Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4YayZvZ2F0zhtf7pkRBU7nys4Oo.roa
File: 4YayZvZ2F0zhtf7pkRBU7nys4Oo.roa (raw, json)
Hash identifier: T3pKbL2m1QjNU0dbbc6zaZvuKR6PmLguMmr2M7gt8jg=
Subject key identifier: E1:86:B2:66:F6:76:17:4C:E1:B5:FE:E9:91:10:54:EE:7C:AC:E0:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01917645ABC60C5D49E7E5649999379D89EB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4YayZvZ2F0zhtf7pkRBU7nys4Oo.roa
Signing time: Wed 21 Aug 2024 18:49:23 +0000
ROA not before: Wed 21 Aug 2024 18:49:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58087
IP address blocks: 77.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:45:ab:c6:0c:5d:49:e7:e5:64:99:99:37:9d:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 21 18:49:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e186b266f676174ce1b5fee9911054ee7cace0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:15:83:14:11:5a:97:6d:d3:72:c3:2a:4e:
da:e2:88:7b:95:6c:d7:86:2c:28:2b:87:70:fd:31:
ff:42:4e:8b:2c:3c:44:4a:b9:f1:c1:c5:79:d1:08:
37:d5:d7:ad:75:d1:c4:00:f9:c9:4a:7c:b1:15:a6:
e4:4a:e9:af:c1:22:cf:99:45:3f:e0:30:36:50:36:
69:a8:5f:c2:ac:d2:8b:98:bd:32:fd:62:cf:f6:47:
c2:12:ab:64:17:4e:1c:3e:02:ac:4d:bc:52:66:bd:
1e:f6:1a:cd:9d:2c:1e:af:79:2e:65:98:4f:40:1e:
7a:39:cf:eb:ba:87:1d:7c:38:30:52:dd:06:db:3f:
13:fe:07:7e:3f:66:e0:fc:7e:53:e5:72:09:33:19:
ce:67:82:a4:2c:68:7e:b0:c7:cb:eb:9c:68:f1:2c:
0b:e3:c9:bf:98:65:00:3b:22:a6:12:55:5d:22:70:
7e:50:51:a9:e7:c4:4a:5d:53:0d:5c:f7:4e:a2:63:
7f:bc:f5:48:3d:e3:ec:92:19:68:35:d7:04:94:e7:
b8:6e:53:c7:c0:a5:b4:bb:50:e0:f5:e2:a1:cf:ad:
62:79:5a:4e:24:e2:77:65:75:b8:fa:f6:42:57:7f:
3e:ec:e0:28:7b:f4:c8:0e:81:9e:ae:ac:e2:52:15:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:B2:66:F6:76:17:4C:E1:B5:FE:E9:91:10:54:EE:7C:AC:E0:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4YayZvZ2F0zhtf7pkRBU7nys4Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:64:66:71:76:ba:c0:1d:32:34:57:f9:e3:3a:00:66:a9:
75:41:70:7a:6a:ec:8e:35:61:fc:35:7c:02:8a:ee:c4:89:1f:
4a:66:ba:2b:dc:ef:f4:47:dc:16:47:2b:ec:5c:51:97:d7:09:
99:3f:13:eb:1d:7e:85:df:d7:35:65:90:1c:d9:f2:0c:2e:3e:
79:6d:71:55:5c:99:be:c9:7f:5c:dd:e9:0d:82:cb:7f:c6:52:
14:82:32:36:06:6f:c3:d7:2b:d9:6b:ad:11:8a:a0:b3:34:b2:
02:11:a6:04:00:ab:ce:42:ac:86:98:95:e8:96:13:57:b5:f1:
65:dd:e9:f7:8e:6a:a0:0a:b0:b6:8a:95:a4:5e:a8:96:2b:d5:
4a:d1:e5:39:8c:8a:3b:bd:dc:7a:8b:8e:3b:f8:07:ff:bb:fc:
f3:1d:2b:46:96:93:f6:e6:de:44:3d:7e:4c:2a:a4:eb:24:a4:
e7:b1:f1:38:81:c9:5e:56:ce:27:4a:24:af:00:94:5c:be:47:
ad:68:9e:f4:c7:82:20:63:2f:95:cd:c8:8f:e9:bf:d2:9f:c4:
ac:b5:11:7d:57:56:bb:b1:c0:2f:3f:30:0c:44:38:b7:d0:df:
b6:7a:ed:45:e7:e8:c5:f9:65:ad:5d:fa:8f:da:54:65:81:4e:
39:4b:f0:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZF2RavGDF1J5+VkmZk3nYnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwODIxMTg0OTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTg2YjI2NmY2NzYxNzRjZTFiNWZlZTk5MTEwNTRlZTdjYWNlMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6IVgxQRWpdt03LDKk7a4oh7lWzX
hiwoK4dw/TH/Qk6LLDxESrnxwcV50Qg31detddHEAPnJSnyxFabkSumvwSLPmUU/
4DA2UDZpqF/CrNKLmL0y/WLP9kfCEqtkF04cPgKsTbxSZr0e9hrNnSwer3kuZZhP
QB56Oc/ruocdfDgwUt0G2z8T/gd+P2bg/H5T5XIJMxnOZ4KkLGh+sMfL65xo8SwL
48m/mGUAOyKmElVdInB+UFGp58RKXVMNXPdOomN/vPVIPePskhloNdcElOe4blPH
wKW0u1Dg9eKhz61ieVpOJOJ3ZXW4+vZCV38+7OAoe/TIDoGerqziUhV88wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGGsmb2dhdM4bX+6ZEQVO58rODqMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNFlheVp2WjJGMHpodGY3cGtSQlU3bnlzNE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVo7MA0G
CSqGSIb3DQEBCwUAA4IBAQBhaGRmcXa6wB0yNFf54zoAZql1QXB6auyONWH8NXwC
iu7EiR9KZror3O/0R9wWRyvsXFGX1wmZPxPrHX6F39c1ZZAc2fIMLj55bXFVXJm+
yX9c3ekNgst/xlIUgjI2Bm/D1yvZa60RiqCzNLICEaYEAKvOQqyGmJXolhNXtfFl
3en3jmqgCrC2ipWkXqiWK9VK0eU5jIo7vdx6i447+Af/u/zzHStGlpP25t5EPX5M
KqTrJKTnsfE4gcleVs4nSiSvAJRcvketaJ70x4IgYy+VzciP6b/Sn8SstRF9V1a7
scAvPzAMRDi30N+2eu1F5+jF+WWtXfqP2lRlgU45S/D8
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:00:16 2024 by rpki-client on console-fra.rpki-client.org