Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/R79mQMAmJV7QaozW8gIhZX3kq0o.roa
File: R79mQMAmJV7QaozW8gIhZX3kq0o.roa (raw, json)
Hash identifier: leew4fYlMhrwF+WUuyEc1mOYdhaYp/4kLKtNOTT2sJs=
Subject key identifier: 47:BF:66:40:C0:26:25:5E:D0:6A:8C:D6:F2:02:21:65:7D:E4:AB:4A
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01913206622A73D0A3FE945F366EF970AD6B
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/R79mQMAmJV7QaozW8gIhZX3kq0o.roa
Signing time: Thu 08 Aug 2024 12:46:04 +0000
ROA not before: Thu 08 Aug 2024 12:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46475
IP address blocks: 77.223.214.0/23 maxlen: 24
77.223.214.0/24 maxlen: 24
77.223.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:06:62:2a:73:d0:a3:fe:94:5f:36:6e:f9:70:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 8 12:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47bf6640c026255ed06a8cd6f20221657de4ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:d8:27:6c:c0:d3:50:04:ee:8e:55:ce:a7:
4b:d3:6e:db:0d:00:a5:96:b5:fd:e4:57:68:c6:8c:
21:28:21:a4:4d:8b:dc:10:58:ed:ae:05:f9:0f:e6:
92:cf:51:c9:a4:2c:a2:cd:cd:be:95:33:19:f4:ea:
15:5b:e6:bf:0b:a2:10:5d:3d:02:71:2a:3f:1f:8e:
5f:c6:4c:7d:78:d6:18:32:ce:8f:b7:d2:a9:b5:7a:
bc:77:f5:63:82:b4:ee:0f:91:c9:f2:38:17:a7:4a:
0a:a9:75:d6:98:42:3e:5b:5a:99:98:ce:ab:89:b8:
16:fe:19:0b:98:69:98:bb:27:9f:37:19:04:e4:fb:
89:68:e7:fa:e7:1e:f6:34:5a:2c:4f:06:ff:fc:6f:
10:1b:85:6e:40:8a:97:96:82:53:bd:34:8a:38:3e:
38:75:11:f0:53:02:fb:71:6a:79:89:69:4e:4e:b6:
78:c0:0a:85:51:38:ee:75:b2:e5:78:32:b7:dc:78:
10:6c:4f:94:a6:82:77:67:1d:fe:ea:37:f7:db:c4:
e8:21:85:85:47:31:fb:84:39:2d:cb:17:e3:a5:db:
a7:44:28:d2:ed:38:88:6b:36:da:8f:d1:92:96:5b:
0d:42:57:b3:01:dd:3c:a8:b4:3c:29:0e:5b:51:d2:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:66:40:C0:26:25:5E:D0:6A:8C:D6:F2:02:21:65:7D:E4:AB:4A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/R79mQMAmJV7QaozW8gIhZX3kq0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.214.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a9:73:f0:dd:d2:71:b4:2a:c1:a6:04:a6:2f:19:85:41:72:
01:ed:20:4f:48:cc:e5:0d:db:5c:db:75:4d:97:5d:15:b4:f4:
21:e0:d7:02:8c:bb:62:f2:8b:b1:25:35:88:70:1b:71:01:3d:
d6:d1:61:33:1f:43:bd:5f:5d:ba:be:40:a1:45:2b:e7:8a:0a:
15:ef:99:bf:f8:e4:75:29:f2:3a:90:13:58:1d:81:13:f2:f8:
d7:33:2f:51:62:16:74:e0:1e:3a:dc:5c:93:4e:d7:dd:33:1b:
79:8a:ab:e7:c5:75:5d:13:c9:ff:25:2a:d2:41:f0:b5:56:81:
c9:0b:af:46:29:b4:1f:1e:84:7b:4f:73:cb:05:8b:d7:9e:94:
64:c7:1b:80:0a:f0:18:be:44:1b:ae:9a:1b:ff:f0:3d:2a:12:
62:f2:76:d3:da:f9:54:cb:f1:72:01:40:57:fd:76:7f:e7:90:
e0:3e:0a:e7:72:8a:fd:a1:bf:e0:5b:06:c3:5d:df:66:7d:35:
13:5e:73:3d:d7:ff:94:d0:36:ee:b9:ea:01:15:e8:8e:75:51:
a9:8b:66:a6:05:62:a8:e4:b0:75:32:69:ef:f7:77:c4:d7:5c:
97:88:3b:4a:f0:ae:b0:21:cb:0b:27:03:0e:d5:f6:4f:97:f3:
7e:68:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:05:31 2024 by rpki-client on console-ams.rpki-client.org