Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FaCJ1RF9pBufhBrYAj0VEUN3tpU.roa
File: FaCJ1RF9pBufhBrYAj0VEUN3tpU.roa (raw, json)
Hash identifier: u+aWkM/InhLYh5xU1QXfhRlvlpNDxwLFEW6RKP6Ogzk=
Subject key identifier: 15:A0:89:D5:11:7D:A4:1B:9F:84:1A:D8:02:3D:15:11:43:77:B6:95
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192595A640CFB82392F76A3B761F03B2BF9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FaCJ1RF9pBufhBrYAj0VEUN3tpU.roa
Signing time: Fri 04 Oct 2024 21:05:48 +0000
ROA not before: Fri 04 Oct 2024 21:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209216
IP address blocks: 77.90.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:5a:64:0c:fb:82:39:2f:76:a3:b7:61:f0:3b:2b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 4 21:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a089d5117da41b9f841ad8023d15114377b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:47:3c:ed:1c:50:17:0b:f7:d4:93:42:f8:
c5:3c:3a:58:5c:c0:96:3f:cc:e5:55:f6:7a:3e:76:
af:0d:26:19:6a:75:a0:a0:24:6c:33:1f:7c:35:c1:
65:19:72:6f:7c:8d:70:cc:7d:6d:8b:f6:26:c6:cf:
ea:4a:bc:aa:90:5e:1c:54:88:b5:da:c0:63:57:68:
eb:37:7b:7e:de:48:b4:b0:dd:b0:88:75:29:68:32:
77:b8:72:0a:03:5c:1a:32:ce:31:c3:88:5c:20:e7:
7c:9b:eb:aa:d6:1d:71:23:f4:04:75:3b:43:58:61:
60:ff:25:39:1e:f2:16:70:38:28:58:25:25:00:85:
0e:d2:6c:65:c6:1a:25:39:32:32:9f:ad:66:b7:1b:
61:64:98:76:d0:56:88:43:57:f2:25:dc:09:fc:d3:
4c:9e:15:08:70:d4:eb:18:a4:7e:df:07:95:1b:c2:
e0:7d:af:dc:6c:d5:7d:ea:e7:58:06:e9:c7:58:cf:
56:22:d2:ab:1d:a5:1c:0f:e6:b7:98:e0:a6:a6:5e:
0b:ba:dd:ef:94:87:ed:06:0c:84:33:5e:4e:9f:d6:
48:98:1e:19:fd:7d:41:20:e0:b1:71:20:fa:b3:78:
4b:a4:06:05:bc:26:e3:d1:95:8b:0e:8d:d9:2b:71:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:89:D5:11:7D:A4:1B:9F:84:1A:D8:02:3D:15:11:43:77:B6:95
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FaCJ1RF9pBufhBrYAj0VEUN3tpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:be:9f:29:72:63:e0:be:5d:98:a5:e9:26:c1:42:a9:2f:24:
17:a2:85:ef:f3:ad:ef:a3:92:10:fb:c3:5a:ef:72:81:0a:e2:
34:00:2e:f8:ca:8e:83:64:b8:62:7b:5b:6f:c5:1b:37:47:d3:
6c:c7:84:b8:d3:29:59:22:00:ff:be:27:7f:e4:11:85:78:b2:
8f:19:b1:59:98:d9:5a:99:f7:96:99:3a:d2:0b:63:a3:3e:fe:
2e:f3:d6:d3:dc:ea:d3:be:ad:bb:c9:b3:ff:b2:dc:1f:20:da:
3f:85:bb:04:cc:62:d2:3f:15:84:4f:41:cd:28:a1:fc:b2:32:
31:57:01:46:cc:3e:4a:ea:5a:7f:ba:ec:3e:be:18:16:e5:d3:
32:56:87:98:26:eb:6f:27:7b:62:c0:45:a2:77:02:72:a5:71:
7a:7c:be:15:b2:6d:da:43:b4:94:54:60:a5:c7:ab:12:5a:f5:
bc:be:4a:3a:2f:e0:d3:f1:be:29:33:02:10:1c:98:72:24:55:
70:cc:d5:14:86:fa:0f:d5:16:d0:2b:82:4c:7b:0f:32:a0:20:
31:7d:07:89:20:17:f0:e2:3e:68:bd:73:b9:74:27:06:f9:aa:
37:d7:ee:22:d2:91:9d:12:eb:45:e4:b3:b6:79:4f:c8:18:c3:
17:a4:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org