Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa
File: PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa (raw, json)
Hash identifier: +Aj4hE6opTlQ3Ya7ElxLHic9sE9TbK+hNiKNOZ4NljA=
Subject key identifier: 3D:EA:9C:63:E8:3D:4B:23:0A:0F:2E:66:4B:03:89:B2:1F:BB:61:59
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993708C04EFC74CDEF16804F9D59BF
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60976
IP address blocks: 81.12.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:37:08:c0:4e:fc:74:cd:ef:16:80:4f:9d:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dea9c63e83d4b230a0f2e664b0389b21fbb6159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:a0:c3:20:f5:a1:fc:8f:f7:34:ed:4a:ab:
de:6c:b5:13:15:03:79:f3:ab:54:69:30:25:66:cd:
fe:59:d8:68:22:13:77:f9:cb:17:73:3c:9c:09:d8:
41:e9:07:60:85:bf:53:99:1b:60:3d:fb:66:17:72:
94:f7:88:1b:41:d6:f7:b3:b9:6c:0f:2f:57:08:e3:
b1:f1:27:40:20:bd:ea:31:d6:e6:a6:ff:49:bf:a3:
21:30:ca:13:b5:19:99:67:67:ae:ba:a2:7f:58:90:
fe:96:46:ef:b3:d3:04:fe:3d:1b:1d:4e:b6:42:7f:
df:01:82:3e:89:fe:a9:58:52:55:4a:c9:ec:5e:5a:
86:da:f8:8c:60:7e:a9:ed:a9:a2:60:aa:87:b7:09:
18:5b:09:09:ea:3f:a2:23:09:e3:12:f1:6c:b3:4b:
d7:79:ef:67:eb:f5:7f:7a:cb:68:7f:25:c7:b4:64:
27:a8:7c:72:c9:e2:37:97:f7:b5:25:88:4f:02:2d:
cb:04:7a:62:8d:ac:ca:73:f3:2a:6c:9d:e5:31:8f:
a0:e0:54:25:78:6a:7e:ae:b0:81:a7:a4:12:57:3d:
e1:c5:69:65:80:a0:93:56:25:73:39:98:de:c0:c4:
80:03:9b:bc:84:86:bc:8a:24:f2:db:1b:50:27:b9:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:9C:63:E8:3D:4B:23:0A:0F:2E:66:4B:03:89:B2:1F:BB:61:59
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/PeqcY-g9SyMKDy5mSwOJsh-7YVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.25.0/24
Signature Algorithm: sha256WithRSAEncryption
53:aa:f8:ab:88:40:a1:26:43:1a:7a:a3:60:67:c0:79:34:ba:
3c:63:39:4b:b4:45:ce:2b:37:94:66:44:dd:56:23:11:48:f3:
f5:87:50:6c:13:0f:70:3f:bf:b8:e5:0a:78:94:71:2d:19:f8:
8d:43:59:66:ae:2e:9d:a6:27:61:c0:bd:fe:df:33:5a:ac:3f:
5d:d1:6c:65:95:7b:69:5f:cd:aa:96:00:33:12:5b:2e:e0:be:
4c:e5:b4:4b:b9:52:df:02:11:77:0d:c4:d6:83:5e:4e:1f:9c:
a1:c3:f0:25:61:05:95:78:5e:d9:fb:8e:a0:80:ca:d4:ab:e4:
b6:dd:51:35:2a:11:72:7b:a5:ed:9c:47:ca:14:74:7a:64:e5:
03:75:33:62:e0:c2:c2:e7:18:26:52:54:18:7d:9f:53:a8:01:
5c:ac:b3:d4:ca:be:f0:e9:3b:ef:0a:b7:3e:81:a9:26:0a:97:
af:a8:61:9e:38:55:d2:41:91:b4:59:e0:cf:81:81:c6:55:42:
02:24:0e:66:d9:07:ed:d9:1e:6b:a0:7e:a1:66:fc:8e:66:67:
97:23:ae:27:e3:40:8d:a1:94:c4:a6:90:d3:8a:49:45:dc:94:
c1:60:ab:00:e9:80:e9:0c:02:e5:65:65:de:c9:dc:4f:42:18:
ce:79:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:17:49 2024 by rpki-client on console-fra.rpki-client.org