Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/euHMWtxQqg3H0AnHFO8O-KVOhhE.roa
File: euHMWtxQqg3H0AnHFO8O-KVOhhE.roa (raw, json)
Hash identifier: pXX0IRDl70nFWf1XykaBo+Rpc0wvvDMN7c42raZUyU8=
Subject key identifier: 7A:E1:CC:5A:DC:50:AA:0D:C7:D0:09:C7:14:EF:0E:F8:A5:4E:86:11
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018F67F407745D4D582E63ABDC0B66780BAA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/euHMWtxQqg3H0AnHFO8O-KVOhhE.roa
Signing time: Sat 11 May 2024 13:59:56 +0000
ROA not before: Sat 11 May 2024 13:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 77.90.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:67:f4:07:74:5d:4d:58:2e:63:ab:dc:0b:66:78:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 11 13:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae1cc5adc50aa0dc7d009c714ef0ef8a54e8611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:a4:40:af:30:b2:7c:b9:ab:39:c0:f1:18:
43:93:43:ac:a5:e5:83:8a:9f:3f:a1:a1:a9:c9:99:
2d:6b:a2:1c:84:6a:5e:d1:76:a7:ec:c7:83:7e:b0:
d8:68:9a:60:ec:a7:48:79:82:b0:59:b3:37:d3:8f:
ee:3d:9b:a6:fb:9e:05:3e:5e:8c:24:12:4e:cb:fc:
86:43:17:b2:21:37:05:95:7e:cc:d9:92:62:2e:e4:
ef:ca:db:8e:50:e7:b9:a4:e6:1e:d8:72:73:7d:2c:
50:10:63:f7:e0:9e:7f:04:dd:1d:59:f0:ee:34:c7:
48:35:90:98:77:26:99:4b:fb:8f:66:db:f5:0e:68:
e4:3e:38:56:c2:c4:1c:5b:c6:44:5d:e3:90:f5:a7:
a4:aa:ed:c3:3c:71:0e:fd:19:13:87:4f:9b:d4:60:
02:47:71:2a:94:a7:86:aa:0d:fe:00:c1:8f:38:f5:
99:74:71:6f:0e:a2:57:c8:f5:03:cc:52:f2:e5:9d:
68:29:81:cc:1b:74:48:72:ad:06:7e:ad:0a:ec:1c:
4e:9a:57:f4:7a:3f:b7:2e:44:4e:52:c2:8a:1d:e0:
82:17:cc:0c:21:83:3e:bf:06:cc:f8:d3:63:0c:ab:
61:f6:bd:5a:0e:a8:eb:d8:8b:39:53:e9:27:71:57:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:CC:5A:DC:50:AA:0D:C7:D0:09:C7:14:EF:0E:F8:A5:4E:86:11
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/euHMWtxQqg3H0AnHFO8O-KVOhhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e7:dc:89:99:57:87:7d:0c:db:4e:40:36:dd:6d:05:f8:97:
85:f1:0e:bd:1a:33:6f:34:19:ce:c0:53:e2:15:60:4c:d2:bf:
6e:a6:cc:6a:85:05:0c:2e:2f:53:ce:f3:16:2d:26:fe:a1:14:
da:4e:e8:61:34:85:c6:f3:b2:5d:15:f6:61:7f:1a:e0:ba:2f:
8d:a7:29:17:26:2e:2b:90:82:18:ee:01:77:d7:7c:e7:1d:5b:
92:4b:fe:02:4a:7e:bb:d4:8c:22:55:35:5b:a8:a9:b0:b3:03:
6f:44:6b:9b:5b:9a:e6:c7:f8:dd:a5:c2:5d:b1:34:0b:d3:fa:
8d:df:02:39:d9:59:51:bf:ba:b8:17:ef:b7:fb:27:08:28:4a:
6a:94:40:46:52:47:d4:f5:93:a0:86:30:ce:b2:13:ae:59:89:
1a:69:7a:7a:cc:85:ee:3b:b2:ae:ae:09:9c:ca:f9:11:11:d9:
93:50:a8:a5:93:dd:ae:2d:c4:fa:c6:c0:37:7e:55:1f:39:d3:
b6:9c:67:bd:72:a1:ab:54:db:88:bd:52:f9:76:a2:ad:7e:04:
c9:6b:77:05:0f:a9:67:f7:3a:60:95:40:c8:56:93:90:67:ec:
1a:cc:50:e3:7f:c2:8e:bb:92:6d:3f:64:7d:13:d2:97:d2:21:
2f:7e:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:39:46 2024 by rpki-client on console-fra.rpki-client.org