Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LKJq27Zd_vvc6DgwyntfLi1wC24.roa
File: LKJq27Zd_vvc6DgwyntfLi1wC24.roa (raw, json)
Hash identifier: 5DXwV7Pm/0wCS+jFfsPi3uBIpJSkEh7K7qc5+ug4vHA=
Subject key identifier: 2C:A2:6A:DB:B6:5D:FE:FB:DC:E8:38:30:CA:7B:5F:2E:2D:70:0B:6E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B854085BF42D1537DE8B51F60D61C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LKJq27Zd_vvc6DgwyntfLi1wC24.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42503
IP address blocks: 77.65.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:85:40:85:bf:42:d1:53:7d:e8:b5:1f:60:d6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ca26adbb65dfefbdce83830ca7b5f2e2d700b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:d8:7d:9b:f0:c8:b6:2c:25:b5:9f:6e:6b:
db:d5:1a:19:6e:50:ec:1f:8d:08:38:b2:85:b9:40:
d8:cf:e9:d0:89:86:7d:2a:82:14:14:c8:4c:a4:61:
a0:6b:1f:77:00:64:4c:45:5a:f0:d6:85:34:11:e3:
36:35:b2:5a:ec:ff:e6:4f:7c:ae:d5:0f:87:39:8c:
28:c7:19:c8:8a:90:fb:93:29:9a:19:4e:55:83:c0:
ad:5e:b1:35:db:d4:7a:c2:96:b0:af:4c:9d:fb:b4:
25:0a:eb:4a:63:b1:c9:76:40:d6:fb:95:3b:d7:94:
a8:bd:98:6f:18:5a:e9:61:0d:71:16:aa:de:44:bc:
4d:b8:a6:ce:27:2e:45:f1:38:ef:c9:53:24:56:be:
24:bf:d2:b7:b4:33:12:88:21:a3:88:20:86:6a:82:
c5:f5:07:a3:87:19:8c:a0:76:05:89:fe:63:25:5e:
e0:3e:1a:05:2d:55:47:03:b3:42:ad:13:59:ab:27:
5a:23:f5:eb:86:9c:7f:62:8f:70:b3:59:1e:01:63:
75:ad:39:88:92:39:ae:80:76:a1:aa:02:95:ae:d9:
4c:23:4e:81:c6:01:50:3b:9d:84:d2:ad:f6:43:75:
7f:98:41:7c:50:45:db:e3:38:5f:a1:06:7d:28:66:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A2:6A:DB:B6:5D:FE:FB:DC:E8:38:30:CA:7B:5F:2E:2D:70:0B:6E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LKJq27Zd_vvc6DgwyntfLi1wC24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7d:68:74:51:7c:49:1a:dc:95:7d:89:45:7a:4d:e8:cb:37:
60:7e:ce:3b:41:d5:75:63:ca:7f:e3:c8:c3:22:d0:e3:1c:60:
c5:cc:bf:e3:e2:0c:33:1e:b8:1b:42:f6:61:7b:d8:ff:22:f5:
a0:0e:37:b2:e8:e1:31:06:70:f2:16:73:a2:1f:ea:3c:be:20:
74:a8:23:2b:95:e3:a1:35:07:0a:50:cd:de:02:9a:00:dd:fd:
4e:bb:10:41:7f:60:67:e5:fa:48:22:2b:a3:29:56:5e:ef:5f:
68:0a:2b:01:55:a0:b5:d9:cb:fc:c6:0c:af:b5:fb:c9:ef:bc:
39:01:ca:d4:79:c5:7f:5a:70:bc:6e:83:53:96:dd:d7:49:82:
5f:29:66:9e:3b:33:06:95:8f:e7:3c:79:37:5c:d1:ef:8a:17:
3b:ac:af:db:68:6e:bb:9b:f9:e8:7b:a9:75:fa:5a:b3:46:de:
b0:4f:05:86:79:f3:25:0a:7f:b1:a4:c7:ef:2f:ae:ca:47:fd:
3a:d1:3e:d1:1e:aa:86:f8:0a:7e:ce:45:b2:30:68:93:d8:cb:
0d:59:56:b6:28:57:c1:a0:a6:e5:41:33:9d:43:9a:a9:93:57:
09:fb:ff:43:0f:87:ad:2b:2d:37:e5:cf:10:f3:15:7d:99:a6:
7b:96:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org