Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/d7M52A9Zhrq_QbK08ZT0hs28kyU.roa
File: d7M52A9Zhrq_QbK08ZT0hs28kyU.roa (raw, json)
Hash identifier: sqOvPlwez0GSHLirzsDfIv78b5ZI/KlPdgI/rltI1so=
Subject key identifier: 77:B3:39:D8:0F:59:86:BA:BF:41:B2:B4:F1:94:F4:86:CD:BC:93:25
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 018CC26D5F1B6B9CB0AACCF020052DCC26A9
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/d7M52A9Zhrq_QbK08ZT0hs28kyU.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203206
IP address blocks: 185.78.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5f:1b:6b:9c:b0:aa:cc:f0:20:05:2d:cc:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b339d80f5986babf41b2b4f194f486cdbc9325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:ab:96:f8:91:fc:6c:e2:b9:f6:77:91:29:
6c:87:53:92:30:45:c7:77:cc:ea:f5:7a:b3:9b:79:
9d:fa:00:24:7f:5d:96:21:6b:bd:9f:cf:aa:bb:b5:
09:fc:b9:77:c8:1c:4c:e4:76:97:ed:e8:00:f7:59:
eb:bc:70:0b:3a:65:c3:26:f6:11:2f:5a:2d:cc:b1:
74:09:d4:a8:31:55:c6:66:17:5c:bc:1c:26:1b:8b:
0a:77:c4:a3:a0:52:e6:bd:e5:f0:77:ad:51:a4:2b:
36:8f:61:07:91:e8:76:ec:75:8c:c1:ba:2e:a0:77:
50:d0:6a:7d:29:bc:3f:60:72:7a:f8:6a:92:e1:91:
3c:f6:b4:5c:c7:b3:4a:b1:bb:76:6d:23:8a:ac:76:
d2:d0:1c:8f:c7:de:e0:64:00:38:9d:f0:a8:3d:78:
68:67:44:8e:8d:4b:df:22:2b:6a:b1:c9:b5:79:8d:
83:b7:fe:c8:57:f2:fe:81:25:da:a1:8d:da:71:67:
74:b0:a3:63:09:42:84:5d:95:1a:3f:dc:47:e9:2f:
79:3a:05:fc:48:f5:b6:a7:03:82:4e:4a:66:82:fd:
37:67:e4:5d:b6:eb:15:d5:19:2c:e3:56:08:1e:22:
db:b0:be:bf:c6:31:e8:98:fd:a9:99:7b:5f:b8:73:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:39:D8:0F:59:86:BA:BF:41:B2:B4:F1:94:F4:86:CD:BC:93:25
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/d7M52A9Zhrq_QbK08ZT0hs28kyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.129.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a3:be:99:c8:0d:e6:c1:1d:7d:21:b6:5f:78:71:66:03:cb:
28:ff:8b:66:93:c4:e6:2a:c1:e8:be:62:ec:4a:5a:85:a6:dd:
aa:a1:bb:64:d4:df:1f:ea:c1:7f:20:67:5e:53:e3:9d:d5:4b:
9c:69:21:48:0b:88:fb:89:1b:cb:ea:43:2d:4e:3d:e5:ce:c7:
6e:e2:4e:b0:63:bc:0f:ed:be:ec:62:b8:30:83:3d:0d:20:7f:
68:0b:b8:04:d5:6c:c0:23:e6:d8:24:a3:92:8c:53:30:ec:97:
45:11:72:aa:1f:eb:9a:d9:74:95:4f:63:7f:c2:96:56:44:48:
aa:f7:6b:fa:dc:56:93:17:52:83:3f:96:a4:83:75:be:68:f9:
89:f9:05:9e:82:af:9c:cb:05:2a:39:c8:f2:28:23:f6:ed:ed:
be:86:50:75:f9:28:08:ae:30:f3:ba:7f:c2:50:4f:e2:18:f5:
56:d2:6a:32:3a:b4:75:37:38:4f:3e:db:73:bf:9e:e2:50:eb:
ed:ed:31:7c:ea:56:67:a8:3a:65:0d:4e:65:47:20:38:a8:a6:
cb:29:03:d2:d0:e4:ae:cf:b1:12:49:d2:09:a3:66:d9:ac:8c:
3c:d7:cb:27:5d:a2:0a:22:59:f0:33:3a:20:04:f4:c9:fb:01:
65:0c:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:19 2024 by rpki-client on console-ams.rpki-client.org