Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wU7qgDosimvm0-_dHqgo83nKHQw.roa
File: wU7qgDosimvm0-_dHqgo83nKHQw.roa (raw, json)
Hash identifier: IH4QGO+ru/DTP7oJZzB+jH5XX5ZPYny8xi2lMIVn3T8=
Subject key identifier: C1:4E:EA:80:3A:2C:8A:6B:E6:D3:EF:DD:1E:A8:28:F3:79:CA:1D:0C
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9CF2E0648BCEE78039339036C180
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wU7qgDosimvm0-_dHqgo83nKHQw.roa
Signing time: Mon 01 Jan 2024 18:31:33 +0000
ROA not before: Mon 01 Jan 2024 18:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210910
IP address blocks: 77.65.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:9c:f2:e0:64:8b:ce:e7:80:39:33:90:36:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c14eea803a2c8a6be6d3efdd1ea828f379ca1d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:09:24:ad:bd:16:d9:de:5b:6e:3c:c7:3b:
c7:c1:2f:19:74:e0:8c:64:2b:b1:d0:e3:c7:7e:e1:
5d:17:31:77:73:5e:c8:af:da:b3:48:e4:83:3c:53:
10:6e:62:f6:04:da:31:23:5c:42:22:2c:ed:03:bb:
9a:48:d6:9f:8b:6f:09:3e:07:4d:d3:b3:13:5d:70:
ce:88:5e:90:dc:2e:68:29:59:47:b5:22:e5:23:2c:
89:9e:52:f2:c5:b7:c8:1e:1e:61:16:ad:eb:54:53:
36:e8:31:a9:f3:b0:ec:ab:70:02:47:37:02:9d:bf:
5e:dd:3e:d5:95:61:b6:e7:d2:45:0e:c0:f8:d6:f9:
48:46:f0:e4:22:f6:7f:c0:b0:08:13:3f:e7:40:51:
84:d9:28:65:e8:22:fb:a8:5e:08:d1:38:04:78:7f:
68:2a:1f:73:f7:20:06:53:8d:75:ef:6d:f1:38:f1:
e7:43:ad:06:1e:17:ac:c3:55:22:e0:fb:10:06:43:
74:d5:91:aa:b3:c7:af:1e:9d:9a:5f:f3:63:c5:e9:
3c:0f:86:a5:8e:9a:1a:ff:4a:0b:bd:5c:a7:ed:89:
35:02:9b:77:d8:67:0d:26:1c:68:0c:b7:aa:6f:3a:
27:4b:1d:d9:32:55:b2:44:b8:35:95:cd:e1:c3:e2:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:EA:80:3A:2C:8A:6B:E6:D3:EF:DD:1E:A8:28:F3:79:CA:1D:0C
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/wU7qgDosimvm0-_dHqgo83nKHQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.152.0/24
Signature Algorithm: sha256WithRSAEncryption
33:21:09:b4:16:e5:b4:3e:bc:c2:5a:dc:bb:46:1d:ba:23:32:
ba:15:7b:72:76:4b:b8:fd:32:d2:1d:3b:b6:de:98:c2:9a:92:
85:7f:8f:c7:8e:6f:a4:f6:fd:b1:91:09:7a:9e:9c:5c:8a:68:
f0:aa:b3:90:38:3b:c7:3f:7b:11:fb:7c:9d:c3:54:c0:00:2d:
7c:fd:5d:cf:aa:0d:ee:36:af:70:bf:18:8c:77:89:ae:8e:d4:
d7:6b:18:e4:02:d4:d1:1f:c8:e4:88:7f:02:26:86:ab:d7:47:
0a:4d:5a:27:cf:73:a2:84:e1:01:b9:50:42:7f:6a:ed:b3:86:
d4:1f:e6:21:a8:58:1d:8e:f1:37:f5:77:a1:b2:2c:10:c9:8b:
13:fa:dd:6d:78:9f:4f:c3:b4:32:1d:88:c6:85:09:c4:f4:70:
52:f6:09:09:d5:b8:25:bf:98:ec:e7:99:57:d5:31:8f:9b:19:
59:dc:0e:91:d5:e2:94:a9:b5:ec:46:0d:89:ee:3c:7b:35:8c:
d6:9f:35:8d:b4:12:2f:77:63:9c:e5:44:8b:c6:56:34:36:03:
bd:59:d9:69:a0:58:ee:aa:fe:c6:94:10:ce:21:e4:0e:97:27:
11:8e:dd:a0:e2:fd:47:ca:8a:9e:d5:60:28:2f:9c:0c:86:48:
35:d4:dd:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS5zy4GSLzueAOTOQNsGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwMTAxMTgzMTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTRlZWE4MDNhMmM4YTZiZTZkM2VmZGQxZWE4MjhmMzc5Y2ExZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM0JJK29FtneW248xzvHwS8ZdOCM
ZCux0OPHfuFdFzF3c17Ir9qzSOSDPFMQbmL2BNoxI1xCIiztA7uaSNafi28JPgdN
07MTXXDOiF6Q3C5oKVlHtSLlIyyJnlLyxbfIHh5hFq3rVFM26DGp87Dsq3ACRzcC
nb9e3T7VlWG259JFDsD41vlIRvDkIvZ/wLAIEz/nQFGE2Shl6CL7qF4I0TgEeH9o
Kh9z9yAGU411723xOPHnQ60GHhesw1Ui4PsQBkN01ZGqs8evHp2aX/Njxek8D4al
jpoa/0oLvVyn7Yk1Apt32GcNJhxoDLeqbzonSx3ZMlWyRLg1lc3hw+JkyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFO6oA6LIpr5tPv3R6oKPN5yh0MMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvd1U3cWdEb3NpbXZtMC1fZEhxZ284M25LSFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUGYMA0G
CSqGSIb3DQEBCwUAA4IBAQAzIQm0FuW0PrzCWty7Rh26IzK6FXtydku4/TLSHTu2
3pjCmpKFf4/Hjm+k9v2xkQl6npxcimjwqrOQODvHP3sR+3ydw1TAAC18/V3Pqg3u
Nq9wvxiMd4mujtTXaxjkAtTRH8jkiH8CJoar10cKTVonz3OihOEBuVBCf2rts4bU
H+YhqFgdjvE39XehsiwQyYsT+t1teJ9Pw7QyHYjGhQnE9HBS9gkJ1bglv5js55lX
1TGPmxlZ3A6R1eKUqbXsRg2J7jx7NYzWnzWNtBIvd2Oc5USLxlY0NgO9WdlpoFju
qv7GlBDOIeQOlycRjt2g4v1Hyoqe1WAoL5wMhkg11N0j
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:04 2024 by rpki-client on console-fra.rpki-client.org