Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-nvG2wLhMuzq0_D9uza5FHT46j4.roa
File: 1-nvG2wLhMuzq0_D9uza5FHT46j4.roa (raw, json)
Hash identifier: A4yp1ue9G5kDZWXdR+pwltuTixm7h6g6q1Un0UW/gyY=
Subject key identifier: FA:7B:C6:DB:02:E1:32:EC:EA:D3:F0:FD:BB:36:B9:14:74:F8:EA:3E
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993228DC6A81016E6FC73C4CA54E36
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-nvG2wLhMuzq0_D9uza5FHT46j4.roa
Signing time: Tue 02 Jan 2024 14:34:46 +0000
ROA not before: Tue 02 Jan 2024 14:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44841
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:32:28:dc:6a:81:01:6e:6f:c7:3c:4c:a5:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7bc6db02e132ecead3f0fdbb36b91474f8ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:4d:be:79:55:bf:03:72:a3:55:a0:a6:b0:
cf:38:19:35:a7:29:90:7d:e2:7b:c4:f0:c8:04:06:
78:98:c1:f8:24:b8:4e:6c:7d:c4:58:6a:6a:71:42:
66:e4:89:14:e8:da:a3:02:63:7a:d8:ff:be:50:cc:
a5:2d:4d:5a:ce:7c:10:36:e3:3c:b4:73:cc:0e:26:
c5:ed:6f:c1:9b:1b:3a:28:7f:fb:94:37:04:1c:fd:
ad:8f:ef:1a:51:44:80:93:9c:9c:f1:d2:cb:20:be:
a8:26:bc:da:2e:66:49:59:f7:ae:1b:24:e3:5f:39:
bb:90:d0:90:46:0a:67:9d:bb:6e:15:54:92:a6:85:
bc:43:a4:f2:6f:e9:c8:39:e4:f3:9a:e3:8e:33:82:
52:bd:d7:ed:56:8e:a6:6a:d7:bc:a2:e4:e5:ee:a6:
4a:53:0d:f1:8b:35:f2:c6:52:64:56:1d:7c:fd:3b:
d8:49:09:1c:ea:f9:58:08:98:06:a0:0a:e1:5e:75:
35:a2:b1:90:85:ee:f9:fb:26:cd:4a:6f:af:56:7e:
37:f9:19:8d:01:5c:7c:1b:50:c5:5d:30:50:ee:f4:
6d:ac:22:c8:3f:a4:09:20:ce:fc:1e:14:e0:8e:a0:
44:51:83:82:96:e5:d7:66:ee:31:dc:69:cf:4d:66:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:C6:DB:02:E1:32:EC:EA:D3:F0:FD:BB:36:B9:14:74:F8:EA:3E
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-nvG2wLhMuzq0_D9uza5FHT46j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ff:97:03:d3:bf:ca:48:07:17:19:3c:14:86:05:60:b9:2c:
7d:ab:93:1d:53:3b:61:36:ac:ce:10:da:c3:5f:bf:23:be:ab:
73:d8:9b:2b:07:91:be:ee:15:9f:d2:64:62:67:16:bd:4f:27:
7b:eb:82:62:40:c2:c1:c1:f2:4c:0b:d2:d3:c1:3c:a5:af:ae:
e2:ac:ce:9d:a9:36:1b:66:d3:62:50:8a:9c:25:78:97:41:23:
b6:47:f9:90:27:cb:81:7f:c0:ba:e6:75:e4:0c:0f:34:d4:40:
e5:d0:0a:26:85:63:b6:9e:85:aa:df:b2:90:6d:89:9c:80:0b:
7b:cd:09:1d:b6:35:dc:84:ef:f2:5f:8b:68:a0:40:c6:7a:bc:
4d:9e:eb:47:a2:88:fc:6d:1f:2c:e4:c0:6d:c5:46:27:82:1f:
af:b5:65:aa:b1:b1:0b:9a:b4:d5:12:7f:82:09:11:a9:c8:3b:
18:a6:db:c9:27:24:0c:05:20:63:d2:6d:e4:94:26:ea:ac:65:
53:30:15:0a:d1:3e:8a:3a:b0:8a:97:e3:78:73:f9:f7:4b:8c:
87:4f:d0:0d:33:f7:bb:e5:d0:02:d2:1f:b0:d5:ce:82:16:c8:
a4:b6:7b:ad:1a:f0:42:2b:16:44:4b:ab:66:77:86:93:05:5c:
dc:0d:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:17:49 2024 by rpki-client on console-fra.rpki-client.org