Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa
File: ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa (raw, json)
Hash identifier: CgsasTNulsV6LHihN00K2vuadMBotT2wThp7PEKF4j4=
Subject key identifier: 64:9E:DD:59:98:CF:A5:3F:52:6E:15:36:1D:D8:E4:4B:50:EB:49:4D
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 018CC26D4808F87DF1F5C25505AB03CFB598
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42386
IP address blocks: 77.241.124.0/22 maxlen: 22
77.241.120.0/22 maxlen: 22
77.241.112.0/22 maxlen: 22
77.241.112.0/20 maxlen: 20
77.241.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:08:f8:7d:f1:f5:c2:55:05:ab:03:cf:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=649edd5998cfa53f526e15361dd8e44b50eb494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:b7:21:ad:f0:02:66:ae:5c:98:10:39:a2:
00:3a:f3:41:82:41:ab:43:0b:d0:3b:2b:20:74:59:
dd:30:f6:06:5a:06:8b:ed:67:7c:b4:24:86:d1:94:
ee:b8:69:a6:4e:08:e2:0a:ce:e2:88:e8:40:6a:ca:
7c:52:d4:e4:35:57:89:f1:ac:4c:df:2e:7d:7c:82:
19:00:35:11:19:10:9d:a3:d0:22:24:14:32:5d:19:
36:70:9f:65:02:76:7d:cd:2d:15:8d:e4:fc:ee:6f:
46:94:a3:20:6a:01:8b:83:3b:da:22:1d:d4:5c:7e:
5c:41:fd:1b:2d:25:51:ae:2a:29:aa:9d:11:9f:87:
0f:1a:04:f1:b5:3a:9c:5b:1a:21:80:80:33:5d:4a:
d3:07:a3:9a:f4:a7:cc:e6:5e:cc:85:19:3a:b6:83:
4c:3e:08:e9:6b:5c:13:a3:0f:50:f3:c9:58:e4:77:
3a:16:64:c4:c3:77:58:24:60:bb:98:39:a4:b5:2b:
60:1a:1d:d7:f3:f7:a9:e7:bf:c1:0f:45:f4:6e:e3:
39:3c:59:78:75:e3:84:9f:c1:9e:70:b0:96:34:8f:
bd:66:97:23:52:a2:be:3d:9b:e4:54:66:4e:39:cf:
08:6e:55:46:dd:e2:03:b0:a9:6e:81:22:2d:da:c0:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:DD:59:98:CF:A5:3F:52:6E:15:36:1D:D8:E4:4B:50:EB:49:4D
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:20:3c:5d:77:52:11:b0:3e:5c:27:38:6c:bf:83:fc:fe:75:
a7:74:f9:34:12:cf:7f:b8:33:95:fd:48:54:e0:11:d9:cf:73:
d1:be:76:fc:9e:73:39:cf:68:1d:74:8b:6e:e2:27:36:48:48:
f5:51:a5:33:61:df:d8:b1:c7:9b:3f:02:59:8d:ae:bb:3a:fb:
74:45:85:30:4d:f9:82:44:75:3a:6b:bf:a7:d0:b1:4f:17:c7:
d1:2b:2d:a8:e2:2c:fc:88:e9:2d:32:fe:de:95:4c:a2:60:5e:
26:d4:5b:13:47:c3:35:7c:c7:2c:e7:ed:18:24:38:fa:1f:d2:
64:71:5a:38:ff:ef:84:6f:f3:91:06:58:7a:70:fe:86:24:16:
f4:5f:e4:7d:79:16:58:cf:80:41:e2:30:ea:45:93:23:41:66:
ac:0e:21:17:24:27:e1:41:d1:ad:b8:d0:75:3e:18:95:8d:d2:
90:6e:66:19:10:99:aa:32:96:b4:34:3b:91:80:09:37:97:9a:
cd:18:63:0f:f0:9a:ab:ec:8b:7b:3b:02:e1:b7:0f:5f:ae:a4:
81:71:c9:07:3c:58:21:b9:1f:d7:b2:71:e0:70:6b:45:23:93:
96:cb:b8:3a:fa:32:05:06:6d:95:ea:0a:ee:4a:f6:ce:69:8b:
e7:05:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:04:47 2024 by rpki-client on console-fra.rpki-client.org