Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/n88NeOg50HzZdtQQIWH2fBtLspE.roa
File: n88NeOg50HzZdtQQIWH2fBtLspE.roa (raw, json)
Hash identifier: 2MktlZJ8yih0pO9UI+N77D/BDG1RYDdu7b4OXIWE0mQ=
Subject key identifier: 9F:CF:0D:78:E8:39:D0:7C:D9:76:D4:10:21:61:F6:7C:1B:4B:B2:91
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 018CC9BCA3D5B2FE2D5586E57282E5BB3E53
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/n88NeOg50HzZdtQQIWH2fBtLspE.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49121
IP address blocks: 37.77.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a3:d5:b2:fe:2d:55:86:e5:72:82:e5:bb:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcf0d78e839d07cd976d4102161f67c1b4bb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:b9:20:dc:7b:69:0d:2d:8b:42:33:14:00:
1a:9d:3d:fa:dc:bd:42:44:41:04:d5:a7:7a:46:de:
80:04:1c:4f:b1:cf:52:c2:79:54:f9:57:60:09:1b:
ae:27:aa:13:fb:11:d7:21:05:b6:1c:8a:83:37:f3:
d9:00:c5:3b:c1:08:e2:4f:b5:23:88:82:b2:f0:66:
a1:ff:ad:5b:52:3f:fd:32:5a:05:3b:29:81:9c:ab:
ac:fc:ff:70:8b:4e:0e:72:7d:da:5c:96:61:0b:06:
96:e1:19:51:fc:48:17:15:64:c4:e9:72:04:9d:8d:
99:0b:1a:32:49:a1:ac:d1:13:f3:a0:98:2a:15:8c:
ac:fc:62:9e:56:d9:2f:75:95:68:7e:f6:e6:d4:5d:
3f:12:2d:15:e1:2c:fe:eb:0e:e8:43:8d:d0:aa:29:
3b:ed:15:5c:61:b7:7d:ef:79:42:ec:19:72:7a:66:
78:1a:04:c0:65:a1:67:05:c4:fb:36:83:1e:3e:c3:
c1:38:7d:c1:90:bd:0b:cd:00:aa:cb:7a:fe:d3:42:
22:e5:ea:82:5b:c1:e2:d3:7c:c6:64:2a:e3:1d:84:
f9:04:94:74:90:f1:b7:2e:3b:a0:59:a7:4e:04:27:
6f:5f:05:cf:21:40:32:70:44:87:38:d9:45:57:cd:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:0D:78:E8:39:D0:7C:D9:76:D4:10:21:61:F6:7C:1B:4B:B2:91
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/n88NeOg50HzZdtQQIWH2fBtLspE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:84:7e:e6:f3:89:01:cd:65:25:0d:a9:5f:a4:ca:6c:7b:6d:
f9:c5:b2:2c:27:cf:96:17:fb:47:2b:dd:68:ad:6d:92:3f:4d:
f5:86:00:63:b4:3e:50:2b:aa:4f:3f:4a:98:64:dc:d6:80:e4:
6a:4a:fa:75:6d:f7:89:32:b5:16:c7:80:87:f8:66:b7:ba:bf:
bc:9e:9c:3c:bb:9a:b7:9a:28:15:4e:b8:eb:de:20:56:5f:e4:
1c:66:8c:6e:f5:18:54:e3:37:02:37:bc:7f:27:cd:99:ff:c3:
be:69:76:b5:ef:c4:42:74:ee:11:80:c7:d2:8d:14:5a:4b:b1:
fd:7a:48:c4:be:10:8d:cc:5f:44:9b:3c:86:76:70:01:5a:f0:
5e:14:c1:c6:17:c3:af:5b:04:80:e6:c8:f1:66:06:54:36:01:
d3:50:25:4d:b3:00:1a:21:ee:e9:9b:2b:3a:f8:44:2d:e8:a6:
71:bc:0e:6a:62:ba:d4:85:1c:68:52:ae:6a:54:2c:62:65:4f:
92:07:11:3d:7e:74:a6:03:53:d7:79:0c:4c:1d:91:1a:1d:6c:
c6:6a:e9:5e:77:99:23:d2:62:e9:7c:c0:2c:74:55:32:ae:83:
b0:8d:ec:c1:15:37:16:02:dd:75:a8:47:0f:cf:83:3d:98:c0:
90:03:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:47 2024 by rpki-client on console-ams.rpki-client.org