Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pVsPvZc4OBPsSsrlPAvRj0FYXhU.roa
File: pVsPvZc4OBPsSsrlPAvRj0FYXhU.roa (raw, json)
Hash identifier: BZSIhYI4UMk1Cpej3mQo/x4ANisxXLgAiEfnxOAJ8/s=
Subject key identifier: A5:5B:0F:BD:97:38:38:13:EC:4A:CA:E5:3C:0B:D1:8F:41:58:5E:15
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0190023435CEAD176B6A42278C8DFEB51598
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pVsPvZc4OBPsSsrlPAvRj0FYXhU.roa
Signing time: Mon 10 Jun 2024 12:51:34 +0000
ROA not before: Mon 10 Jun 2024 12:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25500
IP address blocks: 77.47.128.0/17 maxlen: 17
77.47.128.0/21 maxlen: 21
77.47.128.0/24 maxlen: 24
77.47.136.0/22 maxlen: 22
77.47.140.0/23 maxlen: 23
77.47.160.0/20 maxlen: 20
77.47.176.0/23 maxlen: 23
77.47.184.0/21 maxlen: 21
77.47.192.0/20 maxlen: 20
77.47.194.0/24 maxlen: 24
77.47.208.0/23 maxlen: 23
77.47.214.0/23 maxlen: 23
77.47.216.0/21 maxlen: 21
77.47.224.0/20 maxlen: 20
2a02:db0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:34:35:ce:ad:17:6b:6a:42:27:8c:8d:fe:b5:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 10 12:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55b0fbd97383813ec4acae53c0bd18f41585e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:17:b2:92:02:52:ef:61:d0:94:7b:f1:f6:
ee:97:da:a6:23:b6:88:ae:03:d7:95:9b:2b:c7:72:
0e:fd:df:df:d3:9c:e6:85:0d:1b:34:32:89:2c:d0:
eb:40:c4:5d:a9:77:ac:43:0d:d8:61:95:8e:33:82:
2e:7e:b7:f9:af:86:4c:ca:ad:7c:a2:88:eb:88:d3:
10:0f:d6:18:78:bb:a2:70:54:61:21:64:9d:ee:47:
f7:91:dd:8e:d6:71:f6:1c:4c:85:55:1a:99:58:7f:
34:08:d2:16:1b:4a:31:26:93:8e:1b:32:f1:72:7f:
df:a1:f5:db:be:21:45:af:d6:16:1d:f4:c9:fd:70:
28:ef:16:a0:5e:97:60:f4:f6:c2:06:bc:be:f8:ff:
a3:cf:a6:61:85:39:a1:92:2a:98:7e:2f:31:f8:0c:
66:10:f6:11:ef:dc:59:a6:09:54:85:95:e6:52:0f:
e8:57:fc:02:ec:ec:9c:b7:e5:58:b9:fc:a1:3e:bc:
df:2c:09:f2:20:f8:1b:2e:ad:88:0d:b5:6a:b7:97:
1f:8b:c3:d5:68:59:eb:57:15:69:60:52:c9:dc:54:
ab:b5:f7:f8:5d:bc:01:12:a0:df:c2:56:82:34:fe:
cd:a2:8d:1b:22:10:69:aa:d0:70:51:56:0d:83:94:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:0F:BD:97:38:38:13:EC:4A:CA:E5:3C:0B:D1:8F:41:58:5E:15
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pVsPvZc4OBPsSsrlPAvRj0FYXhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.128.0/17
IPv6:
2a02:db0::/32
Signature Algorithm: sha256WithRSAEncryption
60:41:13:e9:70:b7:3d:8c:c0:b3:56:a5:75:17:c9:df:47:8d:
a4:cd:fe:8a:81:e3:ac:ef:32:21:c9:87:26:ab:cb:c4:f9:7a:
fd:39:50:9d:17:4f:b7:29:67:00:ed:85:d6:ca:6f:0a:8a:3c:
29:d3:21:c1:12:04:8c:9c:f8:7c:82:ae:5a:d0:dc:16:d9:aa:
21:e9:01:b2:d1:12:e0:64:38:40:4a:14:52:32:8e:32:2b:4b:
03:63:48:b3:5b:b5:80:4e:f9:92:b3:96:f5:cd:27:e8:f3:12:
94:16:d9:4b:bb:36:db:1c:50:82:4d:3c:2c:ee:cb:d5:0f:d6:
cb:e8:a5:83:c7:a1:13:70:00:e0:97:80:76:b5:1f:5b:cc:12:
22:2f:06:fc:7f:4a:16:e1:a2:09:07:4b:1e:96:c7:16:2f:a1:
1a:7d:90:8b:89:4a:44:20:af:4d:66:94:3d:de:b7:2c:9b:52:
af:75:3e:cb:28:42:fb:5c:dc:6d:84:2d:7b:95:b2:3d:d8:9c:
ed:f0:e3:5c:fc:c9:57:5b:3b:36:74:02:6a:08:86:56:cd:ae:
30:bb:ac:87:87:82:ce:4d:ac:38:1d:b3:4a:d5:01:ef:9f:2d:
10:3f:30:f0:8a:df:96:ba:98:dd:c9:a5:97:8f:da:a2:cf:b7:
2b:c6:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:05 2024 by rpki-client on console-ams.rpki-client.org