Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6VGrbkEn4xkDppVd6Ha0m17Exag.roa
File: 6VGrbkEn4xkDppVd6Ha0m17Exag.roa (raw, json)
Hash identifier: 8ltyeerHJYgGAh3X/7dBVbDOxMCiont5JWfCDk653D8=
Subject key identifier: E9:51:AB:6E:41:27:E3:19:03:A6:95:5D:E8:76:B4:9B:5E:C4:C5:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193ACFCB4A7BC4C7A5FEE15F137797D3454
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6VGrbkEn4xkDppVd6Ha0m17Exag.roa
Signing time: Mon 09 Dec 2024 19:54:22 +0000
ROA not before: Mon 09 Dec 2024 19:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209824
IP address blocks: 77.90.1.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:fc:b4:a7:bc:4c:7a:5f:ee:15:f1:37:79:7d:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 9 19:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e951ab6e4127e31903a6955de876b49b5ec4c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:7a:e5:f0:b3:46:9a:ea:45:64:af:00:eb:
99:54:4a:a3:8e:35:0c:27:c4:93:c0:3f:ba:5a:e2:
ba:2e:b0:73:28:73:43:cb:07:75:25:e6:5d:ba:b0:
87:9b:be:a9:d8:b7:25:8f:40:16:f4:a4:1e:f4:d8:
4b:6a:ed:1d:13:bf:f1:d6:c7:f2:f7:c6:c2:3f:4d:
f2:f8:0c:d8:5c:53:95:c5:52:11:ba:d8:79:b6:c5:
aa:48:2c:0c:7b:8c:6a:9e:db:d3:e7:ce:41:0e:c7:
c1:2a:14:50:2a:c0:fb:b6:32:33:90:e9:66:3e:3d:
c1:24:e4:20:16:72:c5:dc:77:c4:70:98:9b:ac:89:
39:9a:fd:26:40:7d:2a:66:8e:3d:1c:62:45:7c:8e:
7f:0b:5a:e3:9a:9a:2f:9f:d1:5b:4c:1c:7a:39:59:
ab:d9:e8:55:70:f3:92:2c:32:3a:89:9f:e4:dc:47:
3c:11:b8:9a:8d:00:00:b1:12:ad:4d:12:43:fe:32:
b4:16:88:ec:cd:12:43:91:43:67:1b:39:eb:fa:82:
38:1d:54:d9:cf:62:07:da:ef:1e:36:31:a1:bb:2c:
f5:5a:22:30:c0:7b:1c:57:6d:f1:8e:56:8e:8b:45:
2b:59:34:46:7f:96:10:66:00:9e:8e:1e:4c:b8:a4:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:AB:6E:41:27:E3:19:03:A6:95:5D:E8:76:B4:9B:5E:C4:C5:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6VGrbkEn4xkDppVd6Ha0m17Exag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.1.0/24
77.90.29.0/24
Signature Algorithm: sha256WithRSAEncryption
26:50:6c:0f:9c:0e:49:ee:5e:49:cc:84:44:fc:7a:7e:6b:cf:
7b:b9:31:32:fa:d8:6e:aa:51:ef:ae:65:87:62:55:47:61:c5:
79:c9:c0:d1:e0:63:e4:ec:60:1f:ec:ad:8c:03:25:9f:80:81:
94:01:a2:10:4a:e3:9a:51:ca:61:30:7c:43:72:5f:c5:68:d9:
77:e2:38:63:2e:f4:60:b5:1e:23:cb:0f:e2:00:6d:10:44:f5:
f1:2a:1d:ea:00:76:56:93:35:31:0b:5e:7f:a5:9f:64:f8:de:
38:80:9f:71:68:5d:eb:2b:e9:f1:d7:3d:da:04:a2:fe:cc:3d:
31:2a:71:b4:41:81:d8:2a:7d:09:f1:57:5e:42:b2:ff:b7:2c:
8e:4d:fe:d8:3b:6c:02:7a:53:d1:4e:24:cd:b9:e6:b2:c5:6e:
53:50:34:4c:22:d6:5c:b4:1a:ef:b2:c4:f7:d4:19:44:6b:92:
5f:a4:5f:79:18:87:ff:d3:1f:a2:94:dc:c8:4c:35:3e:02:5a:
0e:51:51:bd:b0:cf:e6:89:7c:c4:cd:2a:e3:f0:d4:b2:49:20:
c4:f0:51:45:86:e8:91:62:f2:2b:c4:ba:7c:66:0c:d1:ff:06:
a9:79:18:fc:27:dc:79:8d:21:2f:69:40:02:22:4f:93:72:9b:
39:7e:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:20:41 2024 by rpki-client on console-fra.rpki-client.org