Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/b2TQuirfLIlLiBmZvDZATxi_dLI.roa
File: b2TQuirfLIlLiBmZvDZATxi_dLI.roa (raw, json)
Hash identifier: eATSvL7omjXJaSQVaYyYkoGHZbFT0VCA4rzx/1ft36I=
Subject key identifier: 6F:64:D0:BA:2A:DF:2C:89:4B:88:19:99:BC:36:40:4F:18:BF:74:B2
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 018CC6B7A878BF51CF1C206EC46E1A24F163
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/b2TQuirfLIlLiBmZvDZATxi_dLI.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21427
IP address blocks: 37.235.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a8:78:bf:51:cf:1c:20:6e:c4:6e:1a:24:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f64d0ba2adf2c894b881999bc36404f18bf74b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:f2:b9:5d:6e:c4:b8:0a:a4:fc:9a:3a:59:
31:db:f6:41:2c:9a:93:40:41:d6:7f:fc:d1:fe:dc:
21:04:dd:50:f6:9a:c4:78:0e:8c:cd:be:92:0b:87:
bb:c9:a0:4d:2c:ff:25:c3:33:79:56:2c:7d:cc:50:
6e:ec:93:fd:74:55:ae:b0:29:41:e3:2c:dc:4a:51:
e5:8e:b8:3d:de:5f:bf:85:ce:00:f0:b4:8d:ad:f2:
78:fc:02:96:63:e5:65:13:37:a9:8f:06:8a:a0:e9:
b6:00:79:be:15:f9:99:6b:bd:2d:d0:61:c4:0e:87:
a4:6d:0a:d6:80:e1:04:e9:0c:0e:ec:6f:2c:3f:76:
90:15:cd:16:64:e2:ff:75:b7:35:54:1f:c1:72:aa:
d9:00:63:7a:92:c4:0f:c8:d9:36:60:7f:4c:68:67:
97:3f:d2:30:fc:ff:11:c6:b2:6a:53:c8:74:b1:05:
44:58:70:c6:87:00:44:1b:69:40:36:98:f3:ed:ac:
b9:45:69:a8:2f:cb:3a:10:1a:f1:f0:e3:b5:10:78:
77:7c:8f:a2:b5:b0:8a:6f:01:06:f8:67:07:70:47:
74:df:14:57:b4:df:de:cf:04:31:7e:1d:99:c1:e3:
81:ac:f0:ad:c8:00:df:4b:5d:3c:02:f2:00:14:e1:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:D0:BA:2A:DF:2C:89:4B:88:19:99:BC:36:40:4F:18:BF:74:B2
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/b2TQuirfLIlLiBmZvDZATxi_dLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:02:a2:32:67:72:2b:7e:19:4b:82:4a:40:c9:78:33:49:2d:
09:43:ee:3e:72:3e:93:34:e4:06:07:eb:3c:fb:2c:0f:79:46:
a5:d8:66:94:36:d8:db:d0:94:5c:10:cf:97:27:d6:da:ca:d3:
d9:33:22:51:67:e7:83:c8:7b:14:ec:66:59:6c:5c:c8:04:86:
56:30:f7:f6:5a:f8:94:45:02:4e:98:4e:de:2a:f3:32:7d:1b:
58:24:97:c4:67:2b:af:c8:61:34:15:69:71:6c:45:0b:20:30:
0e:a4:57:62:4f:6d:39:10:00:e7:b4:6b:6f:41:06:76:64:a6:
74:e5:c0:de:af:64:88:45:78:a3:8a:7e:4f:75:99:99:67:d9:
0a:fa:83:d7:54:55:5b:d3:2d:49:f4:47:9e:60:c5:dc:d3:49:
f6:b2:68:a2:f3:35:bf:e2:c8:03:cd:ea:2b:4d:9c:b5:00:0d:
2a:05:4e:6d:4c:09:5f:99:9a:71:6b:b3:94:0e:86:fe:af:d6:
1c:f4:b1:fe:8f:36:88:cf:54:21:df:d0:ee:fe:5e:c2:f9:e5:
ce:62:f6:20:79:f0:1d:5b:cd:7d:55:b5:c2:77:b9:57:5c:5a:
30:39:c5:7d:fe:e8:c3:f8:3a:00:31:99:f4:52:75:99:a9:1f:
a4:fc:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:55:52 2024 by rpki-client on console-fra.rpki-client.org