Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/OK53yNinYE0h2sPPenopljfak8E.roa
File: OK53yNinYE0h2sPPenopljfak8E.roa (raw, json)
Hash identifier: Wfx9xX5/M6XWMKoqb9HfW8O0MzBmYBkz5pJrZz4MCAg=
Subject key identifier: 38:AE:77:C8:D8:A7:60:4D:21:DA:C3:CF:7A:7A:29:96:37:DA:93:C1
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 018F1FF42C6F49BDF99396CC4F94F8483CB0
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/OK53yNinYE0h2sPPenopljfak8E.roa
Signing time: Sat 27 Apr 2024 14:27:26 +0000
ROA not before: Sat 27 Apr 2024 14:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209974
IP address blocks: 46.243.185.0/24 maxlen: 24
77.105.148.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:f4:2c:6f:49:bd:f9:93:96:cc:4f:94:f8:48:3c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Apr 27 14:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38ae77c8d8a7604d21dac3cf7a7a299637da93c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:72:4b:10:a4:23:d3:9a:66:c4:bb:5c:f3:
3e:34:1f:31:6a:8b:a3:3a:39:32:38:93:56:b7:70:
4d:9d:25:2c:57:8c:0a:e3:24:1a:e2:d6:95:c2:20:
68:39:6c:f7:7e:15:67:b6:c3:e6:fa:fa:d3:97:f0:
ad:57:61:b5:70:30:2a:c9:e9:51:7d:14:b0:db:7b:
99:6f:b8:f7:d8:e4:2f:d8:fb:d8:cc:29:42:b1:5f:
16:56:58:5e:34:88:96:b9:bf:f7:69:48:19:5c:4f:
56:9b:47:4e:4e:d1:a1:93:45:79:7a:d4:45:f4:0c:
bf:35:37:65:51:6e:4a:cc:96:b9:b9:14:9c:46:9d:
4c:ce:c8:71:92:04:65:c0:4f:33:85:b4:43:a8:8d:
65:1d:ac:a7:f5:b3:ec:1b:45:6e:5b:27:7e:4b:07:
4c:ce:3f:4d:ba:3d:c1:15:4b:81:f3:5c:12:48:16:
84:e7:76:6c:56:06:ac:ec:69:d0:43:7e:bc:8e:88:
6a:0c:a8:80:ce:1c:2b:18:1a:6f:58:8d:5e:d7:fd:
a1:04:29:b5:16:2d:87:4f:e6:f6:fc:32:8e:19:d1:
d1:f2:8a:2a:e6:bc:d7:95:ff:e8:e8:28:cd:e9:0c:
a4:10:fa:0b:20:68:c4:5a:32:03:5c:97:44:05:3a:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:77:C8:D8:A7:60:4D:21:DA:C3:CF:7A:7A:29:96:37:DA:93:C1
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/OK53yNinYE0h2sPPenopljfak8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.185.0/24
77.105.148.0/24
77.105.152.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f4:28:d0:56:5a:44:9c:f8:90:b3:98:f2:7d:be:99:a4:c8:
f9:5e:7e:48:95:91:a2:b5:c7:2d:0d:ff:a9:4f:1a:17:dc:21:
7d:e7:ec:30:c1:7a:fc:a2:fb:13:a1:38:77:4d:52:1e:0a:7d:
b8:1c:8d:64:9b:7f:2f:68:42:e1:da:32:03:02:a6:b0:06:7e:
d0:b0:b3:e5:a6:a4:8a:12:a1:a5:21:97:bd:44:3f:e6:73:54:
22:63:8e:a2:5e:4f:a8:cd:2c:e9:4d:63:5f:20:99:74:e3:fb:
98:4c:66:12:f6:f8:b5:88:ff:54:89:ef:ae:40:4f:cb:1d:72:
d9:85:9d:05:b0:3a:61:f5:49:99:4f:0f:3e:90:c9:f5:26:e7:
b4:cd:59:d0:15:5c:b3:9b:8c:50:1e:9f:a0:ac:69:26:5e:c9:
41:20:41:f5:45:e7:f5:1c:3f:fe:5d:b2:14:db:93:3d:cb:7f:
6a:e3:64:79:c9:c1:ed:a0:6c:56:23:ed:7a:23:f0:4b:dc:af:
f4:f6:81:b7:a0:d0:c8:68:4e:ba:01:3e:0c:8b:49:73:ba:62:
a7:8a:f1:12:3f:ce:d2:ea:11:58:17:05:b1:72:19:7c:f1:ce:
6f:06:17:a5:97:58:a8:9d:5a:e1:13:79:e5:fd:cd:25:15:dc:
4e:80:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:55:31 2024 by rpki-client on console-ams.rpki-client.org