Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qL7FBz8lZerNArf32ingYy9NUU8.roa
File: qL7FBz8lZerNArf32ingYy9NUU8.roa (raw, json)
Hash identifier: 17awk1qU0fGQkcUiqsAq3mLTyCd956qM1emoDoBmnmo=
Subject key identifier: A8:BE:C5:07:3F:25:65:EA:CD:02:B7:F7:DA:29:E0:63:2F:4D:51:4F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192224A03FAE358F918886F30092602FB6F
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qL7FBz8lZerNArf32ingYy9NUU8.roa
Signing time: Tue 24 Sep 2024 04:28:48 +0000
ROA not before: Tue 24 Sep 2024 04:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44237
IP address blocks: 77.51.247.0/24 maxlen: 24
77.51.249.0/24 maxlen: 24
77.51.250.0/24 maxlen: 24
77.51.252.0/22 maxlen: 22
85.94.0.0/23 maxlen: 23
85.94.0.0/24 maxlen: 24
2a02:930::/32 maxlen: 32
2a02:930::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:4a:03:fa:e3:58:f9:18:88:6f:30:09:26:02:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 04:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8bec5073f2565eacd02b7f7da29e0632f4d514f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:2d:0f:a6:54:6b:29:6c:2d:f1:02:6e:1f:
70:3f:92:a7:bc:b7:7a:05:be:6c:d8:68:2e:58:c5:
82:2b:3b:d7:8d:4f:81:64:33:7a:f4:64:f1:0a:51:
ed:3c:47:d6:81:d4:91:8b:51:e5:73:f8:9c:dd:96:
1b:ae:94:fc:d9:96:73:43:80:71:9e:17:f2:80:7e:
06:92:81:f0:0d:58:c5:02:cd:65:cd:6c:f6:0d:54:
f7:c4:44:2b:a8:98:b5:da:5b:44:7a:16:e8:ab:55:
0c:13:fd:1c:af:58:75:74:15:f7:2d:38:2e:be:7f:
62:3f:1d:61:45:b3:4d:48:ec:30:ae:5a:28:a4:db:
12:b6:06:04:3e:aa:54:2d:86:67:12:48:a0:94:39:
35:37:bd:7e:bb:71:3b:b5:ce:f7:53:5f:be:9e:27:
bd:a1:73:bc:c1:83:74:ff:b0:c8:41:06:b7:3d:a0:
33:01:6b:18:32:62:a1:dd:fa:07:49:15:b9:d0:9a:
37:af:4d:21:e0:d4:1f:a6:9a:b4:c8:8f:b5:09:83:
00:a6:00:a1:7c:88:93:bf:12:1f:f9:6f:24:de:04:
99:95:8d:83:cb:91:10:c8:e7:96:a6:b2:d4:15:c8:
3d:d7:c9:10:72:ee:1b:10:59:81:aa:07:b4:75:91:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:C5:07:3F:25:65:EA:CD:02:B7:F7:DA:29:E0:63:2F:4D:51:4F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qL7FBz8lZerNArf32ingYy9NUU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.51.247.0/24
77.51.249.0-77.51.250.255
77.51.252.0/22
85.94.0.0/23
IPv6:
2a02:930::/32
Signature Algorithm: sha256WithRSAEncryption
53:cd:6e:f0:ac:ee:ea:48:3c:2c:86:90:e2:39:41:89:d1:22:
c8:44:56:55:66:4e:94:05:5f:f4:24:03:3b:0c:90:22:3e:fc:
66:af:63:56:39:82:bf:f7:e5:22:b7:ad:57:1a:4c:9a:15:9d:
93:a9:e7:c3:63:24:97:33:5f:4e:70:ee:e3:57:dc:b0:c8:27:
fe:fe:9e:dd:fe:bb:92:58:1b:f0:0d:9b:d2:6b:65:98:84:11:
05:b2:c7:60:c5:f9:e0:bd:3c:53:7a:38:23:66:e2:14:da:02:
aa:41:ad:aa:fd:1e:b1:18:79:93:fb:41:a5:45:13:43:d0:30:
01:e8:55:90:50:3d:3d:ab:b8:2f:06:1f:f9:50:87:f9:b4:bb:
8e:25:09:94:29:71:a0:ad:61:9b:65:40:fa:7e:af:31:02:3d:
ca:27:fe:f5:76:ee:8b:de:0f:6b:42:44:6d:5a:32:53:4a:89:
ae:6c:72:95:2e:ae:55:ab:0e:af:f9:2c:6d:ea:8b:ed:f6:31:
ca:cb:aa:3f:26:f3:31:84:46:5b:d2:95:1d:16:f3:24:9a:a7:
b9:2b:e1:d8:f2:b6:09:50:38:ab:dd:bc:9c:d3:c7:be:0a:95:
87:3b:8e:7b:f8:63:8b:85:d2:0e:9a:0c:81:eb:2c:98:75:18:
78:da:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:43:40 2024 by rpki-client on console-ams.rpki-client.org