Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7B1ZEy5AViVSk70Q9dXKi9V6QNI.roa
File: 7B1ZEy5AViVSk70Q9dXKi9V6QNI.roa (raw, json)
Hash identifier: 41G/umC56PMHmptzzYMU+LdQHyIeI4us38NcilCPgto=
Subject key identifier: EC:1D:59:13:2E:40:56:25:52:93:BD:10:F5:D5:CA:8B:D5:7A:40:D2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01926A0869D0EC1157BF3EFEC6D99068835F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7B1ZEy5AViVSk70Q9dXKi9V6QNI.roa
Signing time: Tue 08 Oct 2024 02:49:49 +0000
ROA not before: Tue 08 Oct 2024 02:49:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215292
IP address blocks: 77.90.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:08:69:d0:ec:11:57:bf:3e:fe:c6:d9:90:68:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 8 02:49:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec1d59132e4056255293bd10f5d5ca8bd57a40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:02:28:3c:be:c3:e7:ed:a1:56:77:3b:43:
7a:88:6c:d7:a8:e0:75:da:9f:bc:bc:d6:bb:b1:9b:
e2:6d:6b:e0:8b:b8:de:16:d4:b1:a5:6f:13:5d:9e:
7c:c5:6a:2d:3c:50:b8:1c:a1:cc:0d:f0:6a:d2:a0:
09:41:13:32:9c:72:79:b9:e8:17:e5:bd:9b:ff:38:
b7:14:10:f4:45:3c:b7:f0:4b:49:59:da:7f:35:2f:
76:c8:f4:56:3f:bc:ed:b3:40:66:6a:56:7d:a5:b8:
67:34:6f:54:67:ad:66:c7:80:a3:3b:d0:04:fd:b5:
3d:1d:bc:67:96:45:53:c9:be:8c:fb:98:19:e4:e6:
b4:26:61:fd:3b:27:16:04:95:fa:9a:89:c2:61:3c:
30:f5:be:a7:0b:84:3e:b6:3e:30:00:fa:5f:1e:04:
a4:51:37:d2:25:7f:14:09:a4:33:2b:26:60:29:58:
e8:00:fa:13:c2:fa:57:66:00:a9:ae:3e:8a:7d:2e:
4b:f6:24:43:af:90:87:39:83:e4:08:99:50:de:92:
bb:26:55:a1:0c:04:34:ed:c3:c7:a1:e4:20:62:64:
7c:22:a5:c4:0c:c3:1d:69:28:bd:92:a7:05:0c:a8:
af:b2:9d:d9:5d:12:62:37:74:62:9d:2a:1a:12:ad:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:59:13:2E:40:56:25:52:93:BD:10:F5:D5:CA:8B:D5:7A:40:D2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7B1ZEy5AViVSk70Q9dXKi9V6QNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.40.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f5:06:a2:db:ea:34:54:8a:2d:8d:d0:1e:23:48:0e:b6:2c:
79:0e:c0:4e:ca:55:4f:35:c2:25:da:2c:10:1f:30:4d:aa:85:
00:0e:cc:1a:3f:1e:58:14:e8:5c:35:95:b8:97:2c:26:df:9a:
3c:c4:03:87:3a:3e:2a:d2:71:49:b6:46:c6:f0:bf:8a:6e:78:
dd:f4:94:28:07:2a:94:83:2c:b0:dd:5f:71:50:54:fb:dc:e2:
62:10:20:98:dc:65:50:ee:61:6d:23:37:f9:71:5e:73:73:7c:
68:2d:ac:6a:55:35:df:fc:8d:02:fc:4f:34:ad:ff:87:1b:74:
08:0b:42:8f:c5:3e:2d:18:bf:a6:62:86:75:91:b1:00:4a:a3:
64:cd:47:63:81:ca:83:5e:0a:8b:92:0c:3f:73:05:3d:bb:23:
37:d5:6e:11:c8:bb:29:32:79:d2:89:aa:a1:4e:b7:44:d5:91:
e2:40:ff:4f:78:de:62:0e:fb:ee:7a:6b:b1:98:3d:58:00:41:
57:36:b7:a8:7f:2a:9a:95:86:ee:e4:5f:7a:49:d6:4a:c5:7a:
e9:09:7c:f8:50:aa:b5:bd:3b:fa:c0:7d:f7:90:20:31:e0:02:
53:45:35:1e:2c:2b:6f:f5:3f:d2:27:4d:11:55:28:8f:ea:97:
40:9f:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:03 2024 by rpki-client on console-ams.rpki-client.org