Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/d_mUkh9uasXxV3lfEyvCjtN521I.roa
File: d_mUkh9uasXxV3lfEyvCjtN521I.roa (raw, json)
Hash identifier: St3Ghym4DuE4jSA/78E0mIq9YuCwwaa+rz/4NROVEyY=
Subject key identifier: 77:F9:94:92:1F:6E:6A:C5:F1:57:79:5F:13:2B:C2:8E:D3:79:DB:52
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 018CC5014C4698AE64C543B9BD3921A7433B
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/d_mUkh9uasXxV3lfEyvCjtN521I.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34306
IP address blocks: 78.108.224.0/20 maxlen: 20
80.69.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4c:46:98:ae:64:c5:43:b9:bd:39:21:a7:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77f994921f6e6ac5f157795f132bc28ed379db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:e3:7d:fc:86:e8:6c:b7:5f:1a:62:a3:b2:
15:b8:d4:1f:58:4f:0f:12:68:de:72:e6:49:f5:14:
9b:d8:e6:6b:15:28:fe:db:f3:74:a9:b4:51:65:0e:
66:39:af:97:3e:8c:1f:e7:a8:27:5c:a5:b9:83:b2:
c1:6b:ea:71:94:08:6c:c5:b7:05:c7:9d:8d:1a:83:
66:bf:bb:c8:b9:d2:92:bc:ef:ec:0a:e1:24:96:d3:
a8:84:cb:f9:b8:0f:ca:07:5f:2a:47:4d:5f:6c:0d:
14:24:d9:e5:cd:d2:2a:32:9e:f4:05:c8:74:ca:49:
57:a2:2a:31:88:a6:5c:91:74:a3:85:95:8e:67:64:
48:1e:58:46:f8:bd:1b:a5:86:b9:e0:d2:a9:a4:8e:
04:40:cb:4e:05:13:0c:95:cd:a2:f1:4d:3c:19:32:
ae:28:0c:f8:19:c3:b9:5d:6c:9d:f5:43:43:1e:29:
a2:fc:5d:0d:f2:43:87:b1:4c:f6:db:53:03:4e:5b:
aa:c6:e4:60:57:a8:a4:b7:b8:f2:d0:9b:e5:6a:77:
7d:17:94:50:b7:2d:5f:ba:a5:e6:c9:12:f4:61:70:
de:6f:93:92:de:4b:35:88:ff:2c:4e:0b:b5:e6:98:
98:c7:20:3a:64:da:94:19:3c:3f:d5:76:f8:b2:58:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:94:92:1F:6E:6A:C5:F1:57:79:5F:13:2B:C2:8E:D3:79:DB:52
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/d_mUkh9uasXxV3lfEyvCjtN521I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.224.0/20
80.69.208.0/20
Signature Algorithm: sha256WithRSAEncryption
22:41:88:79:ec:42:43:c5:95:7b:19:35:a5:c9:cf:f5:00:5f:
da:b1:4b:4c:50:42:26:48:6f:75:18:ac:53:0f:e0:01:1f:4c:
36:77:09:8c:fd:f6:aa:eb:7c:30:31:4c:e1:1e:ad:c3:46:d4:
fd:d5:4f:74:f9:a6:6c:d9:c6:6c:a9:20:74:8e:ef:0f:ff:31:
85:ee:96:8b:80:40:d8:9f:f8:9c:c8:5a:c7:ee:a1:30:8d:a9:
0e:d7:c0:6d:57:fe:5e:f4:4f:be:34:40:1e:42:b9:3d:90:89:
5d:dd:f6:04:42:26:97:1f:2f:33:f9:a4:a4:5e:39:15:2d:92:
e2:a8:8a:d3:5d:b3:44:f5:68:79:33:da:40:c2:2c:cc:88:24:
6b:a6:cb:07:79:c6:76:79:c6:1d:e4:93:65:a1:d5:03:ef:1b:
32:f3:03:27:d2:95:10:70:7f:1e:15:13:61:6a:ca:08:24:f2:
18:3b:b4:6e:9b:27:e5:1a:8f:e4:c1:0a:f4:a3:a0:5e:22:4b:
d2:08:29:c8:68:6d:91:77:ad:eb:dd:81:d5:bc:9c:d0:21:cd:
4c:5b:4e:b4:69:7c:f6:bf:9e:04:b9:22:54:66:9e:bf:f0:28:
34:93:10:32:5a:af:06:4e:eb:6d:d3:64:08:98:c9:45:bc:98:
89:b8:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:08 2024 by rpki-client on console-ams.rpki-client.org