Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hW4m-zRs3ntd87fPijwYVVmDAy0.roa
File: hW4m-zRs3ntd87fPijwYVVmDAy0.roa (raw, json)
Hash identifier: zntKP++AIGsZ911oUeAY6twZddqU9zdID1/V2i+PK+o=
Subject key identifier: 85:6E:26:FB:34:6C:DE:7B:5D:F3:B7:CF:8A:3C:18:55:59:83:03:2D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE73727AE38AAFA38950EDE938DB6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hW4m-zRs3ntd87fPijwYVVmDAy0.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39266
IP address blocks: 77.242.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e7:37:27:ae:38:aa:fa:38:95:0e:de:93:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856e26fb346cde7b5df3b7cf8a3c18555983032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:59:e8:27:f4:42:1d:7c:ac:7e:2c:ea:ac:
32:40:d1:3e:b0:07:7d:65:0c:ee:99:c2:49:18:66:
d4:54:1a:e9:1d:db:ba:ee:5d:1a:f7:14:34:22:77:
2c:e9:82:69:9d:2a:92:84:80:46:f4:96:a1:72:56:
87:32:c5:e9:26:59:0e:6d:b7:bd:63:97:84:99:33:
0b:65:de:50:22:bb:43:36:5b:fe:a7:b8:b4:dd:eb:
3a:81:ee:18:47:0a:98:f3:90:a8:c0:18:11:a7:d5:
4b:27:39:51:2a:b1:fd:3e:d2:61:ff:05:61:06:20:
22:63:2b:f7:9a:21:4d:51:fe:5c:48:c5:96:fd:2a:
c7:94:49:21:5a:81:b8:dc:7b:b2:8b:49:c1:23:e3:
29:b0:d5:e1:a9:dc:3e:df:d8:f7:8b:be:90:84:ce:
5e:e7:82:cb:f9:61:74:ba:70:01:54:be:ed:55:9f:
c2:1b:a4:ec:3b:26:6d:74:a1:05:44:c1:dd:b5:c8:
a3:60:a4:4b:15:b8:fb:3d:41:75:40:7d:1d:8b:47:
80:91:de:c6:7b:a7:8b:93:eb:99:ec:5d:4e:25:06:
8f:09:08:21:24:72:05:c9:8f:4f:35:0d:0b:04:c8:
b0:96:bc:ae:7e:f3:4d:65:16:71:a8:da:4c:45:d1:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:26:FB:34:6C:DE:7B:5D:F3:B7:CF:8A:3C:18:55:59:83:03:2D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hW4m-zRs3ntd87fPijwYVVmDAy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:43:cc:f4:b5:f3:bb:43:42:fa:04:a0:91:a1:03:ae:94:a3:
32:29:ff:ef:ff:c1:f7:91:d5:4a:26:f5:5a:2a:50:28:15:56:
68:4b:ef:fa:fb:e6:cb:20:d8:d8:e6:cd:97:2e:25:95:7c:08:
ad:28:a5:ba:80:9e:31:56:a6:2b:3f:91:de:75:dd:a3:d4:e9:
6a:45:e1:0f:86:a6:e3:ba:94:b9:02:c0:f0:cc:ae:e0:17:30:
02:e6:2b:4e:dc:28:6d:f0:a2:fb:6f:31:ab:b1:b3:74:4c:5d:
a8:8d:de:16:c9:32:42:9e:4c:b5:cf:6d:6d:7c:e2:2c:3a:7c:
dd:62:dd:2e:dc:a3:c2:27:fc:60:36:ce:47:c0:3a:11:c7:a2:
dc:54:c4:d5:57:14:99:77:ed:f6:54:5f:a7:64:98:e1:ba:3b:
fc:d1:e5:f9:c2:ba:de:cd:70:dd:f9:cd:43:4b:a6:1f:6f:db:
5c:fa:73:45:29:33:a4:82:dd:a0:67:ba:f7:7a:4d:4f:5d:5e:
a0:85:f9:93:36:2a:51:0f:7d:c2:0e:96:10:99:16:0c:a9:e8:
ca:08:52:d8:31:27:41:d5:1f:0c:6a:c5:68:c3:7a:76:8c:95:
c8:4c:6c:a2:3a:31:7a:18:b0:cb:47:ad:02:09:83:70:98:f7:
e2:31:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:15:05 2024 by rpki-client on console-ams.rpki-client.org