Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T19NSKYaBa4jsLhMKb2ObEXvQF8.roa
File: T19NSKYaBa4jsLhMKb2ObEXvQF8.roa (raw, json)
Hash identifier: g1Xv/CX7NXuvyQ+ImVlKsWiWbD/GCkEudDFfTCap11g=
Subject key identifier: 4F:5F:4D:48:A6:1A:05:AE:23:B0:B8:4C:29:BD:8E:6C:45:EF:40:5F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01935324A2AC28D7D9C43BE03DE7A8BF1E94
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T19NSKYaBa4jsLhMKb2ObEXvQF8.roa
Signing time: Fri 22 Nov 2024 09:12:09 +0000
ROA not before: Fri 22 Nov 2024 09:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:24:a2:ac:28:d7:d9:c4:3b:e0:3d:e7:a8:bf:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 22 09:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f5f4d48a61a05ae23b0b84c29bd8e6c45ef405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:24:67:f7:54:78:c3:3c:08:82:11:45:d7:
a5:26:15:ba:63:6a:9d:0d:7e:4a:1a:60:dc:a9:3a:
97:d1:42:26:6d:0e:30:99:7e:f9:d4:f9:89:33:ee:
64:4c:af:6f:3e:45:ef:93:cd:62:20:49:6f:ed:ff:
c9:ba:8f:15:e2:18:fe:09:96:2b:e1:de:b8:1f:63:
e0:4d:17:ce:47:3b:8f:1c:3b:9e:71:df:48:b5:c9:
8e:d8:8f:1f:e8:39:57:24:d0:69:44:b9:54:1d:d3:
22:59:fd:4a:a5:bd:cb:2f:e4:0f:9c:89:2a:a4:9a:
46:b4:41:10:29:f4:55:60:db:17:e3:b2:0b:b8:54:
e9:bf:1d:d2:8b:ba:cf:db:57:42:2d:f9:ed:37:a6:
78:4d:d1:65:27:44:30:c3:4b:65:40:ff:1e:b0:29:
18:46:84:28:59:ff:7d:b4:60:fd:12:4f:b7:f7:3a:
92:2f:34:12:dd:2d:b0:ae:31:41:2d:e6:a1:0d:1c:
34:2f:66:2e:fd:6a:7f:59:50:1c:69:30:13:cf:bc:
0e:17:ff:69:ca:cc:72:80:a9:3e:4d:a8:59:f1:38:
e6:73:49:70:d7:4c:86:71:d6:5a:43:d2:55:74:eb:
4f:73:91:95:74:e8:07:a0:6c:60:93:d9:77:f7:e7:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:4D:48:A6:1A:05:AE:23:B0:B8:4C:29:BD:8E:6C:45:EF:40:5F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T19NSKYaBa4jsLhMKb2ObEXvQF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
185.143.56.0/22
195.178.132.0/22
195.178.144.0/22
195.178.152.0-195.178.156.255
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:53:f2:f1:e6:cb:f0:d6:7f:a0:85:0b:bc:01:6d:f6:bf:04:
f4:33:c8:df:87:17:b8:55:be:a1:bb:72:3e:d2:9d:e5:ea:48:
6a:e3:18:76:18:ba:30:ba:a4:5e:8e:cd:d8:1f:7f:e4:9a:cf:
3b:e6:2d:4c:a3:3f:e9:74:ba:86:e6:b3:1f:76:d3:92:63:13:
29:fb:11:f4:13:04:e3:b5:3e:84:5e:e8:1b:1a:9e:ce:13:06:
47:29:92:ee:27:79:f6:84:5d:ee:cd:95:d7:ba:78:92:b0:92:
bc:b5:87:d3:8a:11:3b:57:c9:12:c1:8c:7f:fe:d3:2b:a8:86:
f2:1f:71:e5:c4:ea:f1:5b:1b:dd:3c:99:e0:de:b8:ee:aa:cc:
c7:8d:e2:49:0a:1b:bb:58:6d:99:b2:3c:18:ed:12:4d:25:df:
b8:e7:b8:b5:19:59:35:49:d7:c3:91:df:8c:97:39:77:7f:58:
c1:a4:28:ec:fc:d0:25:17:3e:05:bb:ab:61:4b:56:e0:19:e2:
94:22:37:96:7e:f6:de:07:c8:7b:2e:09:24:ac:16:e9:c7:93:
51:fe:d5:19:c9:28:d9:b4:89:7c:e5:61:46:41:98:43:dc:3e:
40:79:ae:7a:a5:27:2c:2e:2f:6f:50:ce:d2:3d:8e:22:49:4a:
8a:37:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:45:32 2024 by rpki-client on console-ams.rpki-client.org