Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cURUBxssUekg9hBnx75Nxo8DJos.roa
File: cURUBxssUekg9hBnx75Nxo8DJos.roa (raw, json)
Hash identifier: iKfqm+UmTVfLJfntH5baffgDyl8+GwdDPmrZNEpnsBI=
Subject key identifier: 71:44:54:07:1B:2C:51:E9:20:F6:10:67:C7:BE:4D:C6:8F:03:26:8B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0190026A7A9380ABC5C53B837C3F7F1E8194
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cURUBxssUekg9hBnx75Nxo8DJos.roa
Signing time: Mon 10 Jun 2024 13:50:50 +0000
ROA not before: Mon 10 Jun 2024 13:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.47.148.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.242.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:6a:7a:93:80:ab:c5:c5:3b:83:7c:3f:7f:1e:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 10 13:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714454071b2c51e920f61067c7be4dc68f03268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:7b:1c:06:80:43:90:68:ac:e7:f6:cd:79:
c9:44:03:6d:35:a1:e6:e9:29:2a:25:cd:38:30:4c:
d9:96:ad:15:d5:72:67:55:20:35:ad:f0:21:87:49:
64:7b:44:07:38:88:4b:95:c4:7c:7f:a4:3f:d5:80:
bf:c2:a2:a1:28:7b:1b:12:bb:66:6c:a0:e9:80:0f:
ab:69:b7:7e:cb:55:e9:72:41:fd:2f:50:0e:8c:e8:
05:c8:4b:67:1f:44:7c:1e:b8:01:5f:52:29:e3:6b:
02:f2:a3:38:ce:6f:e7:22:d0:08:d6:a7:59:c1:27:
89:87:0d:6f:fc:53:ed:cb:d1:83:fb:1b:35:55:db:
03:4b:9a:6e:87:88:24:fe:ab:39:fa:7f:59:3a:55:
d5:68:eb:e5:07:1f:0c:c3:35:44:15:f4:fa:a7:36:
5e:f8:c9:9e:71:f6:0f:fa:84:f7:8c:07:9a:1c:70:
93:7d:80:ef:d4:e1:04:13:98:8e:52:81:f5:1c:f8:
a9:63:d1:27:30:0c:47:ea:3e:1b:2e:c9:15:8a:46:
8e:3f:3a:30:92:1d:6b:83:8d:f7:ca:e6:2d:e6:c3:
fd:14:d0:64:07:22:40:f1:a5:80:a7:04:b2:9d:d4:
71:c8:0e:f8:28:f6:80:c6:c6:9e:b0:69:19:ab:2a:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:54:07:1B:2C:51:E9:20:F6:10:67:C7:BE:4D:C6:8F:03:26:8B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cURUBxssUekg9hBnx75Nxo8DJos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
77.47.178.0/24
77.47.242.0/23
195.178.146.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
65:55:74:7d:cc:5d:12:67:b4:73:62:86:18:53:2d:61:e3:8f:
8d:d3:d2:46:e3:26:1c:cc:ce:59:54:b0:11:db:64:10:11:89:
d7:9f:aa:bf:4d:28:a5:d7:42:45:93:47:63:67:0e:ed:b0:74:
97:b8:60:37:8c:0d:c4:ba:ba:e7:60:0d:16:62:04:ee:07:2c:
6a:92:b4:08:8d:e9:50:86:f5:18:78:08:bf:c9:ce:8b:02:5c:
e6:8a:d9:0f:6b:19:d0:fc:5c:06:d3:69:22:d3:c4:ad:30:19:
ed:00:4f:02:2f:12:af:62:47:db:55:f1:0e:49:96:44:d6:8f:
b6:c0:f2:58:ef:f6:d4:21:be:8c:fe:91:cc:1e:5c:cf:25:fb:
f4:7d:1b:de:1a:0d:43:60:fe:41:4d:99:2d:1e:9e:0a:8c:09:
82:97:b8:7d:e3:10:f7:a4:ad:7a:2d:79:2c:60:aa:e6:43:08:
69:e3:11:08:b1:4b:4b:8f:02:3c:a2:c5:1f:54:71:a0:cb:f0:
c8:57:86:ec:eb:4b:c9:0f:b1:10:48:b4:73:85:51:a5:af:74:
bf:95:b3:8d:55:29:2d:a1:58:b6:69:de:37:ac:37:0f:af:bb:
5e:2a:cd:79:34:4c:44:f5:ec:ee:d4:84:e8:bc:46:26:bd:d7:
2b:6b:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:14:08 2024 by rpki-client on console-ams.rpki-client.org