Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AZA8WYx6NAMJHkIsesTP5hdtLBY.roa
File: AZA8WYx6NAMJHkIsesTP5hdtLBY.roa (raw, json)
Hash identifier: yN+TZ67uILsHNAA0tW5gIDtmESsvN5Q3YqwHnQe0wK4=
Subject key identifier: 01:90:3C:59:8C:7A:34:03:09:1E:42:2C:7A:C4:CF:E6:17:6D:2C:16
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3EDAC2C12AEE7965EAF243F59ACD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AZA8WYx6NAMJHkIsesTP5hdtLBY.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3e:da:c2:c1:2a:ee:79:65:ea:f2:43:f5:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01903c598c7a3403091e422c7ac4cfe6176d2c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:85:a1:45:ec:ae:e4:2e:05:b2:bc:18:a4:26:
bc:5c:e5:85:3b:34:2d:b8:4f:01:ff:4e:e3:f7:a3:
35:3f:56:2a:8c:14:c0:50:c9:1b:b9:3f:f9:9e:fa:
67:d5:8a:d5:d6:4d:cb:86:60:42:34:91:89:99:22:
da:96:98:cb:a6:32:cc:34:94:df:ea:5c:52:62:1b:
bf:86:98:20:76:56:42:09:8b:fc:e4:37:d2:f8:78:
9d:01:85:26:e6:e6:ac:9b:aa:a6:ca:98:b4:df:42:
7d:d2:78:22:a6:c2:7c:bf:ae:be:54:c7:55:dd:d6:
cf:a8:30:b1:9c:c1:5a:db:1d:e4:0e:5f:37:50:26:
35:a2:49:03:93:ca:4d:ae:d9:f9:3c:e3:41:09:39:
02:bd:10:0b:0d:08:18:fd:c4:cc:d8:52:8b:76:e2:
a5:ae:de:49:1f:0b:d8:0e:10:13:3e:10:77:a6:2e:
89:b3:3d:df:68:e2:d0:45:c7:66:36:e1:2e:38:38:
f2:cf:2a:dc:8a:bf:59:45:b0:52:8f:60:4d:bd:77:
90:20:4b:20:be:e4:b3:53:18:64:f4:e0:66:6f:c8:
64:47:92:ff:ce:24:c8:22:08:8a:c8:30:92:f5:da:
10:26:cc:a3:27:1c:14:60:ae:56:c8:21:60:a2:dd:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:3C:59:8C:7A:34:03:09:1E:42:2C:7A:C4:CF:E6:17:6D:2C:16
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/AZA8WYx6NAMJHkIsesTP5hdtLBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
00:8d:0f:20:f4:70:a5:19:c7:fe:de:99:9d:81:be:87:4b:1d:
25:83:07:3d:5a:8e:a8:6a:44:64:b6:72:11:f4:a3:b6:4e:7e:
41:bb:f8:d6:e6:ef:09:f2:5a:44:91:be:6d:69:1b:b7:61:2a:
e3:87:35:e6:10:3d:64:04:c9:6d:d7:ab:1d:f0:9b:0f:47:b3:
ac:97:89:32:01:ee:4f:b4:5d:da:b0:2d:4d:62:36:3c:a8:3b:
d1:1d:25:18:25:00:00:5e:76:d1:de:9f:bf:98:b5:50:a1:cd:
49:7f:b0:e6:5f:58:69:7a:11:c8:09:1e:92:00:72:88:6d:b6:
18:31:37:30:a0:ea:3a:53:27:e2:3b:ba:80:08:ab:7c:fe:a8:
92:bd:a6:f6:dc:ea:19:f4:dd:14:07:14:2f:3d:06:21:da:42:
6d:f1:60:e3:8f:69:48:df:05:a3:75:ea:28:b8:ae:f7:03:3a:
70:72:b0:b6:bd:b0:29:26:66:7a:f0:62:fa:23:cf:d0:f2:dc:
68:71:dc:33:f2:60:57:ef:2c:f4:52:c7:84:90:45:2f:8a:72:
f5:a4:49:33:bd:94:ec:f8:d8:3d:d2:71:47:6e:58:c6:9d:14:
49:8a:f1:c0:6b:a3:75:86:02:92:5e:be:37:22:b1:00:b1:cc:
ce:c3:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 11:37:54 2024 by rpki-client on console-ams.rpki-client.org