Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa
File: dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa (raw, json)
Hash identifier: VCVEZSuPwgdkGTUbQ03XEBWB8NevbIv3zBH00VcKa+Y=
Subject key identifier: 74:2A:E1:FD:D3:E5:B5:3E:1B:22:AF:E2:47:B3:A2:F7:E4:FC:57:21
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018CC26D2F0D291754D168D3E010159855FD
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 2.57.170.0/24 maxlen: 24
45.8.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:0d:29:17:54:d1:68:d3:e0:10:15:98:55:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742ae1fdd3e5b53e1b22afe247b3a2f7e4fc5721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:87:69:44:25:a1:9b:bd:fe:02:76:27:80:
c6:84:f7:72:09:b5:9b:cc:cb:03:40:05:22:bd:2f:
b5:7c:46:9a:08:82:de:a7:19:39:20:a2:a5:e8:29:
40:47:52:ea:5d:55:4a:3b:67:bd:c9:45:c5:c5:ce:
64:35:89:a8:f3:e0:19:2e:6f:9e:f6:7e:fb:5e:6f:
25:45:2a:ba:8a:5f:3b:ea:03:11:c6:24:1d:c0:73:
c6:bf:5f:df:1e:15:ed:c7:c3:1a:bd:b8:b3:d7:ef:
56:60:db:29:03:1a:46:d1:34:d3:64:54:72:1f:da:
53:a1:f5:52:a9:63:63:f9:1a:dd:d7:31:80:58:cd:
81:4c:56:4d:e6:44:53:d0:8a:98:48:5f:a5:8f:e8:
9a:dc:c6:57:ed:e0:80:9d:c1:08:aa:5a:20:97:5e:
96:5a:53:dd:29:37:fd:ab:b1:95:fa:66:e5:17:e9:
91:84:cd:4e:bf:34:e7:53:08:4e:ca:e3:16:b2:f6:
1e:30:48:e8:a0:81:b0:c1:4e:54:48:ab:53:f2:c8:
61:a6:63:93:08:36:4d:f7:8f:d9:c2:4b:a9:e9:7e:
dc:28:f6:99:1a:b5:1c:cf:1d:71:77:48:a0:b3:a5:
f3:69:64:d0:04:e8:1d:89:74:5b:50:59:88:49:dd:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:E1:FD:D3:E5:B5:3E:1B:22:AF:E2:47:B3:A2:F7:E4:FC:57:21
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.170.0/24
45.8.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:45:ff:3a:7e:62:85:21:2f:26:f5:5c:f9:77:9e:47:f1:58:
ff:bd:0c:2c:88:99:97:74:9c:23:f5:5b:50:77:02:23:5b:be:
b1:f9:d4:0a:6f:b2:d2:37:30:cb:a6:b0:4b:8e:85:14:04:d8:
d0:6a:42:0d:96:ca:84:24:a2:47:5e:84:d1:ec:aa:5b:f0:1b:
74:5d:12:9a:04:b1:85:69:2b:0f:4c:4c:79:e3:71:17:6a:60:
58:90:e4:5e:8a:00:3b:86:44:38:8a:e9:10:50:a0:42:f3:16:
cc:26:59:62:06:a8:0e:32:18:ed:33:06:c2:bb:af:40:ae:68:
8e:cd:8e:b8:e6:11:41:d0:2c:0e:39:4b:7a:c2:6f:58:92:4b:
eb:27:65:c1:61:fb:09:9c:f9:6d:04:c7:9b:91:3e:8a:78:a3:
33:56:cb:78:74:8b:1e:ff:b1:ad:69:b1:e7:34:55:cd:d6:e5:
5f:89:7b:49:c2:f3:58:53:6d:83:a2:eb:2a:a5:cf:df:58:49:
93:6e:7c:33:3e:69:8e:9c:b5:75:8f:d8:5d:e7:e4:4b:c0:ad:
97:d6:d8:83:97:1f:c6:ef:d5:e6:b1:19:59:14:9b:c3:68:ac:
00:9e:0f:dd:8e:e4:8d:66:1b:fc:d2:5f:0e:66:bb:c5:27:39:
e7:cf:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:14:18 2024 by rpki-client on console-ams.rpki-client.org