Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I6ap7oeK_nPS5VyMT7PytvS0W2o.roa
File: I6ap7oeK_nPS5VyMT7PytvS0W2o.roa (raw, json)
Hash identifier: mGnJLeGTdtsUbzARrLbFkzK4o0t3b2HEW1BF1kem8Ts=
Subject key identifier: 23:A6:A9:EE:87:8A:FE:73:D2:E5:5C:8C:4F:B3:F2:B6:F4:B4:5B:6A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993A1288483B20F1D11F960C0538CE
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I6ap7oeK_nPS5VyMT7PytvS0W2o.roa
Signing time: Tue 02 Jan 2024 14:34:48 +0000
ROA not before: Tue 02 Jan 2024 14:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205207
IP address blocks: 81.12.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3a:12:88:48:3b:20:f1:d1:1f:96:0c:05:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a6a9ee878afe73d2e55c8c4fb3f2b6f4b45b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:b0:00:c9:3d:ad:75:56:b5:b0:64:9b:5f:
d0:f8:36:88:b2:d2:88:74:70:bc:c9:bf:ab:9b:6b:
ac:4c:f2:2d:81:f7:aa:53:ae:d5:d8:9c:12:c3:30:
d2:88:9e:d1:88:00:43:71:c9:85:1a:c4:52:6f:48:
71:34:6a:c6:e1:6a:73:71:0a:02:c4:1c:2b:e4:53:
bb:07:61:1b:20:f6:91:2f:2f:a8:ae:fe:c2:b1:ab:
98:c0:16:d9:9f:47:22:0c:f8:5c:7b:95:cb:e8:91:
6b:46:6d:9f:bb:38:93:13:aa:65:66:3a:ea:ec:3b:
0f:b5:7f:c8:7c:04:14:8e:84:da:8a:06:79:df:7f:
1f:d5:41:28:0e:8b:61:76:a9:fb:ba:95:ff:f3:c8:
d9:fb:36:9f:4f:3e:94:63:17:fd:58:cf:da:e7:d5:
15:ea:11:91:48:a8:9d:71:49:32:32:12:0d:ae:09:
dc:4f:06:52:59:eb:0a:36:35:8b:10:20:0c:be:cb:
cb:b6:f6:a9:49:56:02:a8:a9:a7:4b:02:9e:22:f9:
1f:cf:ef:38:61:b2:be:14:94:b2:f0:fd:40:37:70:
a0:a0:c8:1c:e5:35:c0:6a:2d:ca:4d:eb:88:be:b9:
bd:32:93:40:db:65:1d:77:b9:55:6a:3c:15:b1:78:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:A9:EE:87:8A:FE:73:D2:E5:5C:8C:4F:B3:F2:B6:F4:B4:5B:6A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I6ap7oeK_nPS5VyMT7PytvS0W2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.77.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8e:f8:26:7d:eb:4e:af:b1:96:5c:40:42:93:18:90:b2:6f:
1f:58:b6:d2:0f:3a:22:ed:23:8c:af:39:ed:b4:12:21:32:d6:
27:73:00:80:51:49:39:4d:af:b6:79:60:d6:1a:6a:2f:01:54:
36:ce:76:b9:f2:85:28:50:83:f9:8a:21:e8:e1:58:76:84:43:
89:67:ea:69:56:f6:75:fc:63:60:2e:f1:18:66:83:9a:72:2a:
3a:a7:b5:88:e2:7e:86:3f:29:4e:c1:ff:5d:ca:44:af:d8:ef:
1c:eb:41:14:6f:bd:13:94:4e:1d:76:61:99:3d:46:3f:cf:ed:
7d:27:dc:b0:f3:35:03:c0:62:1d:18:76:67:49:e3:6a:b4:d8:
7e:5b:9f:71:8b:6c:d3:36:82:4d:86:88:2d:6a:19:85:01:1b:
5a:7e:1f:9d:8c:39:b9:9e:32:e2:7a:00:6d:6c:18:a6:b6:86:
f6:f0:a5:a9:01:ff:75:60:a6:19:2d:50:7d:53:65:47:ed:61:
ab:94:da:84:b5:af:64:cd:f7:78:5b:91:6a:4a:d5:29:7d:a0:
b1:10:64:f9:19:97:97:06:43:8b:ef:e7:1a:ef:95:06:da:be:
54:c9:14:65:52:29:f6:f0:da:72:18:86:da:43:01:65:b6:6f:
69:a8:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:33 2024 by rpki-client on console-ams.rpki-client.org