Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bs99EDurNpaa-EDhHB2i51WLIAc.roa
File: bs99EDurNpaa-EDhHB2i51WLIAc.roa (raw, json)
Hash identifier: 9yQZy96q63rUqLph7BPBS1j6pdOpNYORyFPshTvaHfI=
Subject key identifier: 6E:CF:7D:10:3B:AB:36:96:9A:F8:40:E1:1C:1D:A2:E7:55:8B:20:07
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E2FE6BA402804BD3258578362ECEE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bs99EDurNpaa-EDhHB2i51WLIAc.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21450
IP address blocks: 77.137.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2f:e6:ba:40:28:04:bd:32:58:57:83:62:ec:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ecf7d103bab36969af840e11c1da2e7558b2007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:ab:9c:4e:e0:99:f6:09:9c:42:7a:80:e1:
cb:08:97:dc:40:ff:31:3a:3f:01:51:28:eb:f1:53:
29:09:29:a7:3b:42:c7:96:08:cd:73:95:9a:74:ef:
d0:08:13:75:9c:c8:a1:99:b8:95:c2:29:a7:48:05:
12:ec:4d:f9:67:e0:8d:81:7a:06:9d:f4:31:1c:e0:
e1:7e:ce:7a:e4:c2:54:fe:66:a5:38:4d:75:55:4f:
f9:89:e2:90:3d:22:7a:63:b6:4c:51:d2:5a:b7:ba:
d5:2d:4b:10:63:02:66:9c:23:83:48:d1:7a:31:5f:
b1:1e:b7:ff:fe:7d:8f:77:62:a7:23:8f:af:26:ee:
35:09:8f:04:11:09:fb:bc:a9:bb:25:84:71:4c:65:
43:dc:1c:2b:be:d5:b6:3e:ce:51:dd:a5:82:e1:06:
73:b6:32:f5:c7:6c:c7:f0:db:6c:39:dd:90:60:7a:
e8:f7:cf:c8:7c:44:b8:64:98:c2:9f:88:d3:22:e9:
9d:81:59:41:03:0d:f6:c0:47:06:4d:6f:cc:5f:d6:
c3:e2:a8:df:70:73:63:67:65:39:e4:9d:5b:ab:7f:
6b:35:ca:87:c6:64:9e:45:9f:d6:76:2c:2e:30:78:
0b:03:fa:e4:80:87:b7:f2:cf:dc:eb:b7:30:92:fe:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:7D:10:3B:AB:36:96:9A:F8:40:E1:1C:1D:A2:E7:55:8B:20:07
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/bs99EDurNpaa-EDhHB2i51WLIAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:1b:0c:57:41:c8:c3:54:68:7e:6f:42:20:4f:eb:f1:3f:79:
85:08:ae:12:91:16:d3:88:90:c8:d0:4d:df:be:96:f1:a6:c9:
84:a9:ae:67:12:8d:7a:9b:92:98:0c:0f:4f:6a:49:fd:fc:94:
74:e9:b1:a8:2e:b3:4f:b9:75:6e:cb:87:fe:ff:43:48:79:4d:
9a:a7:81:1d:20:37:3a:46:53:ac:45:a5:da:84:e3:f1:29:7f:
9c:a8:f3:a7:ed:ef:50:cf:5a:a8:9c:82:42:0d:23:29:f5:ab:
c0:4c:6a:4f:de:96:70:97:b5:c6:85:97:50:76:15:4a:3b:ed:
b5:9d:70:22:96:df:38:3b:03:b7:cc:70:f8:33:76:0d:15:1e:
6b:9e:4b:d3:2e:7e:a8:b5:1e:70:9c:b4:52:e0:72:03:0d:4d:
8f:a1:e6:62:0f:4a:b0:06:75:f9:7c:ba:19:0d:45:aa:6a:98:
a2:9a:28:94:bb:74:8c:7f:21:3c:a1:43:cb:8d:00:b6:5f:53:
7d:9c:8d:d0:fc:c1:53:ae:57:06:25:87:ec:96:b8:70:ed:5a:
c8:3b:87:08:8d:01:f0:6c:25:3a:0e:4a:0c:14:40:7f:fe:df:
5e:c0:32:da:81:9e:22:74:13:1d:b1:e2:2d:da:46:15:c0:9f:
c8:5d:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:00:48 2024 by rpki-client on console-ams.rpki-client.org