Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rodm4P8eR-WEEJn6NPxWHSCVt7o.roa
File: Rodm4P8eR-WEEJn6NPxWHSCVt7o.roa (raw, json)
Hash identifier: j1SjtRB46vPxICFBYv7x/1hc5wPrWOdUEaNJUD0TFfc=
Subject key identifier: 46:87:66:E0:FF:1E:47:E5:84:10:99:FA:34:FC:56:1D:20:95:B7:BA
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3914B322C803A95C7ECCCB70144E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rodm4P8eR-WEEJn6NPxWHSCVt7o.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3214
IP address blocks: 77.47.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:39:14:b3:22:c8:03:a9:5c:7e:cc:cb:70:14:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=468766e0ff1e47e5841099fa34fc561d2095b7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:0a:f2:87:9f:b4:22:78:4a:58:84:41:3f:
d8:e9:5c:49:8c:b1:f9:2c:6b:0a:e7:af:b3:09:a8:
c8:f3:aa:cf:6f:72:b8:a7:4b:5a:5d:2c:82:cc:d7:
f5:df:fb:d0:1a:d7:59:4f:31:8f:06:30:89:d1:c2:
6c:f4:d2:56:02:e9:28:59:f7:2c:0f:67:d7:55:36:
0b:78:6e:30:4f:a4:bb:6e:91:d3:19:50:35:f5:58:
5a:35:06:e0:ef:0a:b5:84:8c:7f:1c:b9:04:dd:9e:
1c:7b:fd:aa:77:bc:d3:1e:06:c0:58:86:f7:0a:ea:
68:ca:d8:81:c2:b3:2b:27:02:43:dd:9a:f4:9c:4d:
de:82:cc:ed:53:65:1e:5e:96:58:b6:49:c8:02:b3:
b2:5b:d3:ee:2f:3b:2a:4d:37:47:3c:99:f1:42:19:
40:24:b2:3d:80:0f:db:55:65:ed:03:37:2b:ee:a7:
b4:38:4e:3a:bf:04:23:0c:1e:e3:e9:2c:27:59:9f:
4c:f5:ea:8f:99:f6:29:fd:c0:86:07:fc:f1:ba:21:
9b:fa:be:17:cf:58:7b:97:c5:36:4d:c7:ef:09:46:
b2:90:16:29:af:8a:d8:cc:d6:19:a3:16:5e:11:3d:
c2:7b:0e:b9:29:f2:b3:40:ca:16:19:d9:eb:68:50:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:66:E0:FF:1E:47:E5:84:10:99:FA:34:FC:56:1D:20:95:B7:BA
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Rodm4P8eR-WEEJn6NPxWHSCVt7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:e5:0f:ab:52:a2:e2:8b:d0:bd:5b:a4:d5:70:9f:26:f7:
ed:91:c3:be:a1:2c:00:ff:40:f9:7e:8c:19:04:92:89:46:52:
b0:7f:37:b2:51:46:0a:9e:82:7c:29:44:6b:66:a2:e4:db:f5:
ee:ae:f5:72:96:5c:ff:9a:06:20:5a:93:88:27:a4:44:d8:a9:
dd:d6:b0:37:fe:b5:51:f0:53:6e:a7:14:d4:d9:ae:4f:b0:e1:
46:a7:ab:5b:6a:d6:6a:0e:41:c9:06:b6:07:06:6c:cd:da:35:
7c:c0:80:9e:b8:30:5e:11:61:6f:c5:aa:8a:b4:90:56:f8:a0:
c1:cf:5e:aa:65:e7:db:71:e8:a2:53:16:bb:cc:c0:39:8f:3f:
e5:cb:52:e9:f9:33:02:e9:95:c3:31:92:24:31:c9:80:8e:73:
82:e8:c7:35:03:de:73:d5:09:bc:34:13:a7:49:a0:a0:0b:ad:
53:e9:c9:24:25:b2:5f:94:e3:e4:e7:fc:b4:6f:99:4f:44:15:
4b:3c:d5:38:58:8c:f4:fb:00:a1:b7:de:0d:36:30:f1:62:fe:
ad:b1:2c:c3:be:e7:12:61:b1:13:87:02:81:f2:7d:c7:cb:b1:
5f:05:4e:1f:0c:d2:a1:c3:1a:45:f1:b6:af:2c:18:7b:1e:76:
e2:5e:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:27:22 2024 by rpki-client on console-ams.rpki-client.org