Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d4bynnLthwvgIITjnXpX_ZJ_pKw.roa
File: d4bynnLthwvgIITjnXpX_ZJ_pKw.roa (raw, json)
Hash identifier: JELXX0hEJbowY8FeevV9GY3Ayvj0Rud8kT3y9Vyz730=
Subject key identifier: 77:86:F2:9E:72:ED:87:0B:E0:20:84:E3:9D:7A:57:FD:92:7F:A4:AC
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018CC802D4445CECE7D7F33BFBDD442FB841
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d4bynnLthwvgIITjnXpX_ZJ_pKw.roa
Signing time: Tue 02 Jan 2024 02:31:17 +0000
ROA not before: Tue 02 Jan 2024 02:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28920
IP address blocks: 158.120.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d4:44:5c:ec:e7:d7:f3:3b:fb:dd:44:2f:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 02:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7786f29e72ed870be02084e39d7a57fd927fa4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:7f:c4:10:75:f7:53:b4:66:ae:93:ab:36:
c6:b5:d3:d5:10:9b:99:99:4c:46:83:85:8f:e2:db:
50:10:1e:8b:c8:cb:84:a0:77:4d:15:7b:95:bc:2c:
c1:e1:ac:7f:66:3d:ea:c6:1e:c2:e5:73:a6:c1:86:
8c:f1:7f:2e:dc:2a:a3:bf:52:20:b9:ea:ef:c3:95:
a2:d8:c3:51:e3:99:98:12:85:c6:67:c9:c8:b9:6b:
15:e0:df:52:a1:59:8f:9d:82:91:5d:f9:cb:e3:1e:
2c:62:1a:f9:ca:90:35:4f:60:9d:49:7e:77:fe:9f:
94:1c:04:79:c9:ff:be:7f:cb:9b:d9:3a:e6:64:7f:
3d:02:bf:70:c5:06:1d:80:cd:1b:0f:88:fe:10:24:
d6:1d:95:64:29:72:53:84:31:3b:6e:a7:8f:f9:08:
26:ea:0e:85:1d:0d:5f:e4:39:d8:6d:be:b7:28:a1:
bf:9c:93:9a:20:4d:1b:31:ed:86:58:7f:b8:e1:96:
a7:0f:5f:c1:89:54:e4:9d:01:51:a8:3f:15:0c:54:
87:f3:43:1b:df:bc:41:d5:b0:1d:49:8c:cc:b5:1b:
da:db:44:6d:ca:28:36:4e:11:95:cc:a7:8c:02:4c:
6c:9b:a2:97:f9:59:c4:c5:f3:a1:b0:18:4f:14:d1:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:F2:9E:72:ED:87:0B:E0:20:84:E3:9D:7A:57:FD:92:7F:A4:AC
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d4bynnLthwvgIITjnXpX_ZJ_pKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.120.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:4a:af:1a:e0:79:e3:bb:46:75:44:32:fe:cc:8c:dd:71:07:
8f:4e:9f:39:92:f1:c6:c5:d4:0e:12:2c:7e:fa:ff:50:ab:c6:
2a:bf:b7:c1:41:be:a6:dd:29:01:97:e7:b6:ec:fd:f8:9b:59:
b2:0f:9c:ca:64:88:de:8d:34:9c:58:52:5d:40:ec:46:9a:a9:
a0:0e:85:e1:c0:f0:2d:8f:9a:35:c9:4c:8c:03:62:87:1d:4d:
7b:3f:6d:8e:31:2c:50:b9:b2:d0:54:5b:cc:c8:0a:87:29:d8:
13:7c:c7:3e:f2:eb:67:0d:b1:17:45:1d:b0:1d:a6:27:7b:05:
a1:49:31:4d:0a:7f:ae:34:1d:8d:4c:6a:fa:56:b1:f0:f2:f8:
e7:7a:0b:70:bb:02:73:1e:84:38:bd:de:9a:36:a5:21:37:58:
7b:f6:ee:fc:12:0d:27:dc:76:ce:ed:d3:db:7c:c1:3d:f2:e4:
88:2d:84:42:e2:06:6e:45:25:f6:5b:d5:54:88:24:e9:3d:ed:
06:de:bb:7d:62:9b:54:21:21:8a:9b:43:63:db:69:8d:d5:87:
dd:04:f0:4d:3c:38:99:6c:e6:b0:1d:76:f1:9f:3a:8b:8f:01:
57:22:5f:79:dc:71:95:a3:d3:54:06:14:18:33:8c:24:ba:4f:
24:9e:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:49:08 2024 by rpki-client on console-fra.rpki-client.org