Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AXgJ496uaiP_9stt7YSWhcucXQg.roa
File: AXgJ496uaiP_9stt7YSWhcucXQg.roa (raw, json)
Hash identifier: Fbg9OyKS1hxWW6g+lm7PK4qnLtNl2/feGRkoB3oN4I0=
Subject key identifier: 01:78:09:E3:DE:AE:6A:23:FF:F6:CB:6D:ED:84:96:85:CB:9C:5D:08
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FF96C7CD7A6F6521CBA1668DDE4A52384
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AXgJ496uaiP_9stt7YSWhcucXQg.roa
Signing time: Sat 08 Jun 2024 19:56:27 +0000
ROA not before: Sat 08 Jun 2024 19:56:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 77.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:6c:7c:d7:a6:f6:52:1c:ba:16:68:dd:e4:a5:23:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 8 19:56:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=017809e3deae6a23fff6cb6ded849685cb9c5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:ea:49:27:8c:5e:5b:75:03:90:e9:f4:0a:
27:d5:20:f6:a3:99:fd:ea:17:3c:c7:fc:98:21:6f:
14:c3:d6:f5:4d:8d:cf:3e:68:3f:61:20:6c:70:e1:
0c:0f:ab:7e:af:e8:b3:ef:0f:1a:bf:36:4e:82:24:
f5:4f:07:5c:6d:14:e7:65:e3:d3:81:9f:e4:c6:3e:
35:62:7b:89:04:71:0c:2c:77:86:3e:c0:88:2a:b5:
76:ee:c8:ca:59:d5:bc:ab:75:b8:81:27:3f:ea:f0:
60:db:b2:f3:bc:0b:91:56:db:87:6b:e5:9e:cd:10:
84:4b:a6:ba:0b:fe:60:30:be:6c:18:f7:c4:52:11:
3f:8a:31:a1:96:27:df:da:81:39:43:19:56:75:70:
5b:fd:7e:47:83:5c:cd:9a:95:56:c9:0a:b2:22:83:
d0:df:44:d2:b3:cd:68:09:cb:42:be:89:18:b8:7d:
79:2d:09:d1:02:f5:2f:da:01:c9:72:cb:a6:ee:91:
69:c2:ec:47:61:8e:89:6a:ef:92:f7:f4:be:2a:01:
74:73:f1:f3:dd:e2:89:41:5b:3a:76:f0:aa:47:77:
25:4c:69:52:a9:36:15:1e:27:92:36:83:8d:30:35:
ba:24:73:ab:3b:07:9e:d4:4f:72:aa:bd:4e:b4:b4:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:09:E3:DE:AE:6A:23:FF:F6:CB:6D:ED:84:96:85:CB:9C:5D:08
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AXgJ496uaiP_9stt7YSWhcucXQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ce:dd:ea:63:c7:a0:eb:6e:2b:b4:f7:4a:a6:f0:ad:02:66:
28:00:7e:a2:83:02:27:28:4f:9a:57:0a:52:ac:f2:e2:9e:fc:
56:d9:91:dc:93:b8:dd:75:d6:ac:31:f1:83:7c:3a:21:02:89:
a7:b3:1f:b4:45:fc:13:37:8d:36:d2:a6:7f:e9:6a:be:95:e1:
37:cb:e1:68:8d:fe:f5:90:3d:71:8c:61:8d:7f:26:49:49:88:
7e:42:53:de:b0:88:57:9b:45:84:db:b6:11:f2:8d:b5:0d:38:
cd:be:b0:7b:80:c9:94:e9:42:87:84:25:ce:86:71:31:08:a9:
7a:16:3d:87:97:0b:cf:92:65:7b:51:5b:ea:b5:45:b2:0d:d2:
09:d9:ed:77:e9:f3:ab:b4:47:ef:7f:e8:48:b0:8a:9d:04:24:
a5:e1:7e:a3:e2:1d:9a:30:51:f9:a6:23:c1:5a:69:6d:57:4f:
99:d8:94:4f:07:8a:0d:89:ae:d0:9c:81:49:6f:0e:bd:3e:48:
db:99:20:f6:8b:ed:f1:1c:a0:bb:2b:f9:b1:ff:7e:00:9d:bc:
56:d6:39:98:2b:5d:42:a5:ec:0e:9a:69:3c:52:6d:ac:7f:79:
58:7e:06:d9:75:dd:48:2f:cc:34:dc:c6:15:12:12:63:b7:a7:
b4:3a:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:27 2024 by rpki-client on console-ams.rpki-client.org