Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_5ec2832fZBu6zEhPNNnihvIq5g.roa
File: _5ec2832fZBu6zEhPNNnihvIq5g.roa (raw, json)
Hash identifier: 0V/HugyWOvX2HryaMTtLBWGVPhaaUp83f7vfaahw0oc=
Subject key identifier: FF:97:9C:DB:CD:F6:7D:90:6E:EB:31:21:3C:D3:67:8A:1B:C8:AB:98
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 018CC2DACDBBBAB31D6E9BDDFC52B28CB825
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_5ec2832fZBu6zEhPNNnihvIq5g.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42716
IP address blocks: 77.73.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:bb:ba:b3:1d:6e:9b:dd:fc:52:b2:8c:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff979cdbcdf67d906eeb31213cd3678a1bc8ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:67:62:6b:42:b6:0e:ab:ad:de:4c:3c:ab:
ef:e8:37:dc:fd:0c:74:53:92:0f:41:ef:1f:f5:32:
a6:2c:fd:95:54:c8:48:8c:f9:96:7a:51:1d:2f:b4:
b1:a4:f5:4f:8d:40:fc:73:94:3e:17:1e:e5:96:90:
f2:f7:f8:53:7d:a2:32:83:85:70:e6:66:54:c0:0e:
78:90:a1:53:f0:a7:f8:a2:73:27:a5:64:99:61:e3:
9a:1c:48:52:2a:4d:f3:89:b1:48:a4:fa:bd:3f:1c:
8f:84:88:27:b4:9e:b6:dc:98:8d:c3:69:9b:15:1f:
df:1b:f6:31:a9:3d:bb:8f:f8:bd:ed:cf:b3:58:5d:
70:97:ac:1e:17:fc:c3:9e:50:e4:3e:25:c3:6d:81:
48:c1:88:fe:25:87:9b:0e:19:4b:3d:cc:8d:57:8d:
44:88:70:50:a8:25:07:ce:5a:71:ea:9f:52:6b:bf:
9c:37:62:64:47:89:e3:48:f9:e8:8c:f4:b0:91:e0:
4d:dc:60:7a:d9:d1:e7:82:2f:d8:00:aa:ea:46:d2:
95:ed:73:38:2e:93:57:20:d1:d4:f8:5d:58:68:d5:
60:9f:c1:49:1b:fa:e1:a6:bd:92:d3:61:ff:96:37:
20:13:74:63:14:5b:03:9d:f2:23:7e:a1:16:39:36:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:9C:DB:CD:F6:7D:90:6E:EB:31:21:3C:D3:67:8A:1B:C8:AB:98
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_5ec2832fZBu6zEhPNNnihvIq5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:36:95:dc:c0:ae:b4:d3:30:01:59:47:6e:1a:13:13:c7:08:
06:67:e3:98:d7:98:c0:c5:48:bd:6d:aa:45:a3:6b:57:03:82:
53:bc:a8:d1:59:29:9d:47:18:58:a3:07:d9:25:20:fa:db:c8:
c1:3f:ca:56:db:c2:45:fd:cc:43:57:b6:c8:87:a5:2e:58:65:
1a:b1:bf:4d:31:32:ee:13:7e:5d:e1:20:cf:41:23:3d:78:d0:
60:c6:ce:fe:9e:fc:0d:63:30:f4:1d:46:b7:e5:e4:ae:b8:08:
90:89:d5:a7:8c:8f:0f:01:8e:49:b8:89:63:4d:89:a3:b4:dd:
10:b4:09:2d:9f:3f:c2:be:68:4c:99:e6:f2:b6:79:02:98:96:
fe:46:1e:b9:77:f4:4f:e7:2f:c2:4b:d4:65:46:f2:31:98:e5:
f2:be:b0:7e:18:85:75:45:c9:5f:45:c4:52:92:84:43:5c:05:
c8:1e:3b:d3:0c:d6:ec:5f:97:2b:d5:af:94:d5:7d:14:62:ad:
3c:24:9d:5a:f2:ab:bf:b8:db:71:5f:ff:f4:71:73:9d:17:61:
a4:4d:70:59:31:fe:23:3a:55:0f:eb:6a:15:83:fd:73:c7:78:
f8:e1:17:33:bc:fe:81:10:ff:71:84:40:c5:5e:df:9f:8a:6b:
53:cf:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:43:57 2024 by rpki-client on console-fra.rpki-client.org