Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/djrPjomqpTwSUJA2ZPQSc0Xb18E.roa
File: djrPjomqpTwSUJA2ZPQSc0Xb18E.roa (raw, json)
Hash identifier: vE4wzFV0g/xbFs+YWAKm8gnmdr84vwibI1DW8QfNff4=
Subject key identifier: 76:3A:CF:8E:89:AA:A5:3C:12:50:90:36:64:F4:12:73:45:DB:D7:C1
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018F11201E3EAA3DD19B6B388363A6902E5E
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/djrPjomqpTwSUJA2ZPQSc0Xb18E.roa
Signing time: Wed 24 Apr 2024 17:21:08 +0000
ROA not before: Wed 24 Apr 2024 17:21:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39906
IP address blocks: 77.104.192.0/18 maxlen: 24
81.92.144.0/20 maxlen: 24
94.138.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:20:1e:3e:aa:3d:d1:9b:6b:38:83:63:a6:90:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Apr 24 17:21:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=763acf8e89aaa53c1250903664f4127345dbd7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:cd:0d:07:09:c8:fc:77:2b:fc:c7:ce:4c:
72:27:68:54:19:9f:5c:24:2b:23:e9:b1:62:ac:88:
e5:19:93:e6:e3:e3:da:6d:48:c2:e4:c1:c7:e7:31:
0e:11:f1:f5:89:7f:fa:4f:aa:05:5d:7f:94:4f:7e:
c4:6e:4e:ef:46:cb:70:27:9c:49:a7:5a:dc:13:89:
e6:0a:71:b2:5d:61:19:2e:11:41:89:16:8a:4d:bd:
2b:40:18:22:41:3f:c5:7e:49:b1:df:c7:7e:af:45:
7f:1d:19:0c:b7:97:1c:3e:67:b2:ba:ec:b9:cc:f8:
81:01:f2:4e:48:2d:e8:5d:21:81:6b:e2:ce:37:cb:
9b:7c:dd:cb:8a:21:94:b5:c3:f4:66:4c:66:f0:a0:
57:d8:63:c7:5f:ef:78:ec:0c:8c:84:e9:29:db:f7:
42:b3:dc:7d:d2:d6:13:1a:4e:3e:49:87:39:ed:f1:
11:1c:19:a9:dd:eb:1b:2b:4b:a4:b1:59:4f:8b:83:
40:38:6f:72:a9:ce:b4:fe:45:81:8e:be:de:f1:17:
a2:1c:57:1e:42:42:6f:8e:b2:d3:8a:bc:66:0e:42:
8b:5a:58:f6:8e:96:34:30:e6:0e:ae:36:9a:a5:20:
17:89:ae:11:f9:5d:fa:66:ca:18:50:a3:88:3e:66:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3A:CF:8E:89:AA:A5:3C:12:50:90:36:64:F4:12:73:45:DB:D7:C1
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/djrPjomqpTwSUJA2ZPQSc0Xb18E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.192.0/18
81.92.144.0/20
94.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
13:40:ea:ea:83:eb:37:48:e1:6c:9d:91:32:b8:c4:fd:54:96:
6e:36:90:7e:6c:c4:b3:69:ac:f3:49:96:2c:2c:f4:25:08:41:
c7:e2:51:d0:d3:30:33:f8:31:d9:37:90:44:ec:51:23:9b:72:
33:4c:8e:73:f0:a4:ee:84:63:53:27:af:86:27:9d:cf:a0:c8:
78:20:95:95:da:e5:65:7e:5c:7a:74:2e:78:b3:f6:03:02:82:
eb:9d:18:70:f9:dc:9c:0b:f5:3c:c0:5e:78:28:07:d9:5d:6a:
49:53:42:65:ed:1f:b9:20:ee:5f:05:f9:a0:95:2d:04:d6:e0:
81:ad:31:19:3b:5d:8d:6a:e7:d1:f7:54:31:73:cc:88:26:37:
af:49:da:d1:e9:c9:a6:bb:d9:65:c6:bd:56:ec:89:84:20:61:
30:0f:1e:05:c0:ee:92:c6:e4:f4:1b:0e:41:99:44:21:d1:d6:
73:f4:14:dc:a9:49:5d:0d:06:07:05:4e:f0:51:61:a1:0e:14:
aa:dd:97:eb:64:d5:8c:47:05:44:88:da:a9:95:d1:9e:59:cc:
88:2b:c2:e8:b0:e2:e1:03:8b:a6:a3:d7:92:a6:2c:15:5c:54:
80:d3:a7:b2:70:48:ca:4c:40:5e:e5:66:53:d7:a3:2e:da:b0:
85:8c:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:36:37 2024 by rpki-client on console-fra.rpki-client.org