Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/AHYX5wagOEiS2YEOd6_708k8Jo4.roa
File: AHYX5wagOEiS2YEOd6_708k8Jo4.roa (raw, json)
Hash identifier: PKntJvuqgZ9fHiVaSyDVeLkET053zCJU7dkTIYLdcr0=
Subject key identifier: 00:76:17:E7:06:A0:38:48:92:D9:81:0E:77:AF:FB:D3:C9:3C:26:8E
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 018CC8DF474A90B7DF94AFC4A45F56FE9C68
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/AHYX5wagOEiS2YEOd6_708k8Jo4.roa
Signing time: Tue 02 Jan 2024 06:32:05 +0000
ROA not before: Tue 02 Jan 2024 06:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31317
IP address blocks: 77.87.191.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:47:4a:90:b7:df:94:af:c4:a4:5f:56:fe:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jan 2 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=007617e706a0384892d9810e77affbd3c93c268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:da:6d:e5:70:84:33:0e:b3:45:cb:c9:b3:
03:c6:37:33:93:8b:80:17:d9:ad:dd:e3:e7:0b:fa:
6f:e9:b5:8b:c4:67:61:6c:f6:8c:bc:31:83:b2:13:
e3:9a:2a:27:be:b5:58:08:d3:d4:3b:0f:63:d8:0e:
a5:7a:67:f3:0c:66:fb:14:00:88:0f:40:8e:53:91:
67:e9:85:b9:2b:36:53:8b:68:c7:ca:38:c9:01:6f:
12:95:7d:d7:83:59:fc:72:63:28:31:51:be:91:46:
6a:d9:70:6d:2b:70:db:62:63:c6:58:bc:2b:4f:40:
c2:08:d6:f1:67:ac:ed:68:53:23:25:a4:a6:1a:9d:
b9:23:0c:ba:4a:77:e9:c5:9a:34:ea:61:ee:bb:3e:
cb:df:01:ce:52:34:32:27:0e:6d:66:cb:e7:ab:ce:
cf:72:fa:38:b3:0f:9b:94:1f:09:2d:86:76:aa:28:
40:fd:01:7b:ce:3d:68:01:7c:80:fe:d0:94:e7:b8:
af:89:8c:ff:c7:90:6e:63:17:6c:01:c9:39:18:46:
9e:32:e9:a8:26:07:0b:1e:65:4f:fc:a1:55:09:55:
5f:01:2c:c0:eb:43:38:4c:fd:a5:a2:25:32:fb:13:
56:b0:a8:9e:cc:fa:61:67:d7:e2:50:61:fa:a3:13:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:17:E7:06:A0:38:48:92:D9:81:0E:77:AF:FB:D3:C9:3C:26:8E
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/AHYX5wagOEiS2YEOd6_708k8Jo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
12:53:9b:18:17:85:e5:d0:e7:ba:a5:6f:0d:82:fe:4d:b7:bc:
a4:79:6e:fb:a6:2f:6e:5a:d8:5e:bf:d1:17:b5:5a:b8:ea:a2:
38:04:8d:00:5e:b9:3e:8b:ab:28:2c:f7:75:ce:cd:58:4e:e0:
20:51:44:44:e5:74:6b:0e:5a:d6:44:be:bb:53:db:05:67:c4:
97:28:5f:e5:62:e7:02:ac:09:69:40:43:a4:eb:fd:35:c5:af:
7a:b6:de:da:ed:a4:0d:56:07:20:77:ea:ed:22:da:33:2e:0e:
eb:53:ae:6c:78:71:1a:bf:4f:da:58:21:61:ea:1b:8f:c6:df:
39:73:d1:7f:7a:b2:86:86:b5:05:2e:c2:df:75:98:9b:4d:30:
fa:34:d1:80:c2:0a:fc:1d:11:fc:90:ee:ea:dc:89:c7:9f:06:
08:01:17:72:fa:49:01:e5:ae:09:67:22:6b:e9:e6:ac:25:01:
dc:bc:34:34:52:f5:f4:9f:c1:70:31:8f:1f:97:c0:4a:65:ab:
71:fe:7f:6c:51:fe:b6:02:13:4a:8a:43:14:e9:d6:16:a6:4a:
21:aa:c3:f6:ef:e5:2c:48:f2:15:70:c2:73:c9:a9:10:31:c4:
12:fd:69:46:15:1b:f8:04:a3:cc:a6:d0:08:4d:2d:b6:cf:14:
0c:61:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:59:47 2024 by rpki-client on console-fra.rpki-client.org