Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/MbBCt1bqvVsc4AU5KO9IZ_baVjY.roa
File: MbBCt1bqvVsc4AU5KO9IZ_baVjY.roa (raw, json)
Hash identifier: Ydc9LmcIRnLKkzvkXqWh3i7bkKT4rBCzBs/YtafuKqA=
Subject key identifier: 31:B0:42:B7:56:EA:BD:5B:1C:E0:05:39:28:EF:48:67:F6:DA:56:36
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 018CC794D371D6B2EB139976EF30510AF9F1
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/MbBCt1bqvVsc4AU5KO9IZ_baVjY.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47417
IP address blocks: 77.73.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d3:71:d6:b2:eb:13:99:76:ef:30:51:0a:f9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31b042b756eabd5b1ce0053928ef4867f6da5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:25:5f:46:e4:9e:4e:20:bd:ce:eb:0d:21:
74:a6:22:f9:05:e4:1d:35:84:56:e2:28:41:41:60:
e9:b3:03:61:e1:1c:b1:2a:21:35:6a:b9:60:96:d4:
4c:3a:67:e9:65:22:04:8f:14:4b:46:40:20:01:65:
6e:c0:58:7f:50:fb:17:ca:0b:b3:73:f7:67:55:fa:
71:19:19:ad:3f:5b:f9:b6:be:20:1d:ee:5d:b4:b0:
49:63:80:3a:bb:5e:8a:bf:c6:79:c8:a8:b1:f1:e1:
a4:89:72:4a:db:3c:51:32:06:7b:df:89:82:9e:6a:
ae:87:f5:43:f0:4f:3c:61:e8:9e:95:e7:71:68:6c:
9b:f4:33:01:6b:11:b9:a4:cf:a2:59:53:df:7b:28:
93:b8:8c:70:29:b9:94:a2:41:30:8f:51:b8:7d:86:
ac:51:74:37:63:e5:5b:46:6e:5a:19:74:8e:c8:ec:
a8:fa:bb:89:c6:37:31:07:f7:87:4f:4e:b5:dc:83:
6d:33:98:47:db:bc:7d:43:4f:38:5c:e8:3e:c9:ee:
e0:b3:d4:69:0f:a7:bd:68:9e:ee:f2:a7:db:bb:e2:
6e:33:5f:ee:35:be:b8:92:30:f6:7e:21:44:17:1a:
ec:d4:8b:ad:26:17:37:89:46:89:55:99:7a:df:4e:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:42:B7:56:EA:BD:5B:1C:E0:05:39:28:EF:48:67:F6:DA:56:36
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/MbBCt1bqvVsc4AU5KO9IZ_baVjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
77:e6:d8:3e:77:b9:64:b7:84:76:09:8b:c4:f2:31:38:17:8b:
59:39:3b:3e:e9:47:20:37:b5:25:da:87:aa:74:cc:f9:43:19:
8f:22:a5:d7:e5:4f:48:a5:e6:c4:90:10:69:0f:4c:5f:9a:ee:
3a:24:2d:ea:6b:90:b6:fa:98:b4:23:ab:c1:19:75:77:ec:8a:
4b:66:7c:f3:81:64:62:9f:4b:fe:6f:3b:5d:8a:51:90:ed:13:
51:91:dd:6f:9d:9a:a6:c5:3b:cc:1f:41:74:cd:6a:53:7c:18:
60:06:db:95:1c:d3:7e:32:33:81:11:ba:ba:7a:27:8a:56:f7:
a8:a5:f2:86:ab:06:4b:a4:5f:92:0f:5d:f4:73:9c:a4:92:f5:
05:94:7d:78:bb:a2:c5:40:05:82:5f:35:ac:ad:5a:68:29:2b:
ff:50:05:32:78:a6:e9:dd:8d:18:97:65:49:43:19:44:a3:c4:
ce:1a:53:93:3b:69:dd:eb:6a:9d:4d:94:f2:50:19:74:d4:b7:
f8:4f:88:04:ec:5f:03:6e:67:f8:74:10:1c:17:ab:7b:ac:5a:
0b:4c:32:a3:d5:16:ce:b1:9b:e9:7c:c2:10:c9:26:ec:90:bf:
03:b0:32:4d:83:d8:21:04:b5:90:54:04:b2:7c:1a:f9:99:4c:
4f:54:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:25 2024 by rpki-client on console-fra.rpki-client.org