Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa
File: nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa (raw, json)
Hash identifier: uJVn/a2pRVY++zObgnKFP8ShblwX/c0Fyji2zoPxzak=
Subject key identifier: 9D:85:1F:D4:1A:6A:AB:0F:35:3C:86:0C:3F:BC:C7:23:C2:CF:09:B1
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 018CC94ABD20B26EEFC6915CF37516CD210B
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa
Signing time: Tue 02 Jan 2024 08:29:27 +0000
ROA not before: Tue 02 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 77.236.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bd:20:b2:6e:ef:c6:91:5c:f3:75:16:cd:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jan 2 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d851fd41a6aab0f353c860c3fbcc723c2cf09b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:11:0c:aa:7c:77:b4:2f:01:23:d2:b6:f4:
65:7e:74:47:0c:42:85:65:7c:37:c9:cb:54:f4:64:
c2:0a:9b:d5:71:4f:59:8c:74:33:6f:39:9f:4e:fb:
e5:5c:3c:51:2b:92:a0:49:1d:08:87:e9:3c:20:5e:
13:06:af:2c:94:3b:81:53:da:0e:ad:dd:b8:49:ec:
a6:12:57:1a:7d:7c:c4:43:9d:96:ad:78:59:6f:a8:
58:61:6f:0b:38:38:d3:86:2d:75:29:f6:2a:e8:b3:
4c:05:bd:92:f9:1c:39:b4:1c:da:c1:93:c1:6d:a3:
a9:8b:a6:54:66:88:40:f3:36:6b:80:84:cc:e6:f6:
81:3b:37:f0:89:4c:ee:e4:99:83:35:92:96:58:8f:
28:3c:ef:ce:82:d7:c5:ba:fa:3f:65:6b:ab:54:c0:
7f:c9:a1:13:a0:cf:ea:54:fa:2e:c8:0c:e0:76:43:
86:be:f6:01:83:72:ba:bf:88:71:c5:80:68:ff:6c:
90:1c:db:bd:e0:6a:b3:df:ad:8a:02:16:39:17:f8:
4a:bf:4b:a8:79:60:40:b5:2b:2b:14:cb:f2:27:3d:
ed:b7:8f:07:de:ba:bd:eb:3b:f9:e5:0c:3e:34:65:
39:e0:35:db:e8:b9:5e:34:42:5a:a1:17:d4:bf:32:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:1F:D4:1A:6A:AB:0F:35:3C:86:0C:3F:BC:C7:23:C2:CF:09:B1
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.236.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:53:1b:a3:2a:f6:66:9a:08:b6:48:b1:f2:57:ca:de:a0:dc:
58:91:c0:e9:73:c9:be:41:ed:4e:88:92:00:27:47:8a:9c:6d:
69:48:87:f2:73:fc:2e:4c:3d:b9:30:65:c2:fe:88:3f:70:02:
8d:1d:f6:55:95:f5:29:e0:55:da:ce:20:f2:8c:f9:28:af:ff:
f4:a2:82:fa:6f:0f:95:59:e8:a3:e1:5c:2c:94:f8:a3:66:6f:
ba:07:b9:df:01:67:54:a9:d4:72:16:72:cf:f0:d3:38:f1:6f:
a1:ed:61:9d:1b:ea:d8:6e:b7:94:08:36:9c:af:43:54:44:b5:
25:17:42:21:0e:15:dd:ca:5f:3a:4d:37:32:9c:f2:2d:13:44:
3d:6f:32:db:29:74:bb:79:00:ca:68:13:71:eb:48:7d:fd:7b:
99:66:82:fa:e6:ba:78:04:22:78:5a:53:3b:47:5d:22:59:8c:
24:ac:44:77:43:43:1a:47:28:d6:7d:3b:6a:2d:2e:e3:e0:ee:
ce:42:bf:29:59:e9:0d:2a:56:ab:f8:24:d0:40:6d:09:9b:76:
8f:84:0e:7d:a5:0b:e9:39:74:e7:2e:a6:bf:09:93:c4:8d:e5:
4d:92:f3:0e:45:08:7c:ca:66:7b:84:cf:6b:e8:b5:9c:80:5e:
9f:76:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:53:31 2024 by rpki-client on console-ams.rpki-client.org