Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RSVqcXPMa5fafjGDEqlEMoSuNM.roa
File: 2RSVqcXPMa5fafjGDEqlEMoSuNM.roa (raw, json)
Hash identifier: hG6V0lpcJ8fFt+kZbnmCxOZcw3l1/6y4oGHuPyp4tjQ=
Subject key identifier: D9:14:95:A9:C5:CF:31:AE:5F:69:F8:C6:0C:4A:A5:10:CA:12:B8:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018FCEB1C44C7B2089C1CCFDD4F189BD525D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RSVqcXPMa5fafjGDEqlEMoSuNM.roa
Signing time: Fri 31 May 2024 12:48:27 +0000
ROA not before: Fri 31 May 2024 12:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:b1:c4:4c:7b:20:89:c1:cc:fd:d4:f1:89:bd:52:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 31 12:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d91495a9c5cf31ae5f69f8c60c4aa510ca12b8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:8b:58:43:cc:b3:f2:72:64:df:4e:6e:87:
21:4a:de:2d:35:d3:f5:31:0b:67:a4:60:37:50:e1:
33:af:b5:b0:08:e2:10:a0:eb:4b:02:17:50:67:87:
8d:b6:98:f7:32:42:03:d0:81:08:9a:d9:d8:a2:1d:
e5:bc:eb:d9:d2:ff:e3:13:b7:6e:4f:ab:70:86:e1:
c5:98:e3:d2:f5:19:f7:d1:46:0a:8b:91:2d:60:4c:
1e:d6:c4:32:29:c3:ae:c9:3a:99:49:b6:71:94:38:
0c:e1:8b:dd:eb:95:06:2c:52:c1:72:15:a7:b7:06:
86:8b:06:17:42:c7:5c:d3:1b:b8:11:9d:c0:fb:2b:
0d:70:4f:c8:3a:01:f7:e7:33:0c:97:b1:ec:04:23:
06:88:a6:1a:81:98:b6:d6:60:04:73:7e:2e:5b:96:
03:a5:e6:75:e6:8c:f3:28:19:b9:cf:8a:5e:55:8f:
0c:a3:1c:e2:e1:f4:9c:36:14:97:0c:75:88:8f:98:
eb:e3:91:fb:a7:57:fb:2d:59:43:22:dd:df:94:5f:
51:9f:be:b0:36:89:ed:fd:e6:a1:13:c1:36:bf:2f:
92:f0:4a:28:53:32:96:6b:0a:21:ba:e2:03:27:f8:
b4:f6:1f:db:8a:6f:4f:50:a9:fc:c5:9e:94:61:86:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:95:A9:C5:CF:31:AE:5F:69:F8:C6:0C:4A:A5:10:CA:12:B8:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RSVqcXPMa5fafjGDEqlEMoSuNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
af:08:38:d6:c1:47:9d:61:09:fe:f9:26:de:92:f7:b9:39:e2:
df:63:e1:81:c4:be:ed:38:de:2c:d0:26:e4:54:88:b2:99:8a:
95:98:ff:4c:13:f9:17:89:56:eb:57:7a:9a:cd:f7:a4:16:8a:
4c:a3:58:89:eb:56:c8:57:71:77:18:dc:e2:f1:5c:0d:9e:e4:
98:93:05:de:c2:39:9e:85:11:a6:c8:0d:50:44:5f:3b:fd:1f:
65:c8:05:3f:43:2d:cf:aa:d0:9c:ba:30:4d:06:3c:9b:38:e2:
35:0f:fc:c8:cb:13:73:55:27:60:c1:16:ab:b5:31:bc:bd:bf:
25:57:96:11:68:b8:47:ce:9a:d9:0e:fb:13:ef:15:24:4e:5a:
31:47:da:31:5b:b2:99:a5:11:68:09:9f:da:76:a2:6e:f1:c4:
0b:65:c5:bf:9c:52:0e:79:36:5a:f9:61:2f:8e:46:3d:87:82:
bc:df:93:41:67:8f:34:de:2e:48:17:92:3f:4f:ca:69:53:be:
67:0a:42:fb:55:c1:06:1f:5e:ea:b7:e0:16:90:bc:e8:ce:1c:
55:91:28:05:b5:13:76:f5:03:5b:25:f1:07:71:99:ef:af:cb:
0a:57:7b:e9:3b:18:20:4d:ec:da:8d:7c:06:61:d8:50:dc:32:
5f:f3:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:58:40 2024 by rpki-client on console-fra.rpki-client.org