Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa
File: 1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa (raw, json)
Hash identifier: sUym7PdUFQ+5SLh2CWzvhf4k7lucxzrVliTrUKr7fmU=
Subject key identifier: F8:6C:54:A9:BC:49:6B:EC:F4:12:83:65:E1:25:03:50:70:07:E6:59
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018E1ED096030DB83D36F897398EF346DB54
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa
Signing time: Fri 08 Mar 2024 16:06:10 +0000
ROA not before: Fri 08 Mar 2024 16:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:d0:96:03:0d:b8:3d:36:f8:97:39:8e:f3:46:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Mar 8 16:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f86c54a9bc496becf4128365e12503507007e659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:e5:1e:4a:78:0d:42:53:3c:dc:9c:97:67:
8b:ca:11:bc:c5:97:d7:fa:4c:22:ce:6a:da:f3:78:
ed:8d:c7:cc:b5:8a:34:07:11:5b:75:b2:54:29:16:
1f:05:b5:2b:29:4c:0c:c3:a2:d6:8d:8b:2a:f1:88:
a6:ae:d8:59:87:f6:dc:be:e5:ac:55:af:73:b0:e8:
7e:69:ca:a5:66:64:34:8f:14:5a:d7:49:29:8c:87:
8c:2e:eb:4d:2f:e5:fd:8c:96:e3:3b:4e:da:e0:70:
18:02:6f:4c:aa:8f:8f:a5:dc:86:78:62:6c:3c:5a:
6f:82:44:53:39:7d:fe:d9:82:fc:7e:e7:4b:52:0b:
51:8d:b0:98:3a:e8:6e:be:9f:83:d9:ac:7d:b4:67:
9c:08:00:c1:5e:7e:6f:b2:46:81:9b:dd:22:da:a3:
2e:58:78:6f:6d:40:4a:18:87:71:16:e0:f9:0f:4e:
65:1e:25:84:48:ff:20:69:0b:2a:81:ac:68:7a:db:
4e:b3:9f:2b:50:ba:f5:70:d4:fa:a5:78:14:b2:a2:
bd:3d:00:ca:ee:fe:70:4c:b4:88:83:c8:fc:9c:2d:
63:3a:b6:1e:29:ee:d5:4f:d4:fb:99:4f:ec:22:db:
c8:60:f4:f4:8b:4d:0c:a9:99:e2:ac:62:88:d7:ee:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:54:A9:BC:49:6B:EC:F4:12:83:65:E1:25:03:50:70:07:E6:59
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:98:93:e3:1c:22:1a:d2:da:18:e3:01:23:8a:39:79:81:26:
32:1d:8a:87:34:fd:3b:9e:c4:d5:55:87:9e:3d:43:21:0c:9d:
ef:4f:f0:08:fe:dc:b0:22:89:5f:a6:26:94:79:9d:cb:10:aa:
73:79:43:62:1f:08:b6:9b:fb:11:79:83:ee:87:9a:c0:b5:e2:
71:7b:8d:6c:f7:1b:8f:05:be:df:28:a4:dd:60:75:c7:9f:af:
1f:b0:37:a9:5e:39:fd:24:e9:c7:db:8e:d1:d9:df:8b:f9:b2:
2c:b2:22:19:89:5f:9b:3b:ac:8d:21:e7:80:0c:d5:d0:09:31:
50:84:33:15:27:db:37:2b:4b:4e:76:e5:6f:4e:5d:a7:77:23:
d9:65:fc:a4:7f:cb:c1:dd:f8:f8:6e:2f:95:a7:0c:04:2d:5c:
f1:82:a3:85:81:c5:5f:85:da:51:d7:2c:98:4c:77:ef:6f:96:
d3:5d:ba:0e:3a:dc:66:bf:a6:e4:bb:3b:1d:ba:d8:3e:14:a3:
c5:aa:f1:62:37:4b:e5:05:e2:b1:29:4f:c8:d5:b9:75:67:bf:
5b:90:ce:63:47:e5:c6:e3:84:9e:a1:c4:84:c5:02:c0:ba:14:
d7:43:6e:fa:eb:79:49:75:92:15:e5:98:e1:0f:8e:00:ec:83:
21:1d:81:3e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY4e0JYDDbg9NviXOY7zRttUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjQwMzA4MTYwNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODZjNTRhOWJjNDk2YmVjZjQxMjgzNjVlMTI1MDM1MDcwMDdlNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5czlHkp4DUJTPNycl2eLyhG8xZfX
+kwizmra83jtjcfMtYo0BxFbdbJUKRYfBbUrKUwMw6LWjYsq8YimrthZh/bcvuWs
Va9zsOh+acqlZmQ0jxRa10kpjIeMLutNL+X9jJbjO07a4HAYAm9Mqo+PpdyGeGJs
PFpvgkRTOX3+2YL8fudLUgtRjbCYOuhuvp+D2ax9tGecCADBXn5vskaBm90i2qMu
WHhvbUBKGIdxFuD5D05lHiWESP8gaQsqgaxoettOs58rULr1cNT6pXgUsqK9PQDK
7v5wTLSIg8j8nC1jOrYeKe7VT9T7mU/sItvIYPT0i00MqZnirGKI1+6vmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhsVKm8SWvs9BKDZeElA1BwB+ZZMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvMS1HeFVxYnhKYS16MEVvTmw0U1VEVUhBSDVsay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvYjUxYTg1LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2
Yy8xLzJNWUtEUzF3cVROOUM5cFcwYTFaYXNIMm5Oby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1K5zAN
BgkqhkiG9w0BAQsFAAOCAQEAbZiT4xwiGtLaGOMBI4o5eYEmMh2KhzT9O57E1VWH
nj1DIQyd70/wCP7csCKJX6YmlHmdyxCqc3lDYh8Itpv7EXmD7oeawLXicXuNbPcb
jwW+3yik3WB1x5+vH7A3qV45/STpx9uO0dnfi/myLLIiGYlfmzusjSHngAzV0Akx
UIQzFSfbNytLTnblb05dp3cj2WX8pH/Lwd34+G4vlacMBC1c8YKjhYHFX4XaUdcs
mEx372+W0126DjrcZr+m5Ls7HbrYPhSjxarxYjdL5QXisSlPyNW5dWe/W5DOY0fl
xuOEnqHEhMUCwLoU10Nu+ut5SXWSFeWY4Q+OAOyDIR2BPg==
-----END CERTIFICATE-----
Generated at Mon May 20 07:46:11 2024 by rpki-client on console-ams.rpki-client.org