Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/e2gja3ihAzxaHQ8FeyzhBlPYRzY.roa
File: e2gja3ihAzxaHQ8FeyzhBlPYRzY.roa (raw, json)
Hash identifier: hin8d6fOClepV83hOwCqcFQsKNsiai5Da9FL2chJKbA=
Subject key identifier: 7B:68:23:6B:78:A1:03:3C:5A:1D:0F:05:7B:2C:E1:06:53:D8:47:36
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 018CC94D99F714C95A21B91FD3F631D104DD
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/e2gja3ihAzxaHQ8FeyzhBlPYRzY.roa
Signing time: Tue 02 Jan 2024 08:32:35 +0000
ROA not before: Tue 02 Jan 2024 08:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197248
IP address blocks: 77.221.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:99:f7:14:c9:5a:21:b9:1f:d3:f6:31:d1:04:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 2 08:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b68236b78a1033c5a1d0f057b2ce10653d84736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:ec:0b:a2:da:7f:fa:fc:83:83:42:18:c7:
2a:26:73:1d:18:bc:8d:b8:b4:67:da:20:a4:8b:43:
8a:41:da:8f:35:ae:c5:ac:4a:5a:9f:2b:33:9f:bb:
cd:a3:1d:28:48:f0:87:a9:0a:73:5b:06:3c:6b:f7:
61:d1:b5:1d:23:ed:0c:34:ab:34:73:9b:8f:10:f7:
89:9e:fe:1d:29:6b:1c:37:93:6b:47:f6:d8:a0:a3:
1b:b1:e4:4c:70:c8:89:44:bd:13:b7:cc:23:c3:10:
f8:aa:1f:dd:bd:e1:53:f5:ed:b4:e7:bc:1c:5f:1f:
8d:07:0d:92:96:ea:02:ca:56:e8:c4:77:55:ce:e7:
da:fd:2c:c3:99:36:56:04:03:c6:a5:12:c0:8f:da:
ba:94:ef:72:8c:1b:bc:42:87:41:c4:4a:c8:41:6e:
ab:d3:c9:e7:1b:a0:fe:5c:30:67:5a:c6:b4:37:15:
5e:ef:70:b4:25:b6:17:62:85:7f:0c:f6:01:c3:58:
87:71:d6:c6:5a:17:d9:b1:6d:23:dc:9a:7f:48:c6:
fd:37:a8:d5:6f:a3:9f:6b:3a:a1:a8:60:74:70:c5:
af:c8:86:c7:4a:7b:c1:65:d8:0b:b9:01:68:1d:69:
1f:d4:b2:75:10:cc:c3:30:8e:ec:3e:bc:19:6e:93:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:23:6B:78:A1:03:3C:5A:1D:0F:05:7B:2C:E1:06:53:D8:47:36
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/e2gja3ihAzxaHQ8FeyzhBlPYRzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d1:68:8f:ff:70:e0:8f:9c:f0:1a:da:33:93:44:1f:2f:24:
0f:52:0e:d1:06:1a:53:96:04:3b:60:0c:06:22:2c:ed:47:ce:
e9:02:6b:8c:5b:8e:ed:a1:3f:68:7b:19:51:6b:ed:39:6f:f4:
8e:fc:11:1d:1f:4a:7b:95:7d:9b:62:ba:76:a3:bd:25:57:8e:
a6:04:a0:b3:d3:6f:a3:52:9b:3d:52:8f:e8:d3:c3:52:bf:61:
4f:30:7b:da:88:d3:7f:37:14:3a:34:40:8f:f2:60:42:be:9a:
1c:20:91:03:b7:10:0e:80:a5:e5:24:db:aa:d9:43:46:08:6d:
59:24:49:fa:d8:c9:de:65:7f:8b:7e:05:0c:28:51:3e:30:5a:
0e:43:c4:9b:6b:42:52:c1:fc:b2:46:b6:78:77:fb:21:c1:1a:
a1:e5:02:2e:d3:91:4a:a4:13:e2:29:d4:95:a8:2c:46:93:41:
ed:42:c8:07:bf:17:50:b7:52:31:3b:3f:60:87:d9:bd:46:69:
b4:85:16:c4:9b:52:f0:65:b7:9c:28:e6:d3:de:0e:87:c0:36:
4a:c2:d2:a9:b5:06:56:11:05:ca:43:25:ec:57:2e:52:e5:fa:
e2:c1:a6:54:d7:32:22:9e:fa:81:2a:a2:97:b5:00:3d:af:46:
aa:2c:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:16:16 2024 by rpki-client on console-fra.rpki-client.org