Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Kh9CGJC7oHvqtaWsyr7cFbQ-ghU.roa
File: Kh9CGJC7oHvqtaWsyr7cFbQ-ghU.roa (raw, json)
Hash identifier: 3ns25PBloLlv0fQuwop6ZUcTYOpQeX3bqOsEffEw/FM=
Subject key identifier: 2A:1F:42:18:90:BB:A0:7B:EA:B5:A5:AC:CA:BE:DC:15:B4:3E:82:15
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 018CC94E39AFDF9CD62BADCDAA7A6EB01A50
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Kh9CGJC7oHvqtaWsyr7cFbQ-ghU.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34530
IP address blocks: 77.87.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:39:af:df:9c:d6:2b:ad:cd:aa:7a:6e:b0:1a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a1f421890bba07beab5a5accabedc15b43e8215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:d0:7e:5a:c4:26:05:dc:59:56:3b:44:97:
8e:97:75:23:25:55:5b:7e:fe:e7:1f:2f:58:c8:49:
e2:8c:69:2f:33:80:cd:65:a9:bd:68:92:4f:09:4b:
4d:16:0b:6e:db:50:b0:3f:0c:a8:10:d1:31:3a:62:
db:30:4c:4a:e4:13:90:63:6b:cb:aa:38:a7:9d:82:
4b:86:fd:18:d3:a4:d5:2e:41:4c:5c:42:71:36:c0:
0e:5d:11:e9:08:54:2c:05:3f:68:70:da:87:f9:e3:
f4:4e:f1:a0:01:af:87:b0:3b:8c:a0:16:2b:b0:00:
83:8c:78:f4:b0:65:96:99:fd:db:76:32:4e:f9:61:
f8:c3:eb:4f:4c:67:03:18:1a:ff:bc:ed:7b:24:f0:
33:3e:ae:60:96:67:7f:5e:b9:5e:53:b0:42:ff:d4:
53:86:81:d5:23:4c:31:cf:a6:fd:23:ef:eb:f4:cf:
5b:75:7d:93:82:44:ad:4c:69:66:3a:ab:31:e6:ad:
b5:4c:29:fc:2e:65:39:97:68:84:80:ca:44:98:c1:
08:4d:e4:33:9a:1a:d4:1a:c8:49:bd:24:41:0e:0d:
78:dc:ce:34:9f:4d:ef:1d:6f:90:ec:e6:3b:5f:31:
20:42:74:c2:2d:00:3e:dc:d8:74:36:45:49:a9:ca:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:42:18:90:BB:A0:7B:EA:B5:A5:AC:CA:BE:DC:15:B4:3E:82:15
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/Kh9CGJC7oHvqtaWsyr7cFbQ-ghU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.75.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1c:9b:d3:83:5f:f1:87:48:8b:76:88:7c:4b:04:17:87:eb:
ff:f3:a7:41:fc:0d:35:fa:c1:60:8e:9c:85:fe:e4:78:37:df:
22:be:8c:6d:87:44:79:a0:f4:8d:9a:fe:c0:62:21:ed:41:5b:
08:56:e8:4d:37:75:a0:20:49:72:ad:1a:46:6b:e7:6f:5e:47:
b8:6b:e0:47:1e:f3:64:38:18:47:87:08:dc:79:31:df:e5:ec:
3a:38:0d:47:c9:f9:5e:bf:5a:00:1b:f3:c4:9a:f4:59:c6:18:
96:f3:fe:49:56:ae:57:4d:06:1c:aa:5f:54:ba:42:1d:48:ca:
c9:4c:88:99:22:79:01:e7:0f:03:5f:d7:fc:2c:fc:e5:8f:4f:
bb:6f:11:dd:fd:68:11:cb:ce:d2:70:95:08:a0:e3:a1:59:38:
9b:68:b2:0e:1e:4f:85:4c:b7:31:71:c1:49:7c:2b:74:eb:c1:
ab:84:9f:77:57:86:c9:57:2b:a1:5c:22:08:4e:5c:2a:c3:3e:
f6:1b:a0:17:f9:d1:9d:70:f7:6f:50:c9:00:16:61:f9:f4:64:
a6:c4:5b:52:e6:ba:98:6c:13:9f:97:ce:02:48:78:8e:52:f4:
4d:56:d4:2f:69:a8:60:c6:59:44:c6:2a:6c:ec:c1:76:b4:e6:
f2:63:87:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjmv35zWK63NqnpusBpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw
ZWJiNjEwHhcNMjQwMTAyMDgzMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTFmNDIxODkwYmJhMDdiZWFiNWE1YWNjYWJlZGMxNWI0M2U4MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicPQflrEJgXcWVY7RJeOl3UjJVVb
fv7nHy9YyEnijGkvM4DNZam9aJJPCUtNFgtu21CwPwyoENExOmLbMExK5BOQY2vL
qjinnYJLhv0Y06TVLkFMXEJxNsAOXRHpCFQsBT9ocNqH+eP0TvGgAa+HsDuMoBYr
sACDjHj0sGWWmf3bdjJO+WH4w+tPTGcDGBr/vO17JPAzPq5glmd/XrleU7BC/9RT
hoHVI0wxz6b9I+/r9M9bdX2TgkStTGlmOqsx5q21TCn8LmU5l2iEgMpEmMEITeQz
mhrUGshJvSRBDg143M40n03vHW+Q7OY7XzEgQnTCLQA+3Nh0NkVJqcrM6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCofQhiQu6B76rWlrMq+3BW0PoIVMB8GA1UdIwQY
MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt
MDA2ZTliYjhlZDU5LzEvS2g5Q0dKQzdvSHZxdGFXc3lyN2NGYlEtZ2hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5
LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVdLMA0G
CSqGSIb3DQEBCwUAA4IBAQBJHJvTg1/xh0iLdoh8SwQXh+v/86dB/A01+sFgjpyF
/uR4N98ivoxth0R5oPSNmv7AYiHtQVsIVuhNN3WgIElyrRpGa+dvXke4a+BHHvNk
OBhHhwjceTHf5ew6OA1Hyflev1oAG/PEmvRZxhiW8/5JVq5XTQYcql9UukIdSMrJ
TIiZInkB5w8DX9f8LPzlj0+7bxHd/WgRy87ScJUIoOOhWTibaLIOHk+FTLcxccFJ
fCt068GrhJ93V4bJVyuhXCIITlwqwz72G6AX+dGdcPdvUMkAFmH59GSmxFtS5rqY
bBOfl84CSHiOUvRNVtQvaahgxllExips7MF2tObyY4cf
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:01:01 2024 by rpki-client on console-fra.rpki-client.org