Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/toBUQK64vtxiKMA2SsP9lh1zHzw.roa
File: toBUQK64vtxiKMA2SsP9lh1zHzw.roa (raw, json)
Hash identifier: gJ8O6JqGEMddFHPg1GsouuAbYZ6G0et3gJMLl6Thjj4=
Subject key identifier: B6:80:54:40:AE:B8:BE:DC:62:28:C0:36:4A:C3:FD:96:1D:73:1F:3C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B8A65EBC0403EB68AC004FFA3D36
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/toBUQK64vtxiKMA2SsP9lh1zHzw.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 77.242.150.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b8:a6:5e:bc:04:03:eb:68:ac:00:4f:fa:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6805440aeb8bedc6228c0364ac3fd961d731f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:ef:cf:50:a4:d3:70:73:ce:c9:49:4c:d6:
91:10:34:43:f0:99:05:e7:d9:10:a6:c1:f8:c4:70:
e0:ff:7e:f1:45:8e:99:26:80:78:6d:ea:22:cd:d6:
79:0d:13:75:2f:57:e8:0e:91:44:1b:8d:dc:16:3c:
36:63:f9:6c:a4:65:94:16:cc:1c:33:66:46:9c:81:
02:7c:fa:83:d8:ee:31:9a:49:8c:0b:30:07:1e:df:
5f:e7:18:c9:ef:5d:4c:8c:f2:85:77:6d:0b:04:85:
91:4d:79:32:95:5c:60:db:c3:ab:0b:d0:fd:62:73:
78:5f:14:c4:d9:87:8a:2f:1b:d8:3a:c8:6f:75:d0:
90:1d:1b:4d:64:d2:33:10:17:e2:11:62:e5:65:be:
d8:d0:61:7c:2a:01:93:16:a0:b9:ec:5d:06:3f:e3:
6a:d3:11:e7:ee:63:97:ca:6d:9e:e8:7b:3c:70:b8:
ae:80:64:7f:9a:ef:9b:47:19:1d:e4:de:98:c1:91:
62:e4:55:ac:9f:7c:72:41:43:8a:c2:ac:0e:1b:4a:
4f:c0:b2:b3:2a:0c:83:43:05:97:0a:2e:47:6f:7a:
3b:59:da:b8:31:87:a9:7b:bd:9c:3a:e9:e9:ed:6d:
3f:d2:bd:74:17:82:13:60:cf:52:ce:97:a2:bd:8a:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:54:40:AE:B8:BE:DC:62:28:C0:36:4A:C3:FD:96:1D:73:1F:3C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/toBUQK64vtxiKMA2SsP9lh1zHzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a2:06:0e:84:c4:c0:bd:31:de:18:28:c4:99:d3:63:7c:a4:
85:a2:f0:61:aa:51:7a:43:22:1e:68:c8:4f:69:dc:16:78:f6:
01:93:d3:7b:57:24:17:b4:36:35:bc:94:2e:d7:6e:eb:23:b1:
0d:8d:5e:d6:ef:96:64:39:4a:4e:64:93:83:fe:8e:a7:cd:c2:
05:5d:b8:f2:42:6f:77:4b:94:36:0c:10:6e:73:e6:89:f9:96:
ef:41:92:48:d3:f7:fe:b5:f4:26:21:64:d4:9b:1c:bb:bb:67:
4b:bd:8f:cb:a4:77:41:9f:b9:75:e0:18:66:b4:52:ca:2c:e0:
86:e3:3f:e9:94:ea:e3:4b:18:31:1d:24:fb:b7:b9:41:50:51:
f6:19:11:af:3b:a6:1b:46:ea:5d:d0:01:88:e5:bd:30:29:16:
59:d6:09:cc:ae:ed:0c:cf:31:77:2d:e0:6d:85:f3:8c:0f:96:
17:28:be:7e:2b:09:a9:04:9b:bb:3a:8e:09:39:56:05:93:2d:
ba:6f:d7:38:72:44:a6:5f:2a:b4:51:7b:65:0b:33:f1:26:75:
47:01:9c:0e:53:ca:3b:4d:3e:e7:8c:f4:5a:40:7a:5b:7d:da:
05:c9:be:26:59:a7:b7:96:d8:d6:5a:e4:b5:f2:80:ca:89:e2:
94:1f:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:50:17 2024 by rpki-client on console-ams.rpki-client.org