Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/1-dW-tJKx6UJaBHksxZzWr11rQ9Y.roa
File: 1-dW-tJKx6UJaBHksxZzWr11rQ9Y.roa (raw, json)
Hash identifier: /nZfYDzD6gWtYt3mZlXPWQK0m4XXG8VULXtDwiolqVI=
Subject key identifier: F9:D5:BE:B4:92:B1:E9:42:5A:04:79:2C:C5:9C:D6:AF:5D:6B:43:D6
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 018CC726FA1311FE6DB3E38B9BB9D6287185
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/1-dW-tJKx6UJaBHksxZzWr11rQ9Y.roa
Signing time: Mon 01 Jan 2024 22:31:09 +0000
ROA not before: Mon 01 Jan 2024 22:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44945
IP address blocks: 78.108.16.0/20 maxlen: 20
185.43.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fa:13:11:fe:6d:b3:e3:8b:9b:b9:d6:28:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jan 1 22:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9d5beb492b1e9425a04792cc59cd6af5d6b43d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:80:a2:eb:a2:a7:7a:a0:61:d8:85:4e:79:
03:4a:2a:a4:d2:16:de:dc:83:20:88:c8:db:fb:b2:
e4:0a:88:c9:b3:b1:a9:17:66:da:c0:12:c0:25:bf:
99:a5:fb:44:ec:a0:b5:f0:3e:ad:04:d7:36:ce:b8:
9f:77:84:54:63:9e:25:81:21:06:13:73:59:f7:fe:
a8:6f:e2:98:73:23:f3:3b:0a:64:67:3b:90:af:7a:
e5:a3:5b:51:50:36:44:e8:26:04:27:14:84:0f:6e:
41:3c:03:42:00:0d:d7:dc:77:d3:a4:51:15:c9:8e:
a0:4a:6b:13:5e:8d:70:a9:bb:3e:93:96:76:b7:b2:
22:37:07:54:6f:ef:79:96:c5:69:b6:24:26:68:b3:
84:e2:83:29:68:3a:9d:f0:86:23:d8:41:6b:fd:99:
ea:f4:28:7f:29:14:08:5c:da:4c:b3:20:1c:fc:79:
08:fe:5e:95:df:1c:9e:96:c3:ad:ad:7a:51:94:68:
ba:33:a7:35:3a:ec:06:74:15:88:1c:b0:9c:b8:30:
bf:a3:13:64:66:0f:d4:ca:ce:1d:d4:48:41:24:02:
4f:5a:5d:97:80:22:a0:72:ba:ff:28:3b:03:40:8c:
76:a7:7f:02:ca:f6:0b:5e:ec:61:a3:82:0a:89:5b:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:BE:B4:92:B1:E9:42:5A:04:79:2C:C5:9C:D6:AF:5D:6B:43:D6
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/1-dW-tJKx6UJaBHksxZzWr11rQ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.16.0/20
185.43.172.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ea:c8:7d:3d:ab:20:a1:ff:59:7f:c2:00:13:e9:35:3a:24:
ce:5e:b3:55:1d:ee:8b:5a:3a:a4:97:66:ed:c7:5d:10:b1:b6:
ea:e6:97:27:16:1d:67:36:46:24:67:dd:8d:3c:07:ed:f4:27:
fe:f3:90:85:4c:23:dc:53:0f:89:c9:c3:f7:c7:db:f1:84:d4:
29:99:a3:91:33:08:1d:67:e1:16:85:b6:6f:6a:96:32:f5:4a:
92:35:ce:e5:35:42:7b:d1:9f:09:58:2b:b5:05:d7:ae:1f:cb:
11:09:0e:a2:aa:8f:73:d4:25:26:f0:35:a9:9b:29:20:11:7f:
47:e0:3c:75:63:29:4b:c2:79:90:73:cc:d3:c7:5e:5b:95:5e:
5b:d8:86:3c:ab:b9:5f:41:e3:6a:51:52:55:50:27:a9:69:98:
1b:a0:15:6f:21:f4:a4:6f:57:01:5c:d3:63:59:46:67:41:d0:
77:f9:3f:80:89:d4:95:5e:a9:26:fc:da:4a:48:86:0f:cb:23:
76:af:10:ea:15:df:8f:a9:9c:16:2c:fa:68:d0:96:a7:26:30:
dc:a0:00:40:bc:6f:35:90:3c:c9:37:29:7f:7b:28:02:5a:00:
6d:3c:ea:5c:cf:1d:17:96:47:88:a1:2e:3b:0d:df:46:9f:16:
d4:9a:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:02:01 2024 by rpki-client on console-ams.rpki-client.org