7a:3e:b1:92:b9:32:6b:f5:c3:6d:
da:ad:89:95:ad:7e:6b:5e:e6:79:bd:03:44:72:25:
09:30:94:55:a9:92:45:3d:e0:c2:27:d2:12:0a:ab:
72:8b:94:ab:fe:5b:1e:74:5f:82:ee:53:d8:d3:47:
ae:d8:57:9c:9b:8b:56:b3:67:66:e1:33:65:1f:5d:
fd:6c:55:e2:38:10:ad:18:af:86:1f:37:3a:c4:e9:
3d:bc:dc:5a:30:c7:4a:2e:e6:a8:2c:26:88:60:13:
6c:bc:31:f4:2f:8c:45:0c:c5:1d:f2:d1:c8:7d:9a:
23:1d:d9:35:27:83:f0:3e:91:2f:4b:84:d0:6f:ea:
48:86:62:1f:33:c7:e6:c9:fa:6a:c5:f5:d0:ae:ae:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:DC:D1:B6:42:60:39:66:BF:55:BE:91:1E:BB:8F:88:7B:3A:15
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/exPc0bZCYDlmv1W-kR67j4h7OhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cf:ca:f3:cb:ef:39:b6:9d:ef:6a:32:63:9d:df:db:1f:6e:
24:80:bd:d9:c4:13:50:df:43:50:bd:34:9c:ff:fd:6c:a1:bf:
ae:81:5e:1a:5f:23:de:8c:b8:c3:b2:68:a7:cb:75:64:83:d1:
e8:d5:85:b8:48:8e:b0:43:a4:13:dd:9b:94:73:75:ae:10:12:
3d:3d:c1:fa:0d:93:ca:23:b8:4c:03:5d:13:17:7e:c7:de:f9:
72:71:f7:8d:af:18:a0:e6:e0:41:66:15:fa:ad:27:ba:62:c1:
ee:62:f8:31:60:b0:f8:2b:c2:cf:f5:d6:e4:e2:c0:7e:42:ad:
bb:5c:65:92:12:9c:48:4a:0c:60:81:05:7b:fd:cd:29:14:05:
99:72:8c:eb:eb:e7:32:5c:01:cc:aa:dd:b8:ee:b0:5a:de:7d:
94:2c:42:9a:fc:c6:58:a2:f2:af:64:5d:8f:28:7c:2d:45:39:
2d:7f:c4:c7:ae:d4:a7:27:76:e6:0d:b4:4a:14:d0:c3:ea:6b:
65:31:37:0e:2c:d3:9d:17:71:0b:75:0c:ff:9c:b0:56:d9:aa:
8e:82:ec:d0:ab:42:3e:2c:19:e1:c7:c1:36:85:aa:5b:57:2f:
c4:eb:91:3d:70:44:f5:98:f7:a4:63:25:d2:30:50:84:c1:01:
97:72:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:25 2024 by rpki-client on console-ams.rpki-client.org