Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8V9q6vvR1hywuwnR4YZ6ToybTo.roa
File: J8V9q6vvR1hywuwnR4YZ6ToybTo.roa (raw, json)
Hash identifier: 85DAj6lTBM5lCvAAfSJEtkFebwmbRGXezx/p4BSW4QU=
Subject key identifier: 27:C5:7D:AB:AB:EF:47:58:72:C2:EC:27:47:86:19:E9:3A:32:6D:3A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B86F32CBFE5B58B914BFC80B002EA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8V9q6vvR1hywuwnR4YZ6ToybTo.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51769
IP address blocks: 77.65.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:86:f3:2c:bf:e5:b5:8b:91:4b:fc:80:b0:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c57dababef475872c2ec27478619e93a326d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:cc:08:92:97:cd:87:cb:74:b9:a3:6f:75:
ab:f6:ed:2c:f8:6f:4d:8e:ef:85:bf:65:ea:7d:c8:
9f:ee:af:2a:4c:c7:41:c6:b3:4a:fc:e7:01:13:5e:
0d:42:3c:bc:03:a2:76:38:b3:8d:40:8a:4b:a5:3b:
41:ba:e5:cb:93:18:d3:25:b1:2a:de:48:10:8f:8a:
c4:5a:1e:7e:b1:7d:90:99:4e:e3:f5:81:af:e5:60:
1d:25:07:55:03:00:90:18:7a:75:48:48:2c:7e:8a:
82:eb:79:fa:68:c7:54:07:b6:1c:b8:4f:47:99:c6:
85:f4:86:17:2c:78:f2:f0:a5:61:ac:59:c3:ae:03:
e9:27:14:aa:0b:c0:f9:92:2c:16:9f:e3:2f:b1:cb:
0a:b4:76:61:af:0d:ec:15:52:13:c6:7a:80:66:74:
42:49:33:f8:8b:d2:ce:3b:a5:9f:bb:e9:dd:62:25:
4c:01:bb:00:a5:d6:31:b1:27:f5:23:06:21:e0:08:
1b:a1:a0:a9:01:94:9d:6c:9e:5e:4f:50:6a:d6:3c:
7d:da:31:e5:1b:4e:ec:9e:09:0d:62:db:9f:eb:99:
0b:63:a9:96:c7:49:ad:e8:0f:5b:cb:c1:ab:8e:47:
f4:4b:58:ff:f3:72:f3:76:27:e6:14:fc:c9:35:40:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:7D:AB:AB:EF:47:58:72:C2:EC:27:47:86:19:E9:3A:32:6D:3A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J8V9q6vvR1hywuwnR4YZ6ToybTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:70:fe:d3:c3:c9:00:91:64:4a:e3:e6:76:70:8d:9d:32:d5:
29:b7:c1:6c:af:39:ee:8a:01:dc:ee:e0:ac:a0:fa:91:09:7b:
04:39:80:0b:34:c7:f7:4c:2e:49:a1:c0:e8:0e:8a:d0:a1:9d:
bc:1f:03:2d:39:66:d5:e0:63:33:01:af:98:07:bc:61:99:5f:
a5:da:cb:d2:6a:55:f7:27:43:dd:c8:60:c9:65:ae:36:e6:f4:
45:02:44:83:9f:32:1d:20:1f:9f:2e:d4:7d:7a:19:5d:be:97:
4f:1a:36:93:fd:69:0a:75:b4:b2:72:49:7e:d3:57:d9:10:95:
6d:38:12:4d:97:7a:60:fa:7a:64:d6:db:1f:af:37:a6:c8:eb:
f0:0a:f9:9a:0e:ea:cf:62:fe:2c:60:4f:f8:b2:94:d8:06:e4:
ac:d1:df:90:70:87:3e:0f:1a:31:2c:63:e2:5d:82:88:fd:b6:
d3:35:ff:b1:55:61:95:e2:59:ec:98:94:5b:b9:be:33:92:94:
cd:66:65:86:d0:43:38:55:97:92:34:62:cc:80:93:2c:33:ad:
ea:60:23:09:82:11:94:5b:4d:36:f8:34:82:b9:52:ac:e3:0e:
d2:56:db:ba:a2:23:61:f2:29:7f:ce:9e:c7:fc:17:25:f2:aa:
71:1d:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org