Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/C3skymYNOrve2Hw38MSg92qR7Lw.roa
File: C3skymYNOrve2Hw38MSg92qR7Lw.roa (raw, json)
Hash identifier: 9YlOWZIsHjlyoNjzywPZsWaBdqBqyAzBmdrq8Kliy7c=
Subject key identifier: 0B:7B:24:CA:66:0D:3A:BB:DE:D8:7C:37:F0:C4:A0:F7:6A:91:EC:BC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DF3706AD7861E1FF7A9A1958BBFDB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/C3skymYNOrve2Hw38MSg92qR7Lw.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204827
IP address blocks: 77.220.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f3:70:6a:d7:86:1e:1f:f7:a9:a1:95:8b:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b7b24ca660d3abbded87c37f0c4a0f76a91ecbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:7e:d6:d0:ed:48:44:a3:5b:6c:5d:09:cd:
53:8c:24:79:c4:fa:6e:e9:c6:e2:66:74:02:3a:5b:
77:4c:5e:2b:30:fd:d8:3c:e5:df:58:c8:26:78:c6:
f5:b7:6b:50:1e:62:72:e4:49:04:0f:26:de:05:65:
db:9c:08:37:19:d8:d9:2b:ee:8a:d2:c7:65:67:32:
bf:ac:1f:16:47:ac:42:91:cb:0f:fe:ee:af:bf:cb:
70:49:a4:0a:a2:8a:7b:3b:10:b8:02:94:8f:85:73:
af:87:6e:d1:ba:c4:35:f9:7d:52:50:a0:2e:8c:a4:
6e:ff:92:da:1c:a8:34:d2:61:95:bd:fa:18:e6:67:
73:b0:e1:d7:32:8c:49:98:32:4d:c0:69:e6:61:cc:
0b:42:3e:94:82:94:eb:45:a1:8c:92:79:62:f6:50:
25:d3:0d:e5:2c:49:e0:1b:07:b2:ad:7c:e4:56:22:
9c:26:35:c9:55:b6:3f:a9:9e:dc:f8:f1:81:b5:12:
ea:dd:f8:c8:2a:ed:a0:87:1e:77:18:da:63:ce:bf:
cf:08:d1:bb:1a:73:a2:dd:a4:46:d3:cf:50:12:bd:
9e:1a:75:3b:45:f6:8d:9a:95:3e:bd:37:ee:cd:0e:
82:1c:38:2b:5b:28:c6:cf:5c:ab:77:8c:f5:45:dd:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:24:CA:66:0D:3A:BB:DE:D8:7C:37:F0:C4:A0:F7:6A:91:EC:BC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/C3skymYNOrve2Hw38MSg92qR7Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:be:2b:8c:da:de:4c:57:5c:ad:97:fe:de:26:4d:e9:e0:c4:
3c:01:35:62:92:84:52:3d:7c:3b:0d:6a:ce:83:0a:26:5f:c8:
fd:08:8d:b0:25:64:16:71:1c:59:9e:83:77:35:a7:14:ee:9e:
94:96:68:75:40:c9:d5:37:53:8e:ca:c4:05:5e:14:0a:4f:cb:
ce:61:11:4a:ab:81:4f:7f:0e:45:b6:ce:c0:e7:0e:bd:97:d2:
e8:1e:aa:74:e1:ae:c6:d6:b4:97:22:e5:65:d3:69:c5:25:b8:
1f:68:a9:f1:fe:72:73:c3:f7:d3:4d:c2:e9:14:86:34:80:04:
d1:aa:e9:73:1b:dc:37:ee:a2:c5:72:e2:24:f2:69:18:2a:09:
f4:87:91:8e:e5:2f:c8:90:41:fe:9a:02:23:43:cf:5b:e0:c3:
6c:e1:50:60:c8:2b:83:4e:11:5b:c7:62:43:28:e5:72:2a:6e:
d1:d3:f1:d2:77:0e:d3:36:ee:90:a2:6e:9e:5f:26:28:9c:b9:
ec:13:da:b3:6e:9a:24:76:ec:82:e6:d8:c6:f0:27:33:0b:45:
c9:31:d0:5a:e6:92:95:28:bf:b6:fa:90:51:c8:83:ef:ea:a3:
6f:a6:e8:2e:bd:dc:4f:11:e3:ef:e1:11:8c:b9:30:f4:a1:a3:
b9:b9:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:15:05 2024 by rpki-client on console-ams.rpki-client.org