Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/Jg67IZkv9w95bDV3eNeY_Y8kWlc.roa
File: Jg67IZkv9w95bDV3eNeY_Y8kWlc.roa (raw, json)
Hash identifier: CZiDuY+MrWRDAmIAkeY1UAZuSmn5z1d/sezG5lyBMsE=
Subject key identifier: 26:0E:BB:21:99:2F:F7:0F:79:6C:35:77:78:D7:98:FD:8F:24:5A:57
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 018CC56EAB5AB33CECBE66D93B58771E4F09
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/Jg67IZkv9w95bDV3eNeY_Y8kWlc.roa
Signing time: Mon 01 Jan 2024 14:30:13 +0000
ROA not before: Mon 01 Jan 2024 14:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39421
IP address blocks: 185.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ab:5a:b3:3c:ec:be:66:d9:3b:58:77:1e:4f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 14:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=260ebb21992ff70f796c357778d798fd8f245a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:90:f0:39:1a:f9:54:18:27:30:ab:87:66:
f7:b7:d6:88:cb:39:bd:b2:52:19:bc:ac:67:2a:aa:
b6:a0:18:34:17:d6:f1:e8:78:9b:5c:a8:8e:b5:81:
9f:c0:3a:9d:ee:72:20:bb:e9:55:c8:4e:c7:89:c7:
eb:aa:6d:de:70:ad:28:7e:49:41:bb:56:ef:1a:b5:
16:21:e0:7f:c2:a1:8f:2a:f7:96:df:25:3c:4a:39:
1b:28:60:be:49:df:6f:62:75:b2:dd:42:98:48:75:
40:0a:7c:5f:e3:99:02:6e:ff:e1:fe:e5:a1:5b:48:
d1:30:60:72:18:af:14:db:b0:1d:c8:d8:6c:2e:a1:
be:50:0e:26:62:a1:21:c5:3b:00:de:3d:0c:2e:9f:
93:86:be:52:49:fa:7b:97:37:92:a6:0f:a9:e7:33:
64:6b:b3:c6:32:08:02:dd:60:40:cb:ea:0d:74:72:
8d:7d:1c:52:ac:31:43:dd:bd:da:12:33:80:44:8a:
5c:9d:d0:14:18:2c:57:9c:aa:ec:d4:73:a1:6d:88:
22:8c:de:5f:f1:10:db:48:aa:00:17:9a:02:3a:97:
e9:34:9a:f2:40:24:33:9c:a6:f8:04:c2:20:02:2d:
8b:2d:e4:7a:89:a2:66:39:91:36:2c:36:bd:ed:98:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:BB:21:99:2F:F7:0F:79:6C:35:77:78:D7:98:FD:8F:24:5A:57
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/Jg67IZkv9w95bDV3eNeY_Y8kWlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.81.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a3:ec:af:2e:a5:ee:21:72:31:79:ef:6a:b1:d1:53:f2:b8:
13:84:f2:5d:51:89:49:16:84:8c:38:ef:c2:1a:ab:d7:91:c8:
cb:23:eb:94:83:e3:73:e9:22:8b:94:b2:f6:de:4c:56:14:42:
5d:45:ec:4d:c1:8a:90:de:30:30:5b:6d:1f:7b:cf:d6:9e:69:
b9:78:45:aa:0c:d7:98:8c:52:e3:e5:89:05:de:d7:04:fe:8c:
f7:7f:bf:f6:4b:82:fd:b9:48:d0:53:6d:19:8a:83:ec:5d:03:
22:cd:ae:c4:33:f1:b5:99:4b:a0:3e:ec:5b:f2:5a:b4:52:5f:
22:bc:7b:3b:a8:25:9e:53:f8:b4:a0:98:8f:26:ed:b1:d2:2e:
a9:9e:1e:f0:fb:de:6c:34:af:55:c9:29:75:60:a5:f5:67:b4:
f7:93:21:a9:f6:ed:57:66:04:db:fa:8a:63:2f:9c:c0:3c:c5:
e1:c8:d1:f8:bc:04:b4:b4:54:22:ae:24:6d:e8:92:9e:df:95:
9a:e0:2f:53:7a:e3:d5:2c:2f:6e:88:6a:06:f2:7b:9f:70:42:
c4:f8:af:83:74:a7:9c:31:58:de:54:14:ca:5c:39:25:03:77:
86:d6:75:f7:dc:87:80:f8:ca:2d:ff:e1:54:0c:39:0f:39:0a:
26:32:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:28 2024 by rpki-client on console-fra.rpki-client.org