Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/PiI1XDc1Fquqtu3vZhkzlczJjzA.roa
File: PiI1XDc1Fquqtu3vZhkzlczJjzA.roa (raw, json)
Hash identifier: TyP7JbPOOV7P5GpzuabraEMnub3kES2mPwfeg1b3RPE=
Subject key identifier: 3E:22:35:5C:37:35:16:AB:AA:B6:ED:EF:66:19:33:95:CC:C9:8F:30
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018E8B691C871104FC1CCAFC87973D886C19
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/PiI1XDc1Fquqtu3vZhkzlczJjzA.roa
Signing time: Fri 29 Mar 2024 18:11:45 +0000
ROA not before: Fri 29 Mar 2024 18:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:69:1c:87:11:04:fc:1c:ca:fc:87:97:3d:88:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Mar 29 18:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e22355c373516abaab6edef66193395ccc98f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:4e:34:57:bf:36:11:47:ed:72:d7:48:13:
a3:f7:db:44:cd:cb:77:40:2d:1d:f1:f4:10:1a:96:
53:73:69:ea:0c:27:a5:61:cc:ee:65:a3:5b:0e:48:
18:90:ce:d2:0a:5c:4f:f2:62:08:7d:ed:f3:11:04:
71:d8:a5:6c:4d:0c:13:42:54:80:54:ed:48:a3:f2:
56:cc:e9:b0:41:96:4e:df:18:e6:40:33:63:7a:20:
cc:61:99:8b:c3:1a:07:70:75:80:ef:bf:39:38:1a:
b7:08:b4:69:61:64:ce:82:d7:ed:a5:81:59:d2:0f:
9e:dc:40:43:f4:d0:41:a6:72:e4:9e:07:ca:3e:3e:
8c:fd:77:f6:38:47:90:e6:32:86:72:ff:b2:ce:63:
4d:2c:0e:35:6f:6e:30:ae:2c:9f:87:f9:eb:fb:c3:
cc:57:de:fd:ff:8b:12:6c:a0:cf:e7:65:ff:2b:39:
11:05:9f:90:70:b9:c8:9d:48:f7:55:07:f5:e8:a3:
59:10:6a:e5:f5:b4:79:02:ce:f0:ee:c7:b1:20:09:
01:64:4a:0f:97:75:de:82:a8:a2:07:63:e1:18:28:
fc:c8:a7:c3:f0:4a:30:23:1f:a8:f0:28:b8:ac:1c:
f2:57:d7:c7:4b:2f:21:40:97:9f:85:5c:34:01:65:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:35:5C:37:35:16:AB:AA:B6:ED:EF:66:19:33:95:CC:C9:8F:30
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/PiI1XDc1Fquqtu3vZhkzlczJjzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:7e:3a:30:46:64:6f:23:61:fb:03:84:e5:dc:18:b3:0f:
05:f5:14:88:ef:63:8c:4a:4c:c7:3f:2b:c4:4c:fa:7c:6e:55:
ca:db:ac:bc:e8:33:5f:9f:07:54:ed:31:ef:4b:aa:07:a1:11:
e1:0e:12:4d:3c:ab:d9:01:d7:65:8d:3a:3d:4c:e3:0e:12:42:
bb:b1:ba:ab:66:32:f4:bb:60:e6:49:86:5b:54:b6:be:8e:7e:
09:c2:c6:34:26:68:d0:6b:e5:ed:60:07:16:a4:95:11:85:7c:
2f:e3:fe:6e:f8:b0:ea:1d:4f:22:ee:49:82:57:ad:61:ff:85:
1d:b6:29:15:3c:cd:5a:12:fe:38:c7:f2:e5:7c:6a:2a:1d:9f:
01:61:14:30:39:54:e1:61:e3:f4:bf:1d:09:44:56:01:92:2f:
05:e6:1f:63:ec:7e:5c:e8:a3:40:38:5a:fd:7c:63:2e:6e:f8:
6d:2c:5d:91:ab:dd:51:aa:4c:74:bb:35:81:6c:6a:a7:72:8e:
2b:7f:eb:c3:20:5d:65:2e:3a:74:6e:06:9b:61:8e:62:44:ee:
86:f1:f1:53:9f:ba:24:6c:83:c6:e5:10:5c:c7:94:aa:4d:6c:
fc:b0:71:72:f4:6b:e9:49:95:45:2b:81:14:2f:43:14:a6:20:
a9:3f:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:20:58 2024 by rpki-client on console-fra.rpki-client.org