Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/qiOMFPkOMmRpMrcttqK-Vdsi2eE.roa
File: qiOMFPkOMmRpMrcttqK-Vdsi2eE.roa (raw, json)
Hash identifier: vA4MKeiXjgxGL3Bw8sxY50vbOm/YzcweyTJCpT5Iou8=
Subject key identifier: AA:23:8C:14:F9:0E:32:64:69:32:B7:2D:B6:A2:BE:55:DB:22:D9:E1
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01913C62F8F559BF4E52F594102E2E618657
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/qiOMFPkOMmRpMrcttqK-Vdsi2eE.roa
Signing time: Sat 10 Aug 2024 13:03:24 +0000
ROA not before: Sat 10 Aug 2024 13:03:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 77.91.70.0/24 maxlen: 24
77.91.77.0/24 maxlen: 24
77.91.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3c:62:f8:f5:59:bf:4e:52:f5:94:10:2e:2e:61:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 10 13:03:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa238c14f90e32646932b72db6a2be55db22d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:28:1b:91:65:c1:a1:ec:ef:05:11:86:84:
36:9c:08:25:08:51:e9:90:90:38:40:16:3e:65:f2:
57:13:04:a3:73:1b:63:3d:8b:58:7e:16:06:8d:e1:
7d:bb:0a:5c:6d:d7:52:d0:c4:7f:e9:1f:2a:28:7e:
ea:89:3c:27:d5:13:5d:74:6f:ea:da:ed:3d:ef:80:
13:fd:f3:7b:82:2c:44:f1:1e:4e:fd:6b:6f:fa:b4:
fb:bb:54:8a:be:c4:52:58:7e:8d:38:72:4b:67:22:
3d:ab:14:11:0a:f2:ba:8b:6f:5c:2f:2a:4e:76:2c:
e5:73:48:aa:91:42:56:cf:23:c5:98:cb:e4:cf:73:
58:12:a1:3b:89:5e:24:a2:11:39:c3:42:30:18:f5:
1c:d9:8c:4c:8d:ee:3b:35:f6:5c:3f:14:51:df:60:
78:d2:eb:6d:3e:ed:d7:58:7f:b4:ab:a1:c5:9f:eb:
1d:59:90:f4:36:18:54:d1:13:7e:aa:8a:f3:20:8d:
69:a7:98:a2:24:4a:07:f2:8f:7f:5b:c3:e7:55:36:
94:b9:b1:b8:73:72:41:c0:c7:6c:2e:8d:de:ab:20:
22:91:52:d6:33:ee:dc:d2:ce:95:6d:97:88:99:35:
77:7e:21:08:cd:64:cd:bd:85:d7:f3:63:7e:a4:ec:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:8C:14:F9:0E:32:64:69:32:B7:2D:B6:A2:BE:55:DB:22:D9:E1
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/qiOMFPkOMmRpMrcttqK-Vdsi2eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
77.91.77.0-77.91.78.255
Signature Algorithm: sha256WithRSAEncryption
12:e3:5f:59:33:ab:8a:42:23:c5:91:57:96:0a:c5:dd:c2:0f:
e0:a4:09:64:5a:46:f7:d3:5b:df:21:c4:6b:4e:0d:cb:b2:e4:
2a:44:96:4f:86:91:00:f9:ab:ce:8a:23:2c:2d:9b:73:c5:aa:
ad:3b:37:14:3c:e7:e9:ed:ad:70:f2:10:a3:c8:e2:04:fb:b1:
0d:b6:5c:bf:bf:c9:09:cd:48:1f:46:74:8a:49:39:46:68:34:
a2:46:2a:20:62:d8:dc:d2:87:36:2f:51:1e:60:cd:74:d7:4a:
22:40:28:a1:7f:3b:c8:dd:66:36:04:c9:74:5f:69:55:eb:20:
dd:5a:8f:b3:fd:24:72:2e:b7:c1:87:21:b9:04:f6:f0:23:78:
dc:58:40:ec:38:23:90:51:be:c0:c4:f6:b9:9b:a0:6f:fd:81:
a0:3c:6d:03:08:da:27:e5:8c:61:66:1d:0d:6f:5b:1a:d7:cd:
0f:15:8b:f8:cb:f9:29:fb:11:8b:2d:0a:ba:dc:c4:3b:75:c6:
cd:39:42:d8:a5:f9:d5:fc:09:8f:e1:51:4d:f2:c6:02:23:df:
57:1a:eb:5a:99:a5:44:7b:28:0d:22:ac:e4:14:d3:b0:1c:86:
1d:c3:29:a5:cd:48:54:db:42:30:81:8b:fa:f3:ae:f6:aa:30:
ff:f2:c1:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:32 2024 by rpki-client on console-ams.rpki-client.org