Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/nDE5f6FqOjztkIVF9dZj0IduaAQ.roa
File: nDE5f6FqOjztkIVF9dZj0IduaAQ.roa (raw, json)
Hash identifier: QZ25HyD6q/qYluhutYPlC31u9jD5KAF5gn2Mvn+SSN4=
Subject key identifier: 9C:31:39:7F:A1:6A:3A:3C:ED:90:85:45:F5:D6:63:D0:87:6E:68:04
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 018CC8DFAC5555558B8AFF32142D71DD0696
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/nDE5f6FqOjztkIVF9dZj0IduaAQ.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50656
IP address blocks: 77.73.169.0/24 maxlen: 24
77.73.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ac:55:55:55:8b:8a:ff:32:14:2d:71:dd:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c31397fa16a3a3ced908545f5d663d0876e6804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:cb:33:4f:4b:27:8f:97:12:aa:b2:4c:59:
2c:db:b6:52:1c:f5:c1:ae:e7:d2:68:47:f8:6c:2f:
c2:64:19:ab:4b:e8:9f:7f:be:a7:5b:30:2f:34:73:
36:c9:39:a7:3f:3c:56:dd:18:bf:04:4d:6a:8f:f2:
59:6f:fd:9f:4d:c8:30:97:b2:cf:ac:fc:08:ae:81:
d5:d4:8a:72:b7:73:4a:a7:2e:57:40:59:72:61:dd:
80:24:10:c9:c9:65:38:11:48:ec:50:c1:5f:e1:20:
d9:fd:04:a7:31:7a:ad:e5:c2:d9:b7:97:b3:c5:67:
12:8d:b1:91:d5:62:69:cc:57:eb:c4:00:80:09:d7:
ac:7b:ef:69:9a:f6:af:82:3f:66:ae:db:08:59:03:
ef:2a:56:7f:1f:95:5c:b5:de:c8:2e:ba:c3:0d:ed:
c1:5f:e7:45:d7:83:e6:17:f7:bb:94:09:6c:03:41:
73:00:46:6b:1a:06:c0:af:5d:14:8d:f3:b9:a0:6d:
49:00:fa:f1:86:a1:8b:42:77:07:89:65:64:2d:18:
7f:08:71:34:b9:a1:e0:32:7e:f0:61:5e:53:2c:be:
d8:45:eb:62:f5:55:6c:e2:59:5f:72:ae:c1:4f:9a:
14:8b:2d:da:fe:94:dc:d8:e8:d3:7a:08:fc:2f:38:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:39:7F:A1:6A:3A:3C:ED:90:85:45:F5:D6:63:D0:87:6E:68:04
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/nDE5f6FqOjztkIVF9dZj0IduaAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.168.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:fa:f4:34:d9:31:a6:28:04:ef:06:99:3b:14:89:8d:df:43:
5f:75:93:02:52:f6:e5:57:25:ad:0a:a1:db:58:a3:9e:ee:8c:
10:01:f2:00:28:56:83:83:6f:f4:dd:2f:21:b7:67:4c:81:43:
2f:07:58:4b:b9:11:5f:21:3c:3a:01:93:13:66:ee:b5:db:d7:
1f:e3:05:e6:aa:06:e4:a8:13:5e:aa:2e:b6:e8:5f:5e:30:ba:
08:9b:4d:fd:62:49:20:4d:92:8c:8b:af:a1:98:ad:41:98:37:
c6:83:cb:0a:9e:64:78:47:97:8b:4c:fc:88:22:1b:f7:75:93:
e6:43:f2:d4:22:d5:75:7e:fa:58:7a:fa:f3:89:52:12:c4:b4:
cf:c7:ba:a7:61:46:52:73:79:ea:7f:e0:9b:70:47:54:f0:76:
fa:6a:79:f0:66:f6:90:8b:61:ed:95:ef:d0:db:e2:0a:99:3b:
86:a6:75:7f:72:7e:da:38:48:7c:f5:b2:c3:b6:41:d0:55:45:
03:39:71:34:82:cb:fc:4a:bc:e1:54:d4:e9:6e:3b:da:5e:89:
d9:f5:ab:47:e6:90:bd:4e:4b:18:b3:a2:9c:0e:4a:be:93:8b:
82:cb:07:e0:a7:22:c8:ce:95:f6:d0:a5:8c:40:c9:fc:e1:c0:
8e:f1:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:05:48 2024 by rpki-client on console-ams.rpki-client.org