Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7S3wtSggbqwuCtu0mqLMrY-Xgo.roa
File: W7S3wtSggbqwuCtu0mqLMrY-Xgo.roa (raw, json)
Hash identifier: ustI4ds7s+caE3fQYnrWOPtCn0BK69siGEpF4Nr5soU=
Subject key identifier: 5B:B4:B7:C2:D4:A0:81:BA:B0:B8:2B:6E:D2:6A:8B:32:B6:3E:5E:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018FA008328A178DED56321BA5777D003A42
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7S3wtSggbqwuCtu0mqLMrY-Xgo.roa
Signing time: Wed 22 May 2024 11:20:42 +0000
ROA not before: Wed 22 May 2024 11:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214915
IP address blocks: 77.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:08:32:8a:17:8d:ed:56:32:1b:a5:77:7d:00:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 11:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bb4b7c2d4a081bab0b82b6ed26a8b32b63e5e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:4d:bf:86:65:3b:ff:ec:b6:82:16:6a:9d:
44:0d:2d:dd:13:7a:1c:a9:6b:ac:fb:f8:7e:cf:66:
77:6e:38:50:bc:35:32:41:de:f0:7d:a0:16:f6:45:
ed:ec:fa:fc:a8:14:f3:d8:10:6b:8e:dc:09:1b:bb:
f1:c6:69:8c:ec:28:d1:15:74:94:fd:19:05:39:0b:
a2:59:b0:95:80:7b:a3:3d:87:e1:53:47:d3:29:c3:
ab:ee:3c:8a:c5:10:23:4d:25:23:38:20:66:19:28:
17:6a:77:48:b4:b6:44:bf:00:93:a6:0d:54:f0:d8:
e6:b5:7b:5e:d2:87:87:27:12:bf:5e:78:a1:4a:08:
8b:bd:e5:35:3d:bb:87:b1:ea:8c:6a:f0:82:f5:44:
67:51:f1:ac:51:3d:ba:df:34:42:0e:2d:94:f1:65:
fa:31:69:ef:83:51:58:9e:53:bb:5a:07:17:d6:40:
20:9b:30:56:34:40:3d:4e:62:5b:bc:0d:55:7f:64:
93:5f:4f:3f:9f:79:3d:c2:20:2c:d5:01:81:9d:51:
de:b3:37:45:ff:82:88:98:3a:7d:1b:7a:e0:a1:e7:
75:d7:82:06:2c:e9:4e:14:cb:af:e6:ef:06:70:38:
b3:b1:f4:2b:a7:49:5a:ea:a3:fd:b9:17:a6:ef:9e:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:B7:C2:D4:A0:81:BA:B0:B8:2B:6E:D2:6A:8B:32:B6:3E:5E:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W7S3wtSggbqwuCtu0mqLMrY-Xgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:00:ca:b7:10:0a:01:8e:3d:d8:aa:0b:6c:f2:53:a5:43:26:
81:a8:3e:3d:c4:56:c0:0a:05:36:77:fb:78:0b:49:cb:a5:ca:
42:45:c5:f8:e8:16:f9:a7:18:00:8d:ff:ba:aa:8c:07:6d:45:
e4:9f:d1:b0:f3:7a:54:ce:8d:d1:c9:bc:b1:5c:db:cd:e4:b7:
f2:84:3e:16:df:dc:9f:4d:f9:82:62:fe:46:fe:9d:67:35:ac:
4d:5d:69:b3:7d:75:e9:35:c8:c4:52:6b:e1:72:79:f5:b9:b7:
62:93:29:77:ab:56:24:fe:c6:f0:ab:cb:32:20:08:f4:d6:e8:
82:ca:6e:f1:8c:c3:09:84:9e:37:58:4f:5e:e0:98:d2:07:04:
fe:06:b5:c3:14:74:6b:16:74:c4:3b:54:64:3b:a4:fa:f4:42:
19:f6:11:9d:21:db:af:e5:d1:28:bc:67:b5:82:18:d5:86:f3:
c9:2e:bb:04:7c:17:75:81:96:30:b2:be:76:6b:86:c6:0b:9b:
16:7c:12:a2:39:6b:26:19:0c:9e:63:eb:fc:fa:d9:e8:11:db:
66:51:8e:c0:dd:93:dd:ce:12:fc:ed:40:a6:dc:43:a2:2c:3b:
25:5b:be:f2:20:5a:d4:0a:61:2f:b2:03:e6:cf:41:f0:b5:50:
8f:5c:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:40:59 2024 by rpki-client on console-ams.rpki-client.org