Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nHz5PYvYhZiTmkWG0ByHbG1ISik.roa
File: nHz5PYvYhZiTmkWG0ByHbG1ISik.roa (raw, json)
Hash identifier: ePaT81BNUTRf5J10vaqe327NI/cpz3KsA1HLhDcPGYk=
Subject key identifier: 9C:7C:F9:3D:8B:D8:85:98:93:9A:45:86:D0:1C:87:6C:6D:48:4A:29
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018CC801539D3A8B33B23CB578A5B4ECCAF0
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nHz5PYvYhZiTmkWG0ByHbG1ISik.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6853
IP address blocks: 57.79.0.0/16 maxlen: 32
57.66.0.0/15 maxlen: 32
57.78.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:9d:3a:8b:33:b2:3c:b5:78:a5:b4:ec:ca:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c7cf93d8bd88598939a4586d01c876c6d484a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:d5:e7:c8:3c:1f:ea:38:dc:68:68:bb:34:
73:4c:05:6c:ae:40:8a:42:20:c1:24:cf:77:82:17:
cf:a7:09:9b:0a:b4:b2:a9:02:21:bf:a0:41:d1:1a:
57:9a:9a:a9:5c:8a:c8:d3:44:9d:ce:4e:4f:26:5d:
e3:12:6f:7c:0a:1f:2b:d3:e2:50:c6:6a:75:4e:88:
34:10:2c:00:4b:4e:df:cc:93:cd:c6:73:fe:31:57:
90:ad:fd:bd:ad:0f:d9:6a:5d:2d:02:65:99:64:b4:
6d:dd:b9:82:8a:cc:c5:4e:e1:83:04:67:c9:ca:1f:
52:8b:43:91:4a:2e:4f:9c:d4:4f:bb:86:c5:87:5a:
83:dd:97:64:3e:7d:10:b9:00:77:58:db:0d:c1:89:
03:81:c7:a9:5c:76:6f:a4:4f:e5:fa:0d:25:d3:d4:
c2:34:b5:43:97:8a:b5:55:35:e7:67:43:e3:94:99:
0e:fc:25:b9:0f:60:d4:3a:a8:b9:c0:bb:34:3b:79:
db:00:68:b7:36:90:ad:bb:f3:c8:9b:33:d9:52:61:
eb:4a:b9:ce:4a:8b:52:f3:18:07:a1:ee:b9:58:79:
0d:41:73:80:a2:7f:75:f5:ab:8f:f1:18:e6:5f:6b:
b0:38:e6:de:1c:1a:9c:7d:29:8e:05:c4:15:73:66:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7C:F9:3D:8B:D8:85:98:93:9A:45:86:D0:1C:87:6C:6D:48:4A:29
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nHz5PYvYhZiTmkWG0ByHbG1ISik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5d:3a:55:b1:af:e5:34:63:49:41:47:1e:e9:c3:fa:4d:7b:08:
fd:c8:ef:ff:d2:43:6d:0b:24:1f:a0:4d:e1:9d:0d:50:7f:e7:
fd:42:6a:24:f7:5e:18:94:40:af:56:51:2b:db:41:39:e2:29:
f6:57:21:19:c1:d7:db:c7:44:6a:1c:93:cc:3a:ab:68:ff:e9:
5f:f5:78:16:7c:34:58:90:1a:5e:8c:44:57:73:1c:63:eb:e6:
2d:fb:27:d6:ed:63:da:9c:4f:fd:53:32:ae:98:ab:06:6f:bf:
87:40:cc:f9:9c:2d:a0:2c:f4:00:cd:c2:52:3a:7c:ce:89:3a:
6f:87:8a:ce:5f:df:cf:13:20:00:8a:24:44:ae:31:be:1f:dd:
a6:29:6d:27:f4:5b:17:2a:a8:2e:4b:2e:9d:56:72:f9:ce:12:
1e:c6:f7:ed:32:35:28:33:a9:0d:98:f8:3b:19:99:91:b1:70:
a3:51:8b:ac:1a:70:65:d5:a2:e0:82:d5:e4:39:0e:6f:c7:66:
d9:f3:20:44:79:a8:82:6f:09:a0:27:30:a5:f1:88:42:0b:b4:
10:20:db:37:d7:7b:e2:7c:e9:e9:11:6b:68:06:e6:a6:e6:06:
cb:e4:14:f2:64:12:2f:cd:b5:21:60:58:20:a7:78:c3:12:d5:
50:74:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:34:51 2024 by rpki-client on console-ams.rpki-client.org