Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kHjB0xZMQIVgJ3gswhF-YvoQUcw.roa
File: kHjB0xZMQIVgJ3gswhF-YvoQUcw.roa (raw, json)
Hash identifier: BRm0FOO84mRywskWFSPmxP4lnAQb6e3/9WVu8yLWNuk=
Subject key identifier: 90:78:C1:D3:16:4C:40:85:60:27:78:2C:C2:11:7E:62:FA:10:51:CC
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 018CC50150028B4840F4C51ED54636D27F48
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kHjB0xZMQIVgJ3gswhF-YvoQUcw.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200801
IP address blocks: 77.72.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:50:02:8b:48:40:f4:c5:1e:d5:46:36:d2:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9078c1d3164c40856027782cc2117e62fa1051cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:ce:99:55:14:d3:ba:cf:f5:12:7a:71:0e:
44:88:e5:08:a9:a6:0c:e2:19:ae:eb:51:b0:39:5e:
98:c0:df:25:23:24:52:64:37:a3:46:d7:8e:1c:02:
b1:c5:62:8c:5d:f1:ca:1f:2f:52:54:12:cf:b7:ec:
a2:3f:3b:3b:7a:b9:6b:e1:55:60:1f:a1:be:01:47:
3f:e3:db:26:c8:6b:f7:c8:17:86:40:3a:55:a6:dc:
26:c3:dd:66:60:84:cd:21:52:5f:ed:92:ee:05:15:
d8:0c:5e:9e:93:e5:db:21:c4:ed:92:42:bb:6f:ce:
32:0e:b4:ed:81:63:f6:e9:ba:3d:f7:50:5c:26:16:
54:5c:9f:b3:56:82:b7:34:55:0f:95:22:14:7d:9c:
06:a1:04:23:e3:c8:d5:3e:d2:27:23:65:ae:17:5d:
56:98:91:fc:17:c4:8d:c5:99:d8:4e:39:4e:52:c0:
d2:1f:18:39:0d:d1:ad:b8:ca:45:51:68:14:03:80:
39:53:79:fb:69:0e:e7:ba:c0:7c:29:77:1d:73:21:
2d:74:d9:9a:33:c3:81:51:39:6a:9a:7c:9b:c3:c5:
95:44:8c:a4:70:33:cb:ec:9f:2e:76:fb:0f:9b:97:
d8:14:36:56:d1:6f:ec:d5:ad:37:16:4e:92:99:58:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:C1:D3:16:4C:40:85:60:27:78:2C:C2:11:7E:62:FA:10:51:CC
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/kHjB0xZMQIVgJ3gswhF-YvoQUcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.223.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ad:da:85:13:5f:ec:f7:a3:ae:19:c8:13:75:fd:99:a3:55:
fd:e4:d6:6f:62:f7:33:b0:ca:d1:24:56:eb:ad:ea:52:65:95:
3e:82:ff:0b:8c:de:cc:33:3c:bb:95:2c:66:9e:a2:7f:e5:54:
72:07:17:da:e0:81:bf:d8:ea:41:c6:ea:ef:47:5a:8e:a8:40:
92:2e:95:e7:f6:e3:3d:40:79:f1:c3:15:6b:df:22:ac:a6:35:
1a:d3:e4:fd:92:6b:75:c2:83:6e:88:10:a3:df:a8:1f:fd:1d:
7d:cf:c3:ca:4c:cb:ab:b8:40:6c:ab:76:30:7b:de:8a:41:2d:
ab:d5:0e:94:0a:8e:e8:49:f6:2e:0f:a9:c3:ae:64:4a:d2:6b:
c5:a0:6a:38:6d:d7:a9:ef:d7:c3:38:a6:ee:6f:b1:63:ca:95:
cb:9c:b0:cb:b8:1d:dc:1c:96:45:b5:dd:a5:83:cf:79:bd:ae:
09:81:18:1e:a7:94:6a:20:e4:20:fb:59:e1:f0:5d:67:0b:d0:
99:0d:59:98:00:72:c0:b8:ba:c9:fb:66:dd:66:b9:fd:ab:1f:
f9:48:d1:b6:d7:a7:4e:98:ea:ba:0a:40:0a:f9:bd:9f:3c:fa:
4b:f2:ee:54:3f:08:90:2f:f4:10:46:ca:4f:7d:78:39:96:f2:
4a:72:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:42 2024 by rpki-client on console-ams.rpki-client.org