Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/A0NpMoISF_n0UVpJOdVeia3E6lI.roa
File: A0NpMoISF_n0UVpJOdVeia3E6lI.roa (raw, json)
Hash identifier: gpMm4hnzFJWfivaV1ostwv6VvAS/Z1nFuWkRniwe3p8=
Subject key identifier: 03:43:69:32:82:12:17:F9:F4:51:5A:49:39:D5:5E:89:AD:C4:EA:52
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 018CC26CFAE2748581A022BBEEEF0297A016
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/A0NpMoISF_n0UVpJOdVeia3E6lI.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212745
IP address blocks: 77.247.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fa:e2:74:85:81:a0:22:bb:ee:ef:02:97:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03436932821217f9f4515a4939d55e89adc4ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:d4:3f:12:84:41:4e:56:0a:e4:2d:e3:cf:
38:3a:15:bd:f3:4b:b1:e0:7d:54:31:c7:58:f6:5f:
5b:a7:4f:76:5c:f8:ec:4a:d7:57:87:4c:02:b6:f7:
fe:66:1b:9f:d6:c5:4e:77:da:9d:f0:93:d3:f5:9c:
7b:38:4a:66:3c:e2:1c:f6:c8:cb:e3:ee:3a:4c:85:
7a:92:e1:a7:30:38:52:a8:6b:53:06:fc:a8:f4:bc:
6d:c7:4d:11:ec:9c:f4:6a:91:cf:39:6f:a7:79:62:
21:12:b2:ae:ef:7b:f0:06:70:94:e2:b9:31:aa:b4:
f4:c0:1b:fc:5e:89:c9:fb:3d:aa:aa:97:9b:28:19:
f1:78:27:ba:81:b5:3b:40:e3:1f:c9:07:f5:32:86:
c5:0a:1d:10:34:57:01:d7:77:e4:3d:c5:00:6c:84:
ae:76:0d:75:13:1b:0d:24:64:03:48:f5:c9:2b:5b:
da:81:d2:e4:61:a5:05:2d:7f:90:93:9a:fa:c0:6f:
e2:de:ca:97:de:07:9b:fa:d0:3c:43:07:60:04:e4:
e1:ea:b2:82:a6:6a:cc:92:8d:b2:39:1e:56:8c:a9:
08:6e:97:2b:19:99:29:a1:b0:ff:5a:95:80:1c:d2:
f5:e3:fe:c3:6a:c2:62:7b:9b:a4:9b:1c:4a:9c:2c:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:69:32:82:12:17:F9:F4:51:5A:49:39:D5:5E:89:AD:C4:EA:52
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/A0NpMoISF_n0UVpJOdVeia3E6lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.193.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5e:0b:d8:02:5c:54:b1:4b:2f:b2:21:9d:40:bd:2a:15:28:
0f:c4:84:c2:32:1b:69:5d:53:08:0d:f7:65:b6:5d:3e:e4:60:
f4:6a:8e:e7:76:d0:45:fd:3a:d7:61:85:d9:02:fd:2d:f3:e3:
3c:d9:91:e3:41:5a:8e:e4:b5:f6:a9:7a:26:ac:56:18:06:15:
b9:fd:b5:f2:86:86:13:91:c4:78:74:22:53:df:94:ec:31:45:
d0:6c:c2:4f:5d:a8:d3:92:de:85:09:73:93:6b:b3:4b:87:02:
01:a2:b4:d1:1a:06:ad:af:29:08:a6:01:f9:f2:05:11:ec:e8:
47:e0:69:cb:5f:04:b2:69:b4:f4:56:2b:48:53:ee:2b:10:21:
41:24:52:5c:ca:bf:92:e2:e9:c7:a8:eb:36:f0:e0:ba:07:24:
68:96:a2:3f:02:b2:03:b8:7c:ed:fb:28:a0:90:44:e7:7c:82:
ed:78:78:69:4e:05:a6:b9:ab:c0:ff:46:45:0b:ef:e8:53:9b:
bb:9d:e9:86:42:2c:60:a6:73:b9:9e:6c:2f:0b:6a:79:f4:9a:
47:cf:20:03:7f:57:d6:ca:49:13:4b:95:3d:be:78:09:30:ff:
ea:4b:60:3e:c0:6d:83:93:20:04:c8:4b:58:2b:3b:99:6d:3a:
4d:34:af:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:59:56 2024 by rpki-client on console-ams.rpki-client.org