Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NDshPRPSuDJDgKPAkhtzUcdJO3Y.roa
File: NDshPRPSuDJDgKPAkhtzUcdJO3Y.roa (raw, json)
Hash identifier: H5BweYNWEm88McT53p9JFq1lqeDTLjt4iwijPh/9NWA=
Subject key identifier: 34:3B:21:3D:13:D2:B8:32:43:80:A3:C0:92:1B:73:51:C7:49:3B:76
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 018CC94E39EF0481859C5E5C359EBD50DF68
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NDshPRPSuDJDgKPAkhtzUcdJO3Y.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42154
IP address blocks: 77.87.76.0/24 maxlen: 24
77.87.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:39:ef:04:81:85:9c:5e:5c:35:9e:bd:50:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=343b213d13d2b8324380a3c0921b7351c7493b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:74:6d:68:16:27:8b:8f:02:f7:19:b1:96:
79:29:61:9c:e9:73:f7:8f:ba:cd:52:10:d6:62:47:
74:79:6f:26:40:49:42:9b:c4:89:01:e2:82:14:bf:
ef:e1:b4:51:9e:30:d0:0b:5a:e7:df:1a:9d:21:74:
fd:00:40:c2:63:af:0d:46:d9:63:dc:75:bd:33:7a:
5f:e0:e8:96:05:04:52:ae:5f:bb:5a:79:bd:2b:d6:
67:02:cb:34:8c:d9:aa:ab:78:4b:9b:b8:39:19:0b:
fa:65:b7:e4:6d:66:a0:e0:50:0b:a2:ae:42:62:cf:
ab:e7:07:20:5b:ca:2d:74:68:0c:4a:56:4b:65:2c:
6f:1f:6e:ca:87:e4:48:99:89:64:3d:c5:0a:12:f3:
03:29:ea:93:72:ec:df:2d:7f:6c:18:d6:56:21:06:
7a:2c:f8:75:3e:a8:85:4c:a2:6e:0b:93:d0:b3:3d:
9f:65:66:2e:b3:1f:8c:f2:94:06:5a:8d:e8:ef:8a:
74:7f:6c:d9:25:23:3d:0f:55:3f:d0:5b:cd:5f:54:
1b:5f:2b:36:19:04:1d:46:0b:13:5a:2e:b0:5a:5b:
40:ac:e6:7a:9b:70:88:f2:89:ab:de:0e:f0:41:65:
ba:25:74:26:96:54:3c:15:92:5b:cb:40:b7:05:57:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:21:3D:13:D2:B8:32:43:80:A3:C0:92:1B:73:51:C7:49:3B:76
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NDshPRPSuDJDgKPAkhtzUcdJO3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.76.0/24
77.87.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:54:bd:e3:d7:6f:06:30:a7:92:58:e9:79:df:17:3f:b7:25:
66:72:3d:99:9b:71:0e:c9:b5:e0:dc:21:65:5a:24:3f:55:bc:
6a:24:d2:4a:7f:02:92:53:90:49:b2:f2:d4:b8:10:3a:1c:57:
d6:eb:83:bf:90:e7:60:4b:1c:74:1b:a5:d5:c1:1b:39:1d:ce:
2f:99:b7:08:31:46:ae:4a:ca:b8:d8:b7:08:4e:e2:b7:6f:e2:
ec:64:91:97:32:de:aa:19:66:b2:be:14:16:e9:21:59:60:be:
35:ac:8e:ba:dd:58:de:14:71:60:14:04:2d:c2:ce:ca:f6:1c:
2b:97:4c:31:26:26:80:6f:2d:a3:d0:16:80:e1:f6:ee:d8:a6:
7b:23:b7:d7:86:2e:08:81:ea:6e:01:ec:05:65:3b:76:d8:51:
9b:60:c4:a8:03:45:af:9a:c3:ba:26:a4:09:91:dc:2f:e2:da:
29:2b:0c:ce:55:7b:b5:b0:45:95:cd:d3:07:91:8a:88:27:f0:
95:37:11:4f:f5:be:45:b4:1b:88:23:1c:1c:a0:a1:e3:f0:4f:
4b:62:56:ca:8b:05:c0:42:36:d9:22:36:3a:49:70:6e:6f:50:
f0:7b:06:e8:58:55:e9:90:13:04:40:10:5b:0a:e6:75:f1:e0:
8b:15:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:49 2024 by rpki-client on console-fra.rpki-client.org