Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ioi9F4ambCcfxMHqkPUOr6i8uOM.roa
File: Ioi9F4ambCcfxMHqkPUOr6i8uOM.roa (raw, json)
Hash identifier: 2C33i6yQG0SZY13AYuU+7nLwSni+M7mK011EjbcRWxU=
Subject key identifier: 22:88:BD:17:86:A6:6C:27:1F:C4:C1:EA:90:F5:0E:AF:A8:BC:B8:E3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019000545F295CF9663C7D66C98B16747EF2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ioi9F4ambCcfxMHqkPUOr6i8uOM.roa
Signing time: Mon 10 Jun 2024 04:07:27 +0000
ROA not before: Mon 10 Jun 2024 04:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:54:5f:29:5c:f9:66:3c:7d:66:c9:8b:16:74:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 04:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2288bd1786a66c271fc4c1ea90f50eafa8bcb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:ab:7c:13:6a:c5:2e:03:01:60:32:9a:4d:
23:6b:9a:75:3a:bf:e8:a5:fe:6e:31:f1:ce:ea:d6:
c0:f2:9d:8f:59:b0:39:61:fa:a7:54:8f:e0:8a:8a:
6f:27:00:fc:d7:00:0e:56:c0:1a:71:00:6b:3e:33:
fd:8e:a7:8f:2f:2c:a7:49:1e:4c:8b:fe:4d:0f:cb:
87:4c:8c:a6:2a:f0:5b:88:31:d9:bf:a5:f5:bd:d7:
5d:ba:68:88:81:4f:47:12:48:32:6c:78:06:34:28:
71:14:57:fc:7b:99:ec:93:80:f8:cc:e1:4a:f5:04:
e4:73:27:62:15:d7:e2:c9:d6:be:5d:08:12:a2:7d:
a6:11:98:88:c5:38:68:95:fa:d1:2c:5d:20:0d:f3:
92:7e:b6:c9:8e:10:b1:7e:09:e5:8f:e6:f6:d8:ef:
df:49:19:db:23:0b:b8:ca:51:21:c3:5a:a6:3b:6e:
f6:62:05:5f:1e:a4:fa:a2:ea:31:2b:a0:44:6f:8a:
a2:cb:1d:c4:fc:e8:89:3d:9f:2d:74:ae:fb:2d:20:
73:4a:7e:9c:d0:06:23:64:2f:28:98:65:a4:00:78:
14:a1:26:c2:23:90:e1:7f:c0:1f:c6:79:47:1f:2a:
d2:51:fd:a9:ff:bf:3e:ba:f5:e0:85:42:4e:57:1c:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:BD:17:86:A6:6C:27:1F:C4:C1:EA:90:F5:0E:AF:A8:BC:B8:E3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ioi9F4ambCcfxMHqkPUOr6i8uOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:40:f3:91:fc:2a:a3:64:22:9c:ed:b1:2e:d8:6a:fa:a6:cd:
7f:03:d9:9e:c8:30:08:9e:79:f3:9d:21:91:43:d8:c9:69:cd:
c9:77:52:c1:b5:39:cd:aa:4a:27:e8:47:c4:4a:a5:18:97:f6:
90:f0:3e:c4:16:eb:c2:68:c7:3b:d3:f8:72:2d:97:49:11:e3:
17:bd:9d:0b:9f:41:b6:c3:6f:75:de:04:e2:3c:97:ff:62:ca:
9f:38:5d:45:0c:42:ff:35:cf:d8:75:25:8e:5b:d3:5b:86:94:
45:81:aa:45:4d:99:2a:fa:9d:93:71:0b:67:ab:6b:89:3f:62:
4e:e3:3a:ac:05:04:f7:84:56:80:1a:b1:69:23:bb:cb:69:b4:
fe:9e:14:e7:cb:9f:20:36:0c:2d:2b:71:3f:f3:8a:ff:4b:e8:
9d:55:d3:d2:f2:0f:19:99:f6:c9:44:f7:94:ad:1f:46:8c:aa:
35:9b:e9:e1:ac:40:e7:27:4d:88:49:2f:42:b8:61:7e:29:0c:
19:08:89:d0:82:26:2f:d8:0c:00:37:6c:8b:76:ae:9d:79:74:
6e:ad:1e:07:b1:12:95:f8:3c:c2:07:fe:ec:b5:09:07:e6:42:
4f:d6:3e:b4:9c:20:d0:94:8c:0c:3e:85:92:f1:e5:9e:69:07:
3c:22:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 10:01:01 2024 by rpki-client on console-ams.rpki-client.org