Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ggccHvu4tnbtfA-vjYFPbM97Hgc.roa
File: ggccHvu4tnbtfA-vjYFPbM97Hgc.roa (raw, json)
Hash identifier: ofClyljeHH1N97ZvHvj78hsp3NLl9opp9pQNzvLNyac=
Subject key identifier: 82:07:1C:1E:FB:B8:B6:76:ED:7C:0F:AF:8D:81:4F:6C:CF:7B:1E:07
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 018CC8DEFC30E373BE4C3BA9DE8994029A5D
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ggccHvu4tnbtfA-vjYFPbM97Hgc.roa
Signing time: Tue 02 Jan 2024 06:31:45 +0000
ROA not before: Tue 02 Jan 2024 06:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15787
IP address blocks: 212.69.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fc:30:e3:73:be:4c:3b:a9:de:89:94:02:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82071c1efbb8b676ed7c0faf8d814f6ccf7b1e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:4c:06:11:c8:a6:68:0e:ba:1b:69:7a:fc:
0c:96:68:ea:97:7a:39:1c:16:4a:fb:df:be:a0:26:
4d:92:1b:c3:73:13:33:6d:11:1d:c9:90:26:2a:c5:
28:b1:8f:2d:69:4f:37:ad:b9:1d:86:e3:f7:cd:0b:
c7:46:09:6c:ff:05:9d:78:32:56:ab:09:4e:60:38:
17:8f:50:11:72:60:77:2d:f4:3f:57:7a:93:1d:b7:
15:a6:65:02:f8:91:a2:0e:af:5f:54:96:30:56:26:
2d:c5:44:27:7e:71:e9:eb:77:57:83:54:3a:d4:2e:
b1:77:80:79:60:5a:14:28:af:55:70:1e:8e:df:07:
c7:2e:5d:be:a2:fd:19:12:20:bd:23:d9:43:09:89:
d4:84:0e:bc:ec:19:65:d9:9f:24:50:95:91:59:9b:
5d:70:79:51:52:b5:8b:fc:47:6c:6c:80:78:51:ee:
1b:46:11:2a:3e:8f:ae:c2:42:fe:4d:ec:48:e3:c6:
81:9c:df:63:fd:60:06:42:e7:66:85:7e:d7:03:16:
f8:3d:04:f9:9a:f6:e7:d9:c8:9f:55:b3:b9:08:52:
a1:c9:c1:6b:9f:10:10:d3:37:15:81:db:6d:98:42:
51:24:52:ba:04:4a:45:e8:43:72:63:9b:c5:bb:48:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:1C:1E:FB:B8:B6:76:ED:7C:0F:AF:8D:81:4F:6C:CF:7B:1E:07
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/ggccHvu4tnbtfA-vjYFPbM97Hgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.77.0/24
Signature Algorithm: sha256WithRSAEncryption
28:93:ae:5a:c3:8f:16:06:3f:78:aa:01:b3:2f:2e:00:05:84:
b6:88:73:8d:c6:7d:64:78:c6:df:30:bc:e5:9e:87:3e:f5:8a:
29:6e:06:91:74:4c:d5:4e:a7:2c:5e:96:8d:0a:ac:36:52:35:
4f:ed:e4:7c:37:ae:38:02:c6:d4:81:e5:74:24:69:d7:db:bb:
db:de:d6:17:00:bf:df:df:2d:14:ee:ea:c6:09:cb:8d:06:d3:
87:95:42:d6:0c:fa:5f:0c:51:86:8e:0a:52:d7:6f:78:62:3f:
85:2d:f3:2a:53:4b:83:ef:79:90:be:f2:05:de:25:4e:67:70:
11:ec:77:f7:4e:a5:ed:ab:47:84:de:b2:2b:d2:49:03:11:66:
af:e7:ce:a4:17:e0:e0:07:8f:41:42:63:ef:0e:1f:a0:5a:fd:
71:d8:40:de:c3:a0:b4:b2:2f:ce:ca:bc:cf:9a:39:62:eb:e9:
5a:e3:34:d6:9e:d3:08:9d:49:83:4e:37:18:dd:16:01:34:d4:
8c:91:5c:dd:37:eb:d0:e2:ac:e1:45:b8:a5:b8:4f:90:62:e4:
c2:c9:44:e4:db:70:0b:3e:c2:47:02:07:ef:1e:19:da:5c:36:
94:8a:cc:b7:12:e6:bb:a3:bb:33:b2:74:20:71:39:68:41:99:
94:76:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:13:03 2024 by rpki-client on console-fra.rpki-client.org