Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/h1JFA_uwmWaT12isAe4avsiF9AQ.roa
File: h1JFA_uwmWaT12isAe4avsiF9AQ.roa (raw, json)
Hash identifier: 0Q8zoa0e87uEe4d/RhjCmZqxxulS11HQz89hBoDUdM4=
Subject key identifier: 87:52:45:03:FB:B0:99:66:93:D7:68:AC:01:EE:1A:BE:C8:85:F4:04
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 018CC492344F86D2EAB08F6C2EA72424E77C
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/h1JFA_uwmWaT12isAe4avsiF9AQ.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20750
IP address blocks: 77.76.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:34:4f:86:d2:ea:b0:8f:6c:2e:a7:24:24:e7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87524503fbb0996693d768ac01ee1abec885f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:42:cc:66:c5:99:e1:33:91:bd:d6:b2:5c:
d2:c7:f4:36:77:cd:51:13:91:ea:03:3c:d6:7b:d2:
c9:9d:48:0c:ef:9f:d8:6a:4b:e9:b8:68:c4:83:6a:
ac:f1:83:2e:22:bc:29:bf:26:be:5f:86:15:5e:94:
45:73:19:51:7d:57:f2:af:e6:a8:fd:b7:f8:ac:c3:
fa:6d:2b:1a:6f:7e:fe:12:c3:91:be:77:65:fe:8b:
2a:5e:4f:99:58:bc:8e:ee:64:dd:29:94:b8:1c:e8:
76:01:e2:35:6b:bb:08:d3:c4:a6:61:48:38:e6:60:
6f:91:73:6c:bf:14:b6:30:50:01:07:e0:4c:99:11:
96:7d:ad:6b:f9:75:94:77:3c:25:08:50:8f:26:17:
21:e5:7d:62:d3:c2:99:c8:29:29:a9:62:19:34:73:
ed:d3:14:9e:cf:18:2c:a3:47:08:6d:b1:d1:9a:c3:
45:6d:ac:61:b4:f2:51:a9:52:38:b0:5f:95:38:45:
ed:67:64:98:82:75:a2:4b:6f:4d:65:2e:85:4e:1a:
08:e2:93:59:92:1b:0a:e9:ee:97:0f:dc:4f:28:b1:
f4:de:73:5c:ba:a9:29:4f:e7:9c:b8:93:e1:b4:3e:
9b:8d:ef:7a:a6:92:84:69:7f:83:fa:f1:24:52:95:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:45:03:FB:B0:99:66:93:D7:68:AC:01:EE:1A:BE:C8:85:F4:04
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/h1JFA_uwmWaT12isAe4avsiF9AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:ed:db:d4:9d:e3:55:6b:54:ab:4d:a8:78:11:d3:0d:f8:
d4:1f:d8:aa:b7:57:e2:46:ef:bf:a5:11:00:ac:c4:10:12:bf:
3b:0c:f0:17:3b:c3:aa:bf:7b:d0:aa:9d:cf:60:82:6f:32:5e:
99:75:31:ee:8d:37:a7:a5:dd:ea:6c:cc:03:ed:3b:fd:45:8d:
c6:da:2f:2d:46:c8:d9:4e:f1:80:5f:ab:c9:73:d1:3b:7a:e0:
d6:d7:74:02:a8:f6:cf:86:04:59:d9:a8:8b:97:f1:20:e5:28:
bd:36:1d:d0:b9:1b:3f:26:60:5c:ad:14:f0:0c:ac:2a:19:b0:
a4:16:4c:c8:7b:89:5c:47:05:1b:bc:00:43:e1:91:bd:24:01:
24:4c:53:fc:f2:85:bc:82:ee:ed:bb:5d:1c:a4:3a:db:e6:df:
7a:8b:73:1b:1d:14:11:26:af:ee:1b:a7:90:db:08:53:a9:5d:
15:b7:2c:43:a1:94:70:42:30:89:73:73:c7:0f:ed:c0:f2:76:
75:a3:91:2f:74:cb:86:58:ab:70:ef:9c:60:e7:78:16:57:4c:
b4:cc:c4:2a:32:90:b3:57:ab:90:b9:76:cb:49:33:5c:dc:e8:
c7:45:31:59:06:af:31:ce:aa:03:26:26:90:a1:f9:d8:a4:8c:
a8:77:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:20:34 2024 by rpki-client on console-ams.rpki-client.org