Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ECeW2JdRW7CwZ9duP1Gdu3QjDZ4.roa
File: ECeW2JdRW7CwZ9duP1Gdu3QjDZ4.roa (raw, json)
Hash identifier: sQBx8ezYqOQ4qHqL2W8zfoTHtsad+G4tY5tKYpAsNd4=
Subject key identifier: 10:27:96:D8:97:51:5B:B0:B0:67:D7:6E:3F:51:9D:BB:74:23:0D:9E
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 018CC64B179749E0BF3DBA1078C03B5BAD8E
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ECeW2JdRW7CwZ9duP1Gdu3QjDZ4.roa
Signing time: Mon 01 Jan 2024 18:30:59 +0000
ROA not before: Mon 01 Jan 2024 18:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50785
IP address blocks: 185.77.70.0/24 maxlen: 24
185.77.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:17:97:49:e0:bf:3d:ba:10:78:c0:3b:5b:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102796d897515bb0b067d76e3f519dbb74230d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:1d:57:fe:d3:ed:46:7e:8c:2e:c7:d8:c3:
95:05:9a:dc:7d:7d:10:3e:de:32:29:5c:f7:44:1b:
75:b4:7e:32:ec:87:b5:15:e1:3b:98:4e:a0:d6:fe:
19:b1:a3:f9:69:ae:b7:e2:65:d8:21:b2:ad:6f:db:
27:b6:ce:fa:31:0d:b7:bf:31:f6:29:5c:16:d0:22:
84:bc:03:be:1a:35:3e:68:ee:40:5c:c5:af:3e:1f:
f0:0e:7d:8b:0d:8f:0b:0b:bf:99:91:a6:9e:de:9a:
0f:26:80:f4:61:02:26:4b:7f:43:56:a7:82:77:88:
47:4b:88:ea:e1:d6:fe:54:0b:3c:90:ac:24:74:f4:
38:36:34:65:7a:67:b3:2c:0c:32:4a:f2:5f:85:5e:
13:46:cb:08:76:88:07:a0:39:91:19:63:94:94:e7:
f0:c7:22:53:cb:04:bb:72:55:26:10:73:fa:26:83:
a5:84:3c:55:80:4e:74:48:d7:05:dc:69:6d:ea:7e:
62:6f:6d:2d:43:78:89:13:4d:5f:cb:34:bc:a3:a9:
88:69:4b:ba:c5:02:29:ce:26:bd:44:5d:ff:93:d6:
f4:52:e1:2d:c6:26:d9:24:17:db:7c:0d:a7:9f:c6:
d7:5c:b2:bc:cf:03:40:2b:c7:42:eb:5b:50:d0:7b:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:96:D8:97:51:5B:B0:B0:67:D7:6E:3F:51:9D:BB:74:23:0D:9E
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/ECeW2JdRW7CwZ9duP1Gdu3QjDZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.70.0/23
Signature Algorithm: sha256WithRSAEncryption
52:b7:65:18:16:01:8b:f9:c8:b2:c7:e2:8a:90:b7:8b:63:51:
fd:5f:f9:d7:ba:13:fe:d4:a3:56:05:04:78:07:a4:f0:ee:ae:
23:a0:97:bb:cc:cc:6b:dc:9c:62:32:ce:d8:44:0e:96:d3:e5:
b7:73:e3:dc:c4:7a:a1:a9:07:33:b7:c4:48:13:0a:b8:1b:b8:
73:5f:7f:e6:d5:7a:87:5c:07:be:95:1b:26:4e:4c:ab:e5:be:
8f:be:1e:61:9d:2f:34:92:04:69:67:79:c6:6d:98:68:d5:58:
04:40:58:78:fc:5e:9c:e9:ab:d4:77:24:ae:13:47:7e:9f:a7:
fa:cf:a1:66:13:ad:8d:01:6b:33:3c:d9:c7:48:d8:a3:c9:9e:
e1:b5:6f:7e:91:96:41:bf:a6:13:26:03:a8:ed:fa:e1:d7:84:
c1:06:4c:0f:65:41:08:8a:64:39:91:d8:00:9c:07:43:40:1b:
d3:0b:7d:10:96:e1:b1:88:0f:10:43:67:59:2b:f6:42:05:9c:
f3:95:91:dd:31:d1:92:3d:df:8d:63:10:5d:db:69:70:10:91:
94:c9:71:17:24:fe:b4:f8:76:f6:cc:76:a1:83:79:1f:45:04:
33:80:e9:c0:c6:dc:5a:23:06:6a:0e:9e:c6:44:de:46:29:36:
c2:41:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:21 2024 by rpki-client on console-ams.rpki-client.org