Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/b9JAogSXXJYqaSJBCFlJ6cQFMpU.roa
File: b9JAogSXXJYqaSJBCFlJ6cQFMpU.roa (raw, json)
Hash identifier: 3AaqnOU+tH+QPRHvVi9YPV+8gEYiGC7rJE8+DoFpdt0=
Subject key identifier: 6F:D2:40:A2:04:97:5C:96:2A:69:22:41:08:59:49:E9:C4:05:32:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BB39B1A9827346BFFEDDEF3AEA7E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/b9JAogSXXJYqaSJBCFlJ6cQFMpU.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 77.242.157.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bb:39:b1:a9:82:73:46:bf:fe:dd:ef:3a:ea:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fd240a204975c962a692241085949e9c4053295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:de:6a:bf:3c:03:bb:67:ff:e4:c8:8f:ea:
98:6f:ed:e8:48:91:bb:5d:d9:5f:c5:e8:5a:53:d8:
2c:3b:71:b5:e0:5b:9b:84:ad:fe:9e:c5:a8:67:f7:
56:b2:44:55:03:f7:aa:b8:39:85:a3:cc:7c:d2:41:
51:b7:f7:db:1c:59:f6:c0:92:df:bd:f3:96:b6:4e:
51:3c:1e:2f:4f:1d:a4:8b:2d:b9:20:12:d0:50:0c:
de:20:35:fe:8c:d1:10:09:f5:64:36:d0:3c:0a:d3:
b0:ee:83:95:5f:f2:78:c9:0f:30:a9:52:f6:31:80:
b5:75:2b:6c:6b:19:fd:f0:3c:78:14:3e:42:85:b1:
66:0f:db:9b:6d:b6:2d:7f:e1:2c:de:27:3e:7a:24:
a5:4c:f4:51:0d:e6:3e:5b:9d:c7:56:3f:70:da:18:
88:cc:51:cc:80:00:46:4d:5b:5b:1a:b9:13:bd:b5:
da:5c:10:7e:4d:d4:85:e1:d7:8d:bd:3d:07:08:a0:
f7:8e:c4:79:16:a7:3e:a6:fb:0e:ef:27:cf:ec:cf:
8e:2b:27:71:71:6b:11:d8:84:c9:a6:aa:af:68:41:
5b:53:c3:7e:9c:1d:07:e3:8d:1e:f3:ee:2e:d8:9a:
10:18:bc:e1:96:68:37:69:fb:d8:d2:63:69:74:99:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:40:A2:04:97:5C:96:2A:69:22:41:08:59:49:E9:C4:05:32:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/b9JAogSXXJYqaSJBCFlJ6cQFMpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
88.209.200.0/24
88.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
32:00:f3:36:62:94:59:41:4e:86:1d:5c:9a:24:a6:7d:c2:0f:
d9:77:e5:4b:7c:57:fa:76:98:30:c1:87:d2:a5:e1:e3:f7:b6:
41:49:a0:22:77:5f:c0:f1:94:f4:14:6c:78:b4:1a:a0:15:69:
33:6f:ee:3c:66:01:65:b8:be:a9:5f:5b:b2:45:3f:bb:48:3c:
09:5d:ad:4b:76:ed:fa:5d:c1:86:41:e3:af:28:0c:ad:f6:9d:
6c:60:3e:80:44:09:de:38:72:33:28:47:cf:bb:f7:a9:68:2a:
e5:de:40:60:b7:d9:93:fa:06:89:24:24:b1:47:87:93:d0:9d:
d1:62:9e:67:88:24:25:2d:46:d9:47:bf:e4:7b:4a:b3:99:df:
40:07:f9:04:b9:9c:5a:9b:66:9d:e2:14:aa:29:a6:36:96:82:
17:34:bb:8e:1e:22:61:11:d0:3e:89:bd:30:df:63:8f:e5:ca:
6c:78:88:c0:c9:a4:2e:6e:bc:ad:8c:ae:d3:87:5a:e1:cf:25:
fb:30:d4:59:fe:95:4c:01:a9:e8:e0:53:bf:20:79:44:db:97:
88:e5:f4:80:8b:34:83:53:14:79:4b:85:47:0b:ab:bd:6e:c6:
52:28:33:07:8e:83:53:4f:3c:9f:39:ff:f4:cd:9d:74:e0:65:
39:54:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:00:23 2024 by rpki-client on console-fra.rpki-client.org