Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Y4dSWpJtPM-1Z1NNbNxYNjzOrlU.roa
File: Y4dSWpJtPM-1Z1NNbNxYNjzOrlU.roa (raw, json)
Hash identifier: OvZ58vgQl9CVMwGZQZNO0KfbgAYUlMANlm/TM7ucEi4=
Subject key identifier: 63:87:52:5A:92:6D:3C:CF:B5:67:53:4D:6C:DC:58:36:3C:CE:AE:55
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018E9D9EFAAACCC2B7A1F13B3BF4AF426089
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Y4dSWpJtPM-1Z1NNbNxYNjzOrlU.roa
Signing time: Tue 02 Apr 2024 07:03:45 +0000
ROA not before: Tue 02 Apr 2024 07:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:9e:fa:aa:cc:c2:b7:a1:f1:3b:3b:f4:af:42:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 2 07:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6387525a926d3ccfb567534d6cdc58363cceae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:22:50:5f:7b:86:fb:e6:43:33:88:b5:53:
d7:84:d5:d9:3c:18:01:11:08:0a:9d:8d:94:11:c7:
e6:4f:44:90:35:68:30:f0:8b:41:4f:0f:0b:51:d8:
e9:21:93:08:c2:56:32:0b:63:93:7a:57:b9:e7:13:
66:94:d1:83:7f:ba:98:22:cc:bc:2a:56:dc:4f:27:
7c:0d:af:f6:89:d7:c6:31:31:9b:96:79:e6:23:c3:
83:39:7f:4b:7b:ee:d3:59:cb:e9:bb:05:2f:f4:5c:
f7:26:e8:65:77:24:09:c9:2d:87:5d:98:54:49:7c:
99:42:09:5a:1c:c9:c4:11:88:37:91:c0:2c:65:84:
68:03:6f:03:ad:e9:51:25:aa:3a:8d:47:43:0b:96:
14:f2:ef:ec:40:76:47:a0:8a:11:e8:b6:d6:50:c6:
2c:ef:8b:d2:db:75:d0:4e:b7:27:0e:03:f1:ad:6a:
96:6d:b6:82:1b:87:47:44:25:db:09:14:5e:89:01:
45:e9:f2:f4:42:3b:8a:73:f6:6a:fa:67:3a:73:a4:
55:74:9f:84:f7:dc:f5:59:e1:2b:c3:e3:18:5a:7c:
cc:5f:61:70:f5:e4:c8:96:51:21:ff:6d:84:ec:f0:
aa:7d:d2:37:1a:24:48:3f:95:3e:ca:dc:3a:3b:a2:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:52:5A:92:6D:3C:CF:B5:67:53:4D:6C:DC:58:36:3C:CE:AE:55
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Y4dSWpJtPM-1Z1NNbNxYNjzOrlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7a:8a:d7:11:ec:96:0b:74:ee:f3:3b:8a:0d:80:65:a0:ce:
35:ad:e9:ba:19:f4:8d:61:50:73:be:12:33:03:af:08:b1:12:
a8:ea:e4:a7:6d:fe:74:f3:92:bc:2b:88:e9:dd:e5:48:c8:15:
58:5e:19:01:b1:bb:53:5e:3d:a2:d0:bd:c0:e2:ee:a0:a0:4e:
27:b8:5f:d4:32:a4:fd:b9:27:6a:a4:26:e8:ac:e6:48:3d:26:
d1:d1:15:0b:a0:23:6f:d0:3f:eb:a2:3d:87:4d:e5:1f:45:72:
75:e1:8a:d5:87:28:9c:bc:36:8b:5e:91:04:4b:17:0c:ea:ea:
f3:d1:05:28:0e:b0:c8:1e:8b:ee:a7:45:c0:34:23:27:3c:07:
29:4a:7f:bd:4d:b1:b2:51:1d:6b:f9:f2:70:f2:c6:d7:7f:7c:
5c:b3:8b:26:a2:6d:f5:1d:cf:26:3c:09:84:94:ff:15:73:da:
e1:24:9e:a8:5e:d2:98:1c:b8:8b:a1:2b:47:4e:fb:06:00:9f:
ba:ba:5d:0c:22:44:8c:80:5d:02:99:93:80:b0:5b:0d:f3:41:
d1:42:7e:7c:9b:53:c4:9b:c8:06:0c:83:5d:17:a6:94:de:02:
26:62:9b:e0:84:c9:57:1d:5f:02:a3:0c:bd:8b:07:ab:2e:6b:
d1:aa:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:28 2024 by rpki-client on console-ams.rpki-client.org