Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa
File: 3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa (raw, json)
Hash identifier: Y/D+4NC6VflipmscZHLXDFp1Np3UQMfwCg5en3BfdLQ=
Subject key identifier: DD:1C:EE:5E:32:BB:C9:53:6D:80:01:EB:BC:2B:DF:ED:E1:7A:6B:0D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993696DC350D4B23396336285F49AD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60627
IP address blocks: 87.107.66.0/24 maxlen: 24
81.12.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:36:96:dc:35:0d:4b:23:39:63:36:28:5f:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd1cee5e32bbc9536d8001ebbc2bdfede17a6b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:51:c7:f3:65:68:75:32:f2:5b:8c:61:37:
14:7b:b0:21:8f:c3:6e:25:70:09:a7:e6:b9:ce:ca:
86:86:4b:2f:2e:c1:56:56:0a:85:b4:91:59:8f:49:
57:22:89:3c:5d:bc:ba:eb:d2:0c:cd:54:31:a8:46:
d2:03:ce:dd:e3:2d:f5:89:62:70:b9:ef:02:db:ac:
68:ee:eb:2a:08:9a:34:e5:69:69:f8:1e:9b:ab:65:
a5:b8:ba:ed:e5:c3:f1:98:79:9e:fb:92:c6:d0:90:
9f:3a:b2:74:2a:94:1e:98:65:3c:20:2a:95:8b:68:
31:42:ec:f4:38:db:f8:e8:c0:8e:dd:2f:09:bf:44:
9f:0b:ef:1a:7e:c1:3c:ba:67:ec:e8:e4:59:e6:9a:
77:33:dc:96:8b:73:37:4c:80:05:4b:2a:a1:fb:e8:
61:c8:8c:b5:6f:44:c2:af:18:a5:6f:cf:0e:1d:63:
93:b5:29:61:c2:87:fd:46:8e:45:67:2c:16:83:fc:
42:00:23:8a:9c:49:78:5a:43:7e:cc:0f:ce:ad:e9:
a9:2b:e7:76:b7:cd:38:29:0c:90:17:ed:38:d7:e7:
23:e2:84:86:f3:07:41:04:45:6c:48:ce:6f:95:61:
a2:e1:87:f8:be:41:bf:be:64:cb:41:3f:9d:e4:0d:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1C:EE:5E:32:BB:C9:53:6D:80:01:EB:BC:2B:DF:ED:E1:7A:6B:0D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3RzuXjK7yVNtgAHrvCvf7eF6aw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.63.0/24
87.107.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:30:56:ee:8e:d0:92:7a:ad:08:03:a1:91:8e:ae:5b:a1:8d:
a8:42:c4:46:92:2f:a2:6c:80:ec:15:11:be:f3:5a:a9:3e:57:
f9:8d:fa:e0:8a:80:06:c8:f1:07:01:af:b5:cd:c9:ab:54:37:
93:6e:8c:b1:a7:a8:d6:5b:14:97:f0:1a:69:f5:a4:43:a0:ab:
c0:f7:6c:50:fe:0c:c9:0c:b0:06:21:b4:40:77:f5:71:71:42:
bd:63:df:1a:60:bc:c5:5c:77:61:99:2a:53:45:33:f5:cd:8e:
ea:0d:c1:10:85:05:47:b8:a4:0f:ba:d9:5a:d9:fa:c0:aa:4d:
55:23:1a:a8:77:e3:51:4d:65:f6:15:9c:8d:16:eb:f9:a0:25:
57:ee:17:2b:c9:f8:a9:4d:dd:b0:5f:ea:e5:bb:1c:68:63:df:
93:d3:b8:90:ba:7a:18:a7:de:8d:cf:c1:87:4c:fb:12:15:0f:
d2:4a:f4:4b:9e:ec:c9:d1:e4:1a:19:bc:83:c8:80:e0:86:77:
ab:b4:20:7e:eb:dc:b6:4f:98:f0:50:ad:7d:fb:ae:07:44:b0:
1d:5e:76:4f:da:9d:3b:df:50:b9:e7:81:c3:c0:0d:85:8e:c4:
e1:b6:7d:c2:40:b5:53:b3:04:51:3c:4e:37:84:7c:d6:38:5f:
b0:54:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:17:49 2024 by rpki-client on console-fra.rpki-client.org