Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/h1O2hZeKjjFc8cdU8FI5e0j9Bu0.roa
File: h1O2hZeKjjFc8cdU8FI5e0j9Bu0.roa (raw, json)
Hash identifier: X99JhvegVHsBHRV3lFha8j6b9bhdcjXaK4BZrNj5vso=
Subject key identifier: 87:53:B6:85:97:8A:8E:31:5C:F1:C7:54:F0:52:39:7B:48:FD:06:ED
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01900613BA20659F7CFB897E1E84422E1594
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/h1O2hZeKjjFc8cdU8FI5e0j9Bu0.roa
Signing time: Tue 11 Jun 2024 06:54:34 +0000
ROA not before: Tue 11 Jun 2024 06:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 77.111.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:13:ba:20:65:9f:7c:fb:89:7e:1e:84:42:2e:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 11 06:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8753b685978a8e315cf1c754f052397b48fd06ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:f3:06:a3:8e:80:fb:69:c6:20:22:56:aa:
fb:e0:e4:51:a5:bb:55:1a:e7:23:0f:0e:9a:b2:90:
1f:53:8d:d9:20:24:15:cd:83:9f:2e:2b:86:46:15:
7a:bf:a7:e7:67:fb:12:65:f8:c9:c8:8a:bc:6f:80:
43:df:2c:14:2e:17:1c:b4:51:6b:f1:db:4f:f7:e1:
61:b7:e1:12:20:c9:e3:76:c7:84:b1:be:46:92:7d:
bc:38:d0:6f:18:01:10:05:72:7e:ea:f3:ba:c0:20:
c6:07:65:e1:46:63:a0:71:d0:c7:ed:be:f8:1f:53:
26:4f:d9:19:d9:82:86:27:37:fa:05:b5:51:cc:79:
ba:2c:99:b0:f4:53:da:03:09:11:a1:cc:51:e2:8f:
6e:6c:47:b3:3b:ce:28:4a:0a:3c:43:ff:18:11:3f:
54:d9:e8:e1:93:41:cf:62:55:63:f5:79:2b:f2:9f:
e7:7a:9b:f9:32:f4:43:42:f7:49:21:5c:ff:5f:32:
dc:2c:00:e8:63:0d:ab:4f:bb:ef:48:af:38:f5:12:
99:b2:b5:cb:b1:92:98:2b:e7:60:aa:bf:d3:fe:4a:
f9:fd:b5:f9:9d:7f:0b:31:60:41:0d:e5:3f:c1:19:
79:43:56:09:58:87:fb:ea:0d:61:e8:6c:ce:8d:9d:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:B6:85:97:8A:8E:31:5C:F1:C7:54:F0:52:39:7B:48:FD:06:ED
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/h1O2hZeKjjFc8cdU8FI5e0j9Bu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5a:83:d7:9f:5d:dc:31:29:65:96:fd:36:7b:03:78:70:82:
67:80:10:c9:f3:b0:9a:c5:0c:bb:5f:d2:bf:15:dd:32:17:ce:
47:91:15:95:ac:6f:c1:61:3d:85:d3:8d:0f:06:53:46:f1:98:
1f:a6:63:4a:e3:f9:e4:68:92:5c:14:de:c7:2f:98:8a:51:ec:
7c:08:a5:1f:46:f3:bc:e4:6e:a0:20:87:e9:75:04:7b:6d:90:
76:83:c4:99:e5:92:a1:c8:f9:54:9d:ec:12:a9:6b:60:e1:31:
07:82:dd:37:b3:fa:48:66:fc:30:28:7f:49:c6:c8:6b:74:aa:
57:e0:a5:51:b7:b2:18:14:69:ac:a7:b5:48:50:e5:d2:56:a0:
65:f5:57:36:e0:b1:13:a6:d5:51:fb:ab:c3:56:09:bc:a2:c0:
8c:9e:3f:52:b8:c3:47:23:52:ca:84:70:b8:7c:a4:d3:64:e9:
74:c5:ab:a4:25:8e:10:74:84:95:95:a8:c8:e2:30:5e:3e:d0:
5a:c3:1c:99:67:ff:b7:25:a2:b6:c3:bc:6c:2d:d6:6a:ea:6e:
53:f9:4d:48:81:0c:03:66:a7:f9:b8:66:17:0c:f2:39:48:c9:
08:5b:79:d9:ad:98:56:e8:56:11:d8:45:f5:bd:5e:2f:b5:c4:
6b:16:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:52 2024 by rpki-client on console-ams.rpki-client.org