Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/sMsOl9j54k6DFfF4oJiwYfkddDk.roa
File: sMsOl9j54k6DFfF4oJiwYfkddDk.roa (raw, json)
Hash identifier: 9A1MQMh/j4wK4305MrGwJHKoDVZSaGByhukfTT+Xi6E=
Subject key identifier: B0:CB:0E:97:D8:F9:E2:4E:83:15:F1:78:A0:98:B0:61:F9:1D:74:39
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 018CC4251F003C4759F0C60FBF387169D580
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/sMsOl9j54k6DFfF4oJiwYfkddDk.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8978
IP address blocks: 212.77.0.0/19 maxlen: 19
2a01:b8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1f:00:3c:47:59:f0:c6:0f:bf:38:71:69:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0cb0e97d8f9e24e8315f178a098b061f91d7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:fc:50:39:c2:d3:3d:97:0a:2e:07:34:68:
8d:0d:eb:c3:97:eb:a5:c4:49:31:e7:6b:15:af:4e:
dd:21:e5:e5:0b:23:47:18:89:6e:8d:83:3f:89:d4:
f0:55:04:85:b3:0d:08:a9:e8:06:8b:d1:16:f0:06:
cb:9e:04:4e:b1:67:91:55:de:bb:bf:60:1a:78:cd:
ad:30:a5:41:95:3e:4d:f0:4d:ea:82:f1:95:72:6e:
2e:fc:a4:0e:09:4b:29:af:1e:86:07:b9:61:1b:80:
49:4d:f5:b9:1e:e1:90:8e:c2:f7:65:74:2d:cc:a8:
f3:68:57:0d:af:96:34:b3:60:a9:f5:9a:7f:07:74:
6e:1e:04:d9:2d:29:e2:b3:b5:f1:7a:6e:21:a4:ba:
62:c3:7f:7c:bc:83:ee:12:b9:7c:4b:49:ef:f5:09:
f5:37:98:bd:9a:99:9a:1f:82:f2:31:9d:f8:d0:52:
87:79:a0:10:16:71:5b:01:62:5c:8f:39:7a:8c:42:
f8:8c:a3:07:da:77:96:1c:fb:ec:15:2c:39:b4:6c:
df:9d:77:f5:de:b2:eb:53:b3:4f:4f:7f:63:7d:61:
2c:31:5d:5c:19:e8:83:7e:b9:4e:75:04:ac:28:83:
19:ff:f8:6b:2e:5a:ea:12:d8:4d:bd:d4:a2:55:1a:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:0E:97:D8:F9:E2:4E:83:15:F1:78:A0:98:B0:61:F9:1D:74:39
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/sMsOl9j54k6DFfF4oJiwYfkddDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.77.0.0/19
IPv6:
2a01:b8::/32
Signature Algorithm: sha256WithRSAEncryption
bb:1b:70:aa:0e:de:f1:66:3c:3b:3c:8b:18:84:06:95:67:50:
79:89:45:12:f7:2f:2c:ba:01:b6:7d:e0:73:8c:20:a8:60:0c:
a6:a8:5f:09:34:51:60:e9:83:11:c4:60:d2:fe:a5:f3:98:3f:
8a:76:40:38:ee:98:a6:0f:c2:fe:e8:91:82:01:5d:b8:99:34:
a8:d9:a0:c2:ad:8e:84:e6:39:5e:82:8b:60:cc:5e:7e:7e:0f:
7e:c4:8e:71:b2:7c:a1:86:aa:a6:6a:60:4e:b6:42:c9:61:48:
b7:9f:3b:9d:ae:27:e8:62:b8:74:c7:08:b9:21:1a:d0:a0:e7:
05:92:64:9c:bd:69:5a:c9:ba:f0:f8:e6:59:39:22:15:e2:9c:
c9:85:19:af:ff:5c:c5:61:bb:69:48:cd:21:51:c0:d8:8b:2f:
1d:a4:60:ab:18:e4:84:8f:fe:4d:67:ce:ea:a8:2b:31:34:49:
4b:38:24:a2:17:09:62:04:b7:97:b0:4d:eb:2e:d3:e6:90:21:
3e:e8:da:82:d3:53:a1:ef:36:8e:49:65:07:70:92:d4:b5:09:
13:26:32:8a:4e:9d:b8:6b:c2:8c:10:08:33:50:ed:f0:60:6b:
82:c2:2a:9e:66:6f:2b:7f:6a:5f:19:91:1c:3b:34:ee:7b:5c:
8c:1b:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:57 2024 by rpki-client on console-fra.rpki-client.org