Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/hRfJ7dNG6uBVSsWy4B054tmyPeE.roa
File: hRfJ7dNG6uBVSsWy4B054tmyPeE.roa (raw, json)
Hash identifier: +cY34uilMQ5MmgogP7riQXKEpKlwbmrXAt3i1xeeCWc=
Subject key identifier: 85:17:C9:ED:D3:46:EA:E0:55:4A:C5:B2:E0:1D:39:E2:D9:B2:3D:E1
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 018CC727698305ED968F71D60FD8A431D235
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/hRfJ7dNG6uBVSsWy4B054tmyPeE.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49072
IP address blocks: 77.246.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:83:05:ed:96:8f:71:d6:0f:d8:a4:31:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8517c9edd346eae0554ac5b2e01d39e2d9b23de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:15:f7:89:81:19:df:aa:ea:74:6b:cf:93:
40:0f:38:56:48:8f:11:3e:05:b6:2f:65:eb:09:95:
a3:d6:02:a1:f8:5c:07:b3:ba:1c:88:3f:78:06:cd:
42:5b:e7:cf:d1:5f:bc:00:5a:80:bd:28:46:27:d0:
95:3e:2b:53:4c:b5:27:83:bd:e5:e2:5f:c9:46:84:
8f:9a:66:58:a4:e4:42:d9:6b:7b:f8:db:78:65:78:
29:c9:cc:5f:ae:ec:93:f1:5c:d1:33:89:a6:35:ab:
21:64:f6:d7:ed:32:26:9d:cb:29:68:6f:a3:5e:49:
a6:b0:3a:9b:ec:72:1e:86:d3:0a:0c:97:73:aa:8b:
07:10:68:0a:be:47:da:ab:00:cf:69:f5:b6:bb:40:
77:d9:9f:91:fb:4e:60:1d:da:54:23:5c:fe:cd:4a:
c6:b5:b8:27:2e:96:6f:02:49:f8:2e:f1:eb:ca:32:
89:ae:fa:db:f0:6e:57:b4:72:95:56:36:7e:11:e4:
01:b2:28:6b:c1:a1:20:28:14:5c:4c:fb:f7:b8:7b:
24:fa:ce:34:18:73:51:ae:f7:e4:b9:75:c6:ea:1f:
a8:7b:e6:eb:7e:91:66:75:4b:a0:78:c2:16:32:f5:
32:e9:0b:94:5f:a8:08:9e:fb:01:ef:1f:a9:7d:a6:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:C9:ED:D3:46:EA:E0:55:4A:C5:B2:E0:1D:39:E2:D9:B2:3D:E1
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/hRfJ7dNG6uBVSsWy4B054tmyPeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.210.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7b:6f:47:b6:d9:50:d2:73:f7:8b:d5:bd:5c:2e:38:45:1b:
13:58:47:fa:37:43:e2:bf:18:0c:80:9e:01:9c:d0:eb:23:bd:
21:62:3a:17:0c:83:c2:46:b5:33:63:09:b7:30:cd:81:d9:76:
f2:22:02:c2:17:27:b6:de:ef:e9:bb:90:94:ce:f0:dd:e6:d0:
04:fd:48:fa:c4:20:9d:0d:60:8c:7a:f6:76:71:33:2d:1f:b5:
47:f9:64:a7:ca:93:ca:e5:48:d6:4f:d3:9c:ab:d3:a8:da:df:
42:aa:2b:e0:ce:2a:ba:08:0b:ae:ef:84:dc:65:f7:a2:43:69:
36:33:af:23:b8:ce:d1:ab:81:5b:0a:b7:b9:81:62:50:d7:aa:
af:b9:8d:af:b1:d0:35:a6:16:c6:27:49:3c:fc:f1:37:b5:2b:
cc:ce:c3:4a:91:b5:1e:9e:f2:69:94:38:a9:42:fc:11:a6:3c:
1c:5e:ed:0f:be:2f:ac:79:50:f6:e7:ff:07:51:7f:fc:37:ed:
de:28:07:7f:ed:2d:3f:95:56:e9:f3:e4:38:85:12:a4:0b:5c:
30:46:54:50:29:b2:83:f0:df:37:69:c7:c1:79:4f:02:30:c4:
84:4e:cf:41:79:89:d9:95:b5:8a:e5:02:c0:64:e5:7c:dc:91:
de:3d:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:38:42 2024 by rpki-client on console-fra.rpki-client.org