Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ac9KHv46CzHJ1BLhVOL5XJHVs8M.roa
File: ac9KHv46CzHJ1BLhVOL5XJHVs8M.roa (raw, json)
Hash identifier: j1x07LhZQJa8xJPOFeE3sMi0bPsZZUQtxtf8C6zuv9Q=
Subject key identifier: 69:CF:4A:1E:FE:3A:0B:31:C9:D4:12:E1:54:E2:F9:5C:91:D5:B3:C3
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9FC7E8D4FC24E9FD5752283236B4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ac9KHv46CzHJ1BLhVOL5XJHVs8M.roa
Signing time: Mon 01 Jan 2024 18:31:33 +0000
ROA not before: Mon 01 Jan 2024 18:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213147
IP address blocks: 77.65.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:9f:c7:e8:d4:fc:24:e9:fd:57:52:28:32:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69cf4a1efe3a0b31c9d412e154e2f95c91d5b3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:cf:19:d6:88:17:11:88:83:d4:ec:6f:7a:
51:16:fd:af:79:fb:de:a7:39:6e:90:7f:16:84:00:
91:20:5b:75:00:cd:9f:a4:2f:6a:78:d2:b6:75:0f:
c7:83:30:71:cc:3e:64:30:ee:ea:a4:dd:61:42:94:
16:2d:c6:e9:98:2f:18:ef:12:78:fd:96:5b:f9:30:
d9:64:c1:31:4e:d6:b7:81:b8:13:3e:c5:dd:47:0c:
1b:c6:ac:e4:54:57:56:11:a6:71:da:ec:a4:3c:44:
56:14:e2:22:15:a8:f6:f0:fb:bc:82:a2:0c:22:0f:
4c:da:68:68:42:1f:37:80:17:4b:4f:4b:d7:25:8d:
ec:79:05:9c:9a:9d:4c:16:2c:05:fe:e2:75:2b:84:
d1:11:e5:65:30:55:c4:4d:4a:fe:46:82:af:41:d5:
4a:25:f8:ed:cc:7c:dd:72:25:e9:ae:f7:29:be:81:
4f:d3:2c:24:dc:47:43:f9:b0:10:3e:66:68:77:87:
b6:5d:d9:81:c2:54:2c:a3:5a:db:3f:9a:0e:0d:3f:
f8:eb:e0:eb:6d:2a:08:78:cd:45:c6:a1:80:06:fd:
0b:91:28:29:98:fc:eb:4d:98:25:90:ea:0a:43:01:
c1:8b:ec:9a:ed:e0:60:e9:39:3b:3d:2e:11:9c:27:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:4A:1E:FE:3A:0B:31:C9:D4:12:E1:54:E2:F9:5C:91:D5:B3:C3
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ac9KHv46CzHJ1BLhVOL5XJHVs8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:46:f8:8a:0c:c5:1e:9b:16:2e:28:ea:5d:52:d6:b7:8e:8d:
c7:c0:c8:39:93:47:07:07:36:c8:be:20:ba:9c:b8:9c:46:32:
03:e2:fd:f2:28:72:15:67:af:c6:cf:52:8b:72:53:c1:2f:ea:
b1:cf:19:36:76:78:a2:ef:29:27:02:e6:15:67:63:23:c1:05:
58:51:d8:93:44:59:3b:47:1b:98:3a:94:3b:7e:75:fd:ea:f8:
1c:d1:ce:e9:e0:93:4d:bc:15:a7:0f:96:c1:f1:be:f6:36:c8:
5d:e0:93:04:54:4f:32:04:08:43:e6:f1:43:31:b0:6c:cf:14:
6b:fd:a2:91:7b:81:37:ad:ef:32:e8:95:f4:f6:52:7f:4e:72:
89:3b:2e:6d:1e:65:08:83:d7:3d:06:99:20:4f:60:34:6d:02:
b6:26:f9:f9:cf:dd:28:ab:86:3f:b7:9c:40:79:14:c1:a9:f4:
ac:e6:41:59:2b:57:ee:c3:d3:66:02:be:31:78:39:3f:25:d7:
0b:6e:4e:3b:bd:a1:53:47:42:6d:84:e9:cb:5e:36:b2:b9:2a:
fb:49:3f:41:5c:de:26:87:2c:9a:a8:19:15:40:54:4b:e6:af:
9d:31:de:a3:51:85:cc:28:c6:62:9f:20:39:a5:68:a7:48:f0:
88:4f:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org