Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa
File: ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa (raw, json)
Hash identifier: RGUpa6zI6Iy61mTHgH0VMpPNJxB+7VjYvXNZp/LWbJ8=
Subject key identifier: 65:81:70:B3:A8:29:AB:53:AE:F8:CF:E6:FC:EA:CA:5F:F7:66:1F:D4
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA99363876364B2D1BA45895A9164474
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa
Signing time: Tue 02 Jan 2024 14:34:47 +0000
ROA not before: Tue 02 Jan 2024 14:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59962
IP address blocks: 87.107.56.0/21 maxlen: 24
87.107.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:36:38:76:36:4b:2d:1b:a4:58:95:a9:16:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=658170b3a829ab53aef8cfe6fceaca5ff7661fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:b2:78:c7:e4:1f:4f:87:30:9e:08:a1:cd:
00:ec:b5:fa:97:d4:64:3e:4b:3a:31:6e:72:de:f5:
31:27:2d:68:71:0f:1b:f5:79:6a:c3:a8:e3:1f:a5:
b7:c8:ef:20:80:9c:04:70:8a:e3:ce:ca:fc:67:f5:
cb:9a:fa:70:90:81:47:e4:51:92:aa:35:08:bc:e3:
8a:50:24:cf:58:93:e0:b6:78:02:22:da:9a:c2:37:
63:06:8e:9d:b1:88:08:ba:10:3a:c5:45:59:29:e9:
56:54:61:55:49:92:96:1f:ff:c0:5a:39:3a:e1:b2:
9a:a7:fd:af:da:2a:ae:00:cd:15:07:96:80:a4:a0:
74:c3:05:71:4d:53:1e:90:94:0e:a1:3f:4b:c6:a4:
6c:c4:57:78:a4:0e:14:39:35:9d:ff:79:70:9d:35:
ad:d4:f4:14:15:6e:cb:bb:08:2b:10:40:93:48:f7:
03:2c:a0:62:b6:a5:41:54:7a:49:dc:ee:89:ff:2b:
76:29:cb:35:b0:6d:3f:51:3f:a0:3c:98:6d:b4:b6:
e4:75:f2:18:b9:37:5d:64:94:40:09:d7:81:59:07:
65:51:2d:fc:33:54:6d:bf:4a:f5:bf:96:f0:00:34:
13:cc:17:38:de:d5:b9:7b:d0:6f:88:83:66:a2:12:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:70:B3:A8:29:AB:53:AE:F8:CF:E6:FC:EA:CA:5F:F7:66:1F:D4
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ZYFws6gpq1Ou-M_m_OrKX_dmH9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.56.0/21
87.107.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:04:7d:47:eb:27:8a:51:ee:ca:52:9f:c7:df:6c:28:c8:9e:
50:67:f5:ca:dd:86:8a:c1:4d:d4:a6:d7:9b:26:ec:94:4c:ef:
2b:47:51:85:68:5e:fc:b7:9c:2d:13:c8:f6:78:53:6c:63:4e:
bb:14:df:e0:62:88:b8:31:46:14:ca:df:0b:21:29:a5:4c:fa:
eb:d5:4a:5b:c5:8d:bb:75:ff:54:f3:de:c4:c8:90:d7:59:82:
64:c9:9d:0f:74:de:ed:4e:14:96:30:51:54:4a:ac:f6:d3:a2:
e1:cb:91:0d:1e:8f:e5:27:b2:67:1f:1b:e6:f9:0b:e1:30:04:
e2:6f:b1:76:87:95:e4:b8:ee:c6:11:00:4d:1d:25:55:3c:0b:
37:bf:6d:13:2c:19:44:5c:d8:b1:a6:b5:56:1d:53:70:8d:b8:
c0:97:bb:ad:c7:a6:86:6e:65:43:b7:53:1d:52:ec:d0:e2:8d:
ab:31:02:72:ac:a4:1a:6c:02:e4:e4:50:0c:64:0e:06:2c:b6:
6d:37:aa:36:12:97:1f:4a:da:6c:b4:ab:8a:0b:20:3e:85:ee:
58:3e:c3:3a:64:9d:5e:94:c7:d6:6e:91:f4:f8:fb:6b:dd:98:
3a:72:3e:9a:26:8f:52:57:3d:09:54:da:a8:4b:79:b8:64:87:
81:21:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:33 2024 by rpki-client on console-fra.rpki-client.org