Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JJJVSch46i_Lnk4Yir_fkIaWAvo.roa
File: JJJVSch46i_Lnk4Yir_fkIaWAvo.roa (raw, json)
Hash identifier: sAwt2BxDAAhZWKr+iAXD3gTsnvmKnPGaDsuUVoamFGE=
Subject key identifier: 24:92:55:49:C8:78:EA:2F:CB:9E:4E:18:8A:BF:DF:90:86:96:02:FA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC79446816AAC61FB742BB2CB0F1C4AE4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JJJVSch46i_Lnk4Yir_fkIaWAvo.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36671
IP address blocks: 77.77.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:46:81:6a:ac:61:fb:74:2b:b2:cb:0f:1c:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24925549c878ea2fcb9e4e188abfdf90869602fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:27:42:1c:75:a0:78:8e:2b:6e:6c:bc:cd:
a3:e4:e8:1c:18:68:98:28:91:cd:87:b7:b3:b1:17:
52:77:6c:23:ed:b9:36:54:ab:4c:ce:ec:92:e9:f1:
93:b4:d0:7e:5b:68:2f:71:45:8c:37:fa:5f:45:3b:
d7:d6:7c:40:b7:28:41:0c:7a:41:1b:50:ca:33:51:
8f:18:fc:37:62:79:83:4d:b6:f4:c6:68:29:56:37:
55:7f:1a:85:eb:66:7b:ae:c1:9c:43:05:37:d7:69:
64:f3:49:b5:cb:21:d5:cc:e7:5a:0b:eb:a2:a5:d7:
ef:6b:0b:5b:f2:d8:c5:36:84:1a:8e:8c:6e:58:12:
46:b1:48:0a:d9:4e:cb:ee:fe:95:e6:06:f0:86:20:
c9:ce:2f:a0:33:f0:c7:8b:a7:be:d3:92:c6:02:a3:
7d:de:d0:9d:71:eb:b9:89:0b:b5:82:ae:94:cc:ac:
99:6a:a0:3b:62:a2:ba:85:88:84:3f:fb:bf:01:67:
4b:59:4a:c9:40:c2:8e:e7:5c:6d:26:b7:6b:68:b2:
ce:18:c4:32:23:db:38:96:a0:bb:c9:61:d3:7e:ec:
ca:17:5c:fd:7e:1e:d2:dc:42:b3:dc:4f:67:db:0d:
93:b7:61:f2:03:4d:38:3f:87:81:46:01:f2:ff:20:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:55:49:C8:78:EA:2F:CB:9E:4E:18:8A:BF:DF:90:86:96:02:FA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JJJVSch46i_Lnk4Yir_fkIaWAvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.172.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:4b:79:9e:6b:c2:09:6b:3c:8c:a6:de:0b:b8:0c:83:fd:
a2:4b:15:da:3a:0e:af:c0:f4:73:cf:5c:fb:1f:9d:0f:88:85:
e1:02:96:af:a1:74:14:e5:02:be:f7:81:e6:0c:73:b6:23:60:
ff:27:e6:7d:07:d9:30:34:0b:76:7b:ec:c6:70:7d:39:d7:7d:
a5:fe:b1:d6:d5:cf:37:e6:01:a4:48:a8:ab:7c:1b:de:1a:46:
ae:6f:d9:d7:a2:e5:67:b8:39:35:b4:ef:64:7e:e9:09:1c:93:
99:70:41:d8:e1:8a:21:3e:5a:e1:c1:c2:e1:64:7b:78:80:04:
9a:c9:3a:64:a5:37:b1:39:f9:33:55:94:3b:db:dc:e4:05:7f:
25:97:24:6e:a5:41:19:5f:60:92:f4:7c:15:84:50:c8:ec:9c:
4f:35:74:b3:33:65:cb:86:d6:cc:94:03:7e:a3:c2:83:f5:e5:
1c:4f:43:ea:72:32:fc:72:67:6f:cc:28:08:77:c9:13:b6:de:
41:58:95:2a:96:bc:f6:d5:9a:be:3f:10:0e:11:07:da:48:d1:
f7:43:96:5e:09:89:c6:59:37:6c:4b:ea:9d:99:8c:05:d5:04:
7f:56:39:78:70:39:1f:aa:d6:35:b5:69:09:8e:fa:33:cf:31:
bc:b7:f5:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlEaBaqxh+3QrsssPHErkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjQwMTAyMDAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDkyNTU0OWM4NzhlYTJmY2I5ZTRlMTg4YWJmZGY5MDg2OTYwMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWUnQhx1oHiOK25svM2j5OgcGGiY
KJHNh7ezsRdSd2wj7bk2VKtMzuyS6fGTtNB+W2gvcUWMN/pfRTvX1nxAtyhBDHpB
G1DKM1GPGPw3YnmDTbb0xmgpVjdVfxqF62Z7rsGcQwU312lk80m1yyHVzOdaC+ui
pdfvawtb8tjFNoQajoxuWBJGsUgK2U7L7v6V5gbwhiDJzi+gM/DHi6e+05LGAqN9
3tCdceu5iQu1gq6UzKyZaqA7YqK6hYiEP/u/AWdLWUrJQMKO51xtJrdraLLOGMQy
I9s4lqC7yWHTfuzKF1z9fh7S3EKz3E9n2w2Tt2HyA004P4eBRgHy/yD9vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSSVUnIeOovy55OGIq/35CGlgL6MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSkpKVlNjaDQ2aV9Mbms0WWlyX2ZrSWFXQXZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU2sMA0G
CSqGSIb3DQEBCwUAA4IBAQBXukt5nmvCCWs8jKbeC7gMg/2iSxXaOg6vwPRzz1z7
H50PiIXhApavoXQU5QK+94HmDHO2I2D/J+Z9B9kwNAt2e+zGcH05132l/rHW1c83
5gGkSKirfBveGkaub9nXouVnuDk1tO9kfukJHJOZcEHY4YohPlrhwcLhZHt4gASa
yTpkpTexOfkzVZQ729zkBX8llyRupUEZX2CS9HwVhFDI7JxPNXSzM2XLhtbMlAN+
o8KD9eUcT0PqcjL8cmdvzCgId8kTtt5BWJUqlrz21Zq+PxAOEQfaSNH3Q5ZeCYnG
WTdsS+qdmYwF1QR/Vjl4cDkfqtY1tWkJjvozzzG8t/W3
-----END CERTIFICATE-----
Generated at Wed May 1 21:04:33 2024 by rpki-client on console-ams.rpki-client.org