Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/77fCQXFHZVitYIExo_zxFaMXs8g.roa
File: 77fCQXFHZVitYIExo_zxFaMXs8g.roa (raw, json)
Hash identifier: +jsDonXfR7d3gwUqjsiRhrPNQBR5xRW8RRWq4FesIvE=
Subject key identifier: EF:B7:C2:41:71:47:65:58:AD:60:81:31:A3:FC:F1:15:A3:17:B3:C8
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 01926BF4671033B7AB77E34151B82C006D11
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/77fCQXFHZVitYIExo_zxFaMXs8g.roa
Signing time: Tue 08 Oct 2024 11:47:12 +0000
ROA not before: Tue 08 Oct 2024 11:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12406
IP address blocks: 93.177.124.0/24 maxlen: 24
185.179.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:f4:67:10:33:b7:ab:77:e3:41:51:b8:2c:00:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Oct 8 11:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb7c24171476558ad608131a3fcf115a317b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:df:e1:da:b1:84:34:d2:49:df:93:72:d4:
62:ab:b2:f4:d8:31:a9:28:52:9b:4f:a9:45:df:15:
34:db:d0:19:02:fb:44:22:d7:7c:fa:4f:33:7d:19:
93:40:55:14:18:c5:6a:ac:c4:c9:e8:22:0d:4d:43:
aa:06:be:1c:33:4b:b1:37:13:90:3c:c0:4f:fe:04:
c2:19:c8:08:10:bd:1f:07:4b:c3:f3:2b:06:17:06:
b9:b2:2f:06:9b:53:19:80:40:c3:83:68:f7:8a:01:
a2:88:e2:77:52:fc:d4:ad:aa:47:00:7b:19:f2:00:
24:16:31:e0:93:e6:13:5c:2e:2f:ec:5e:8e:27:1b:
38:78:1d:02:bb:1c:08:3c:0e:8c:eb:ee:05:1d:5f:
50:3f:65:08:09:d9:fb:4e:38:29:fa:70:ad:22:a6:
37:bc:ca:7b:b8:63:6f:0a:dc:a7:88:68:aa:14:8e:
3d:1b:00:4c:87:06:b3:f0:8d:d4:0a:82:10:80:77:
c5:36:99:cd:74:34:3b:30:b2:05:2e:b7:f5:55:a4:
e1:88:27:ec:bf:ac:b6:7c:47:47:8a:de:1d:b7:99:
2f:24:a7:6c:38:53:71:80:15:d4:ec:4c:5a:f6:c3:
31:a5:41:08:0c:c5:bc:24:ea:88:c3:b5:e7:0d:7c:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:C2:41:71:47:65:58:AD:60:81:31:A3:FC:F1:15:A3:17:B3:C8
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/77fCQXFHZVitYIExo_zxFaMXs8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.124.0/24
185.179.82.0/23
Signature Algorithm: sha256WithRSAEncryption
52:63:fb:59:77:fc:1f:6c:e6:d0:6a:91:4c:67:7f:19:e5:da:
da:bb:a6:e6:89:19:67:0c:b5:65:81:84:c2:f9:78:5f:55:23:
4d:38:d9:08:a6:94:07:87:4d:14:5f:0a:91:07:a5:d9:3c:d3:
3e:34:95:38:cf:f3:df:99:41:ae:31:a9:39:b7:7d:96:82:42:
72:2d:2a:4f:21:46:5c:1a:b8:ef:cb:5f:e1:98:c4:fa:72:2a:
00:1a:80:b0:d2:38:cd:32:72:2b:d8:01:27:0e:17:8b:f4:9f:
6a:b6:af:74:57:33:dc:28:60:26:39:0d:c6:0b:c9:6f:72:cd:
4c:d8:9a:7d:29:b4:3b:57:db:a3:e0:14:ee:ba:1b:c6:c3:d5:
43:a6:b3:24:56:27:7f:0e:6e:9f:5b:a8:36:ae:39:45:a5:21:
7c:6b:35:16:ca:bc:a9:66:55:1f:99:eb:8d:ed:f8:f1:9b:4c:
a8:db:1a:62:cd:33:c1:b7:40:d0:74:03:8d:80:40:b0:96:88:
25:ea:92:6d:ca:e0:5f:bc:fa:cc:4f:a9:06:f9:74:f1:a6:c9:
0f:e6:4e:ec:c4:9d:bf:3c:f9:ca:1a:bd:d1:e4:4f:5a:0c:e4:
1b:79:cd:16:d4:b5:63:ef:0f:8a:3d:fd:cf:bd:4b:71:3d:76:
e2:6a:26:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJr9GcQM7erd+NBUbgsAG0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz
NzhjNzMwHhcNMjQxMDA4MTE0NzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmI3YzI0MTcxNDc2NTU4YWQ2MDgxMzFhM2ZjZjExNWEzMTdiM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Lf4dqxhDTSSd+TctRiq7L02DGp
KFKbT6lF3xU029AZAvtEItd8+k8zfRmTQFUUGMVqrMTJ6CINTUOqBr4cM0uxNxOQ
PMBP/gTCGcgIEL0fB0vD8ysGFwa5si8Gm1MZgEDDg2j3igGiiOJ3UvzUrapHAHsZ
8gAkFjHgk+YTXC4v7F6OJxs4eB0CuxwIPA6M6+4FHV9QP2UICdn7Tjgp+nCtIqY3
vMp7uGNvCtyniGiqFI49GwBMhwaz8I3UCoIQgHfFNpnNdDQ7MLIFLrf1VaThiCfs
v6y2fEdHit4dt5kvJKdsOFNxgBXU7Exa9sMxpUEIDMW8JOqIw7XnDXwZVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO+3wkFxR2VYrWCBMaP88RWjF7PIMB8GA1UdIwQY
MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt
Njc3NzEzNTlhMmIzLzEvNzdmQ1FYRkhaVml0WUlFeG9fenhGYU1YczhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz
LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbF8AwQB
ubNSMA0GCSqGSIb3DQEBCwUAA4IBAQBSY/tZd/wfbObQapFMZ38Z5drau6bmiRln
DLVlgYTC+XhfVSNNONkIppQHh00UXwqRB6XZPNM+NJU4z/PfmUGuMak5t32WgkJy
LSpPIUZcGrjvy1/hmMT6cioAGoCw0jjNMnIr2AEnDheL9J9qtq90VzPcKGAmOQ3G
C8lvcs1M2Jp9KbQ7V9uj4BTuuhvGw9VDprMkVid/Dm6fW6g2rjlFpSF8azUWyryp
ZlUfmeuN7fjxm0yo2xpizTPBt0DQdAONgECwlogl6pJtyuBfvPrMT6kG+XTxpskP
5k7sxJ2/PPnKGr3R5E9aDOQbec0W1LVj7w+KPf3PvUtxPXbiaia1
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:55 2024 by rpki-client on console-fra.rpki-client.org