Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Rh_yp5j1Ix9LOPe96B_dM9VeoU.roa
File: 7Rh_yp5j1Ix9LOPe96B_dM9VeoU.roa (raw, json)
Hash identifier: 9BhBuFmcxzELRKuMzap9dtgQbzx0+ISohpwTPkCUVEI=
Subject key identifier: ED:18:7F:CA:9E:63:D4:8C:7D:2C:E3:DE:F7:A0:7F:74:CF:55:7A:85
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DACD18569BE2063B699E16C57F5E37
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Rh_yp5j1Ix9LOPe96B_dM9VeoU.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34903
IP address blocks: 82.177.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:18:56:9b:e2:06:3b:69:9e:16:c5:7f:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed187fca9e63d48c7d2ce3def7a07f74cf557a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ee:f8:d3:5b:76:00:a2:5d:b2:38:0e:0e:f2:
a1:33:4e:9a:77:d9:89:0b:cc:fb:06:52:d5:93:c1:
27:f9:87:38:a7:56:b1:87:e6:47:5f:0d:4a:01:89:
eb:ca:03:4e:4a:57:0b:ff:f9:bf:4b:6d:6e:e0:7d:
f8:c0:14:22:c2:61:f7:3a:fb:9b:21:38:d6:3d:34:
7c:07:bb:75:59:3c:83:3c:bc:4b:00:c6:12:10:43:
17:d5:c4:43:bb:d8:93:df:f3:a6:79:24:97:b7:d9:
fc:20:39:7d:83:4d:86:f7:36:5c:b4:ad:3e:62:a2:
b8:f4:f3:f8:e1:62:74:15:aa:f7:4d:aa:8d:13:1f:
10:19:f5:5f:fc:f2:25:19:41:8d:80:f4:32:1b:17:
50:99:c1:bf:4d:6d:62:d4:ab:b3:e5:b8:0a:c5:44:
5e:2c:c0:e9:15:d9:9c:b3:00:23:1f:12:8c:b0:8b:
a1:83:26:1f:ed:a4:2f:c9:e3:67:01:06:0d:57:68:
f7:0a:37:40:4e:bc:86:73:7c:bc:66:f0:8d:4a:94:
ae:f7:e2:63:da:c0:6b:09:6c:b6:f8:b0:07:18:4a:
75:a3:5e:5f:4c:8d:66:75:4f:8b:b4:f7:4a:b7:02:
10:ae:bc:5e:e4:36:25:dc:56:7a:64:54:6b:3d:09:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:7F:CA:9E:63:D4:8C:7D:2C:E3:DE:F7:A0:7F:74:CF:55:7A:85
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7Rh_yp5j1Ix9LOPe96B_dM9VeoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b8:29:45:11:78:51:93:d3:f8:8e:60:a7:d1:06:0d:a3:f5:
36:a2:34:14:00:c0:ef:c9:61:ee:94:c4:5b:a7:47:73:2b:ea:
80:6b:2d:47:0d:f5:73:18:d9:c5:bd:7d:98:3c:86:6a:fa:11:
42:76:48:07:75:40:62:0c:06:52:ba:d1:4c:77:5b:23:9c:dd:
aa:73:10:17:01:64:72:5c:66:fc:e0:f8:09:de:9b:32:72:57:
02:ba:48:01:94:70:89:04:37:f6:80:80:a8:3c:16:14:fd:ae:
11:2a:ee:dc:88:48:2f:36:28:2f:ff:8a:b6:ad:a6:7a:33:fe:
41:b6:45:1f:e7:eb:f5:f3:57:76:5b:72:a0:9e:09:d3:85:a6:
6c:6e:74:22:9b:98:13:6d:9c:45:42:57:30:79:83:79:c0:a0:
4c:a8:08:e5:91:65:f9:a7:0d:28:07:cb:1a:a7:db:ab:c2:4a:
fa:52:85:88:01:18:d2:73:66:6b:ad:af:da:81:97:c0:7c:6b:
a0:a2:23:00:5d:d5:a3:92:f3:b5:ab:df:30:6a:5d:8c:53:ca:
f2:5a:bc:1c:f9:77:26:86:96:9e:04:23:e7:c6:ed:35:d1:02:
18:57:57:de:cd:13:e9:c9:94:46:70:45:9f:1b:2e:06:4c:c0:
cc:40:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:20 2024 by rpki-client on console-fra.rpki-client.org