Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa
File: pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa (raw, json)
Hash identifier: Rh10inA0ISfz2+kdDo6jZ1yv7uyvCL+KqzVv6El2/lc=
Subject key identifier: A5:20:D4:40:FD:5B:E6:8D:E7:3D:7E:E8:C3:47:FD:12:10:31:9F:F7
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018CC6B83D7BD218EA9CF1DBFA8CB68CC1AA
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa
Signing time: Mon 01 Jan 2024 20:30:12 +0000
ROA not before: Mon 01 Jan 2024 20:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 77.73.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3d:7b:d2:18:ea:9c:f1:db:fa:8c:b6:8c:c1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 20:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a520d440fd5be68de73d7ee8c347fd1210319ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:6a:e0:13:d5:47:4b:3a:e8:6f:b2:23:77:
eb:d0:a1:ed:b1:ee:42:6e:39:8e:61:ce:25:d7:a1:
cf:d1:c1:5e:ee:cb:92:36:6b:86:53:8b:70:3a:ee:
45:e4:81:11:7c:d9:7d:1c:78:bc:c8:bf:36:b4:42:
44:d1:2b:a3:34:bb:ba:b4:19:c3:38:a2:9a:58:3e:
51:f1:0c:15:48:18:ba:e4:15:a4:89:ef:7a:9d:a5:
e9:4a:d1:53:0c:de:c7:41:c7:c3:74:a0:4f:62:31:
70:13:50:29:27:35:80:f2:36:b8:19:81:f9:e8:db:
37:cf:9b:5a:a5:78:2e:ff:02:32:cb:5d:28:11:fb:
59:50:6e:f6:41:14:f9:ad:a2:23:38:b7:0c:06:4b:
66:b9:af:ae:f3:3e:23:df:72:09:72:d2:4e:96:40:
7d:81:19:0b:77:e6:cf:a6:5a:46:56:d7:85:01:4c:
bc:09:6b:47:b1:a8:f6:3f:06:02:32:ac:90:28:3f:
a3:d3:1b:80:51:52:a9:98:03:08:87:c4:9a:25:2d:
04:e2:6c:fd:2d:4e:a9:f3:0a:5d:bb:cf:a8:ef:f4:
7c:ce:a2:60:ec:34:9f:2a:ab:9b:48:b4:b6:20:a9:
3d:4e:b4:a1:e8:e8:f0:fc:bc:92:46:88:b2:78:04:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:D4:40:FD:5B:E6:8D:E7:3D:7E:E8:C3:47:FD:12:10:31:9F:F7
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:90:85:f7:f8:6e:7d:a4:34:ba:85:4a:b1:14:ab:01:a2:79:
b6:25:57:51:43:e5:d0:f4:e0:8e:72:d5:63:5b:9f:5e:76:83:
4c:89:df:1f:63:f6:b2:20:3a:c1:62:4e:32:15:00:38:17:db:
d4:8c:d1:27:3b:c9:2f:bf:e6:a0:7a:31:36:d2:e6:d7:f4:6b:
81:84:f3:d8:f3:32:43:26:9d:47:76:28:88:62:b5:40:a4:47:
03:3d:1e:e5:85:ba:5b:ad:6d:02:0d:48:66:34:48:29:f6:c7:
04:70:c5:ea:85:98:69:13:ba:72:c5:a1:7e:86:35:1f:94:69:
55:a4:ab:5d:43:ea:c5:80:b0:71:5e:e2:f6:f0:20:f9:c6:7d:
81:dc:73:55:d2:4d:60:89:5a:9b:48:8f:16:27:46:52:a0:83:
d8:c8:ca:dc:55:f5:0d:d0:c5:49:9c:da:59:a0:e6:ba:40:29:
77:32:1f:89:58:29:97:aa:84:a1:6d:10:8e:9c:af:98:90:c4:
04:5e:7e:4e:e9:f9:2a:95:69:56:fc:ee:88:4d:79:5a:58:55:
f4:49:b4:ae:65:2b:88:b6:06:2b:5a:6e:0c:9e:3a:56:32:29:
7c:6b:8d:64:ed:83:db:30:68:2a:17:b9:e1:6a:c1:6c:14:53:
f9:10:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:26:08 2024 by rpki-client on console-ams.rpki-client.org