Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/AYKmICNNQoWFwq5kwkjZ0CAQDzw.roa
File: AYKmICNNQoWFwq5kwkjZ0CAQDzw.roa (raw, json)
Hash identifier: 3hgBfZMhyQuUgq9+hUV/SUitqOMEsmRwH1wj0W8t+K8=
Subject key identifier: 01:82:A6:20:23:4D:42:85:85:C2:AE:64:C2:48:D9:D0:20:10:0F:3C
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 018CC8DE47F3671411291E0BF26ADAE14D4A
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/AYKmICNNQoWFwq5kwkjZ0CAQDzw.roa
Signing time: Tue 02 Jan 2024 06:30:59 +0000
ROA not before: Tue 02 Jan 2024 06:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44194
IP address blocks: 77.87.51.0/24 maxlen: 24
77.87.48.0/24 maxlen: 24
77.87.49.0/24 maxlen: 24
77.87.50.0/24 maxlen: 24
77.87.54.0/24 maxlen: 24
77.87.55.0/24 maxlen: 24
77.87.52.0/24 maxlen: 24
77.87.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:47:f3:67:14:11:29:1e:0b:f2:6a:da:e1:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Jan 2 06:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0182a620234d428585c2ae64c248d9d020100f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:06:46:4c:6d:55:43:72:92:13:76:1a:75:
7f:fe:53:06:d6:93:2e:d8:dc:40:a6:01:a6:17:6b:
e6:2d:cf:d3:03:93:8a:28:1d:c1:e5:3a:aa:00:6f:
f5:c8:07:d4:39:09:5a:b8:b8:65:82:b9:90:a0:81:
ab:a6:97:d1:3f:40:ee:1b:ad:6f:b3:63:61:97:fd:
b4:df:4f:99:7d:2c:bf:ac:a4:53:de:e7:9b:cc:0e:
bf:61:bc:c4:c3:53:c9:a6:9c:f9:6b:ec:b4:cc:2c:
73:43:2f:24:bc:cb:98:15:af:33:91:39:2d:75:70:
a4:1f:77:3b:a4:d6:aa:64:91:d5:e8:f3:27:a7:81:
1c:fa:ac:cb:65:21:26:35:7e:f3:19:3c:1e:ee:de:
c7:a0:cb:e8:54:47:63:08:b8:7c:f8:c1:60:32:e4:
4d:42:d7:f0:7f:0b:92:ec:6a:83:a2:a7:70:29:01:
9f:d9:78:ec:38:b1:4b:40:b3:11:02:fd:5d:b7:4f:
d5:e1:d3:34:69:11:c0:39:e0:fb:0a:51:b3:9e:a7:
ff:f0:3a:9c:f7:d7:72:09:5c:d4:19:98:a2:11:ee:
56:fe:b9:25:1c:f8:d8:5a:48:1e:1f:af:75:8d:f6:
22:53:63:2a:0c:d8:9b:4c:40:ee:d1:de:ef:73:11:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:A6:20:23:4D:42:85:85:C2:AE:64:C2:48:D9:D0:20:10:0F:3C
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/AYKmICNNQoWFwq5kwkjZ0CAQDzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:7e:28:53:b0:89:1f:f2:31:e4:4e:ec:cc:ef:36:c1:92:6a:
98:6b:ee:b6:3c:b6:2b:88:f7:40:cf:2e:91:27:7f:9b:24:3a:
6b:2d:cd:e7:cc:8f:c8:2c:f0:06:df:49:fd:f3:98:03:10:01:
41:74:1a:95:af:78:44:98:14:59:6b:54:5f:aa:ca:35:75:4c:
15:9c:d4:22:1d:f9:2e:12:21:41:a9:64:f3:7a:4c:2e:96:de:
3a:8e:a1:26:85:f1:0f:82:e7:57:91:62:e3:48:35:25:15:18:
ab:49:4b:e6:20:3f:5f:08:c7:53:e0:a3:07:7b:c6:ee:9d:2c:
fd:3f:c9:a8:af:60:e7:18:71:88:73:26:fc:9e:1e:3c:28:aa:
02:46:0b:d3:21:3b:43:c4:62:79:89:f3:69:24:08:30:4d:40:
89:58:1d:f5:b0:27:2b:2e:f8:5c:7a:45:b1:3e:ae:a2:3e:95:
41:ed:2f:21:65:41:e0:da:6f:7c:e4:25:8f:a9:20:6a:98:59:
b7:84:aa:94:41:04:0a:71:8d:7b:85:15:fc:e4:3d:4b:4a:db:
7f:6f:6f:a2:93:9a:3d:68:32:aa:fc:76:f9:6a:13:42:00:7a:
d2:c7:e9:0d:e0:bb:07:b4:60:7d:d8:d4:5d:44:b9:27:dc:4b:
aa:f2:ff:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3kfzZxQRKR4L8mra4U1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjY0ZGIxYTQyYWRiZTlkYzMyMjZlYmM4MGFmYmI3NWQ0
YTdmMTgwHhcNMjQwMTAyMDYzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTgyYTYyMDIzNGQ0Mjg1ODVjMmFlNjRjMjQ4ZDlkMDIwMTAwZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU4GRkxtVUNykhN2GnV//lMG1pMu
2NxApgGmF2vmLc/TA5OKKB3B5TqqAG/1yAfUOQlauLhlgrmQoIGrppfRP0DuG61v
s2Nhl/2030+ZfSy/rKRT3uebzA6/YbzEw1PJppz5a+y0zCxzQy8kvMuYFa8zkTkt
dXCkH3c7pNaqZJHV6PMnp4Ec+qzLZSEmNX7zGTwe7t7HoMvoVEdjCLh8+MFgMuRN
QtfwfwuS7GqDoqdwKQGf2XjsOLFLQLMRAv1dt0/V4dM0aRHAOeD7ClGznqf/8Dqc
99dyCVzUGZiiEe5W/rklHPjYWkgeH691jfYiU2MqDNibTEDu0d7vcxFS8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGCpiAjTUKFhcKuZMJI2dAgEA88MB8GA1UdIwQY
MBaAFFf2TbGkKtvp3DIm68gK+7ddSn8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjkt
MWU4Mjg3N2MxNDYyLzEvQVlLbUlDTk5Rb1dGd3E1a3dralowQ0FRRHp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjktMWU4Mjg3N2MxNDYy
LzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVcwMA0G
CSqGSIb3DQEBCwUAA4IBAQCgfihTsIkf8jHkTuzM7zbBkmqYa+62PLYriPdAzy6R
J3+bJDprLc3nzI/ILPAG30n985gDEAFBdBqVr3hEmBRZa1Rfqso1dUwVnNQiHfku
EiFBqWTzekwult46jqEmhfEPgudXkWLjSDUlFRirSUvmID9fCMdT4KMHe8bunSz9
P8mor2DnGHGIcyb8nh48KKoCRgvTITtDxGJ5ifNpJAgwTUCJWB31sCcrLvhcekWx
Pq6iPpVB7S8hZUHg2m985CWPqSBqmFm3hKqUQQQKcY17hRX85D1LStt/b2+ik5o9
aDKq/Hb5ahNCAHrSx+kN4LsHtGB92NRdRLkn3Euq8v99
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:57:26 2024 by rpki-client on console-ams.rpki-client.org