Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/Gd9zrMKhWcrrz8uM38OUcznUALI.roa
File: Gd9zrMKhWcrrz8uM38OUcznUALI.roa (raw, json)
Hash identifier: sWSRqP2WCQOulXf5uyZidLaM7OpO68MBX/DuoB7mvVw=
Subject key identifier: 19:DF:73:AC:C2:A1:59:CA:EB:CF:CB:8C:DF:C3:94:73:39:D4:00:B2
Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial: 018CC7957B6925880B5BA048EAFF41FC97C6
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/Gd9zrMKhWcrrz8uM38OUcznUALI.roa
Signing time: Tue 02 Jan 2024 00:31:51 +0000
ROA not before: Tue 02 Jan 2024 00:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202080
IP address blocks: 77.247.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:7b:69:25:88:0b:5b:a0:48:ea:ff:41:fc:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Validity
Not Before: Jan 2 00:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19df73acc2a159caebcfcb8cdfc3947339d400b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:03:92:f0:0f:80:f1:b0:6b:81:c0:73:72:
59:da:48:aa:02:d2:85:33:08:0d:82:14:32:62:db:
fe:b6:0f:a9:06:9f:6b:bb:b4:c6:3f:b1:eb:6e:8b:
15:cc:71:67:f7:e4:7d:7b:f3:48:0f:82:c9:18:c1:
fd:c4:fb:69:01:f9:81:f3:6e:bc:59:a7:7c:b8:4f:
a9:5b:82:02:af:aa:72:d8:bd:f4:eb:57:3f:2f:6a:
d3:c0:49:39:d6:3e:38:68:09:2a:0c:be:85:5d:39:
69:c7:07:76:af:b3:38:d0:d4:f6:7a:f2:60:68:42:
01:dc:ee:41:ce:76:14:31:de:f0:a3:be:43:8a:4a:
db:14:49:ce:49:2d:42:91:12:8c:b7:b8:52:f3:06:
0a:b8:a7:fd:f1:97:8f:72:5e:f3:af:48:bf:c4:db:
03:26:04:63:d1:22:ba:f9:5e:f1:8c:d4:58:13:40:
df:11:0e:f3:a9:0b:61:15:0e:b6:92:2f:2e:5e:2f:
b7:4a:cc:1a:54:bb:37:88:59:86:21:6e:3e:e8:c7:
8b:49:2e:7d:2a:f5:56:85:28:40:22:f6:4f:16:95:
d8:5c:47:c2:f9:5a:88:ee:7e:b1:f8:d4:9e:ef:c0:
72:2f:b8:c5:6a:39:29:8b:d4:79:fc:71:4a:aa:7c:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:73:AC:C2:A1:59:CA:EB:CF:CB:8C:DF:C3:94:73:39:D4:00:B2
X509v3 Authority Key Identifier:
keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/Gd9zrMKhWcrrz8uM38OUcznUALI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e5:c8:14:82:c1:da:ce:9d:f7:b7:9e:f9:ea:d7:47:6a:70:
97:e1:ad:ee:3e:73:0f:6e:45:8e:39:f0:fa:52:5f:28:7e:60:
59:6f:9f:90:f3:50:b7:8b:26:5f:d6:47:35:25:a2:9a:3a:7a:
ff:d3:5b:07:c7:8f:64:2b:6d:88:03:4c:43:4a:11:c3:ef:db:
b4:b0:5d:c4:d3:c8:91:a4:82:5c:31:17:9a:07:43:a2:ce:71:
a3:d7:78:d0:c2:3b:c6:d4:e5:ed:90:40:c3:68:07:d9:4a:7b:
da:1b:05:98:e2:ce:bf:23:59:e9:ca:67:a1:f7:eb:49:ed:81:
87:a0:ce:1a:a1:7b:07:11:70:d8:52:f8:22:e3:29:75:ca:e2:
4a:5c:02:f3:f2:52:f1:40:5f:29:92:a1:5f:56:54:f4:f3:d6:
f0:cd:f4:64:db:d4:4a:c3:3c:c2:71:9a:03:2c:53:ec:a6:a5:
03:2d:fa:f0:cc:09:fc:fb:51:1f:f9:c0:16:d5:22:5f:b4:c3:
ca:4c:ed:96:04:2f:3a:1a:6e:12:58:7c:3c:1e:50:fc:92:1d:
37:db:5e:01:f6:b6:41:e6:6e:1a:9b:a5:1f:0e:8d:9c:c7:d0:
3e:56:1c:1f:82:c6:42:e2:27:40:85:92:54:92:0c:6a:51:ba:
23:ba:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:41 2024 by rpki-client on console-ams.rpki-client.org