Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R3KH7yn2cAeKshySr5td6YwxWdQ.roa
File: R3KH7yn2cAeKshySr5td6YwxWdQ.roa (raw, json)
Hash identifier: 2hXV3T0yN/LKvfrrt9PMby9OIUlwl1qq4SldS1+3yzI=
Subject key identifier: 47:72:87:EF:29:F6:70:07:8A:B2:1C:92:AF:9B:5D:E9:8C:31:59:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190AE9B0AAB74C916F9FC3B68E694A44A89
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R3KH7yn2cAeKshySr5td6YwxWdQ.roa
Signing time: Sun 14 Jul 2024 00:18:34 +0000
ROA not before: Sun 14 Jul 2024 00:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204223
IP address blocks: 77.90.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ae:9b:0a:ab:74:c9:16:f9:fc:3b:68:e6:94:a4:4a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 00:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=477287ef29f670078ab21c92af9b5de98c3159d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:b4:d1:4b:40:7e:7a:ed:0e:58:cc:6f:37:
61:a5:7d:7a:75:ef:e7:3f:46:f7:a4:3e:4b:48:86:
da:1c:bf:26:3b:09:3c:e1:f5:76:30:69:bc:fb:5f:
25:b6:e2:74:49:66:44:3f:c6:9b:fd:81:f5:07:e3:
f0:bc:bb:2d:76:f8:64:01:42:d6:95:42:b9:0b:4d:
ba:1d:a5:8c:f4:6d:00:4a:32:4c:35:a3:2d:7c:55:
83:22:e6:78:f7:14:c9:bc:15:ea:b8:4b:97:53:73:
9d:c3:d7:ba:90:59:41:f0:a7:ec:67:49:1b:34:4a:
09:16:b7:d0:b8:80:6a:30:3c:d2:d3:2c:80:fe:07:
cc:5f:ab:47:74:d8:d5:03:bf:cf:bb:eb:54:e2:e5:
21:0e:5f:7c:1c:ea:84:0e:cd:ca:43:70:66:ef:b8:
c7:72:6e:6e:0d:5a:cc:e2:6d:d5:17:f0:19:98:fb:
1e:da:4b:4c:19:e1:c4:b4:79:ae:8b:ac:b1:5e:c7:
88:b3:ed:a2:d1:25:9a:ee:0a:4f:44:f4:b8:bd:3f:
d9:52:4b:e1:d2:8b:5a:6d:11:7c:f4:5d:43:dc:e0:
c0:c3:76:e4:01:11:3f:e6:d8:22:b4:e3:49:27:8b:
79:32:f4:e2:f8:86:5d:24:32:66:49:9f:ef:d9:cb:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:87:EF:29:F6:70:07:8A:B2:1C:92:AF:9B:5D:E9:8C:31:59:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R3KH7yn2cAeKshySr5td6YwxWdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.26.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b4:d6:ea:f0:04:4b:13:eb:b6:49:08:2b:57:4a:92:e3:45:
67:88:11:e2:59:be:40:b6:e5:6f:43:71:25:ad:3f:7f:bd:aa:
3d:86:6e:fe:fa:f3:f0:3c:86:8a:46:07:b3:4b:f6:36:1e:72:
ad:5d:de:0f:37:21:56:2e:c3:66:a2:49:b1:33:f3:d9:7a:58:
e0:e9:8a:67:35:ed:4f:ff:f2:3c:f0:4d:44:f6:4b:a3:26:1e:
53:14:ca:d0:c6:0a:ed:e6:ca:77:47:4b:f9:90:ab:64:d3:fc:
b6:aa:7f:5a:51:34:c9:95:e9:94:2d:ab:ee:62:1c:f2:93:cd:
a7:09:4b:b1:d8:94:36:20:ba:6c:9f:73:67:c0:a1:ef:66:d5:
a8:52:11:e4:23:63:60:55:03:ed:bf:b0:d4:d4:75:3b:4f:ee:
92:a0:1a:5a:c9:4d:48:76:26:85:e7:ea:2f:37:db:22:f7:bb:
9e:95:1c:cf:cf:c8:bc:6c:d8:1b:bb:6b:8a:a6:85:be:3f:69:
59:ea:01:1f:8d:2d:3f:63:e4:d3:16:28:17:88:ef:8b:c4:1a:
4d:99:80:4d:e7:20:df:61:e4:a7:79:4d:89:8b:54:ee:6c:68:
ca:0a:4d:6a:2c:9f:57:ce:9e:d0:46:ea:ed:7d:9b:4d:a0:8f:
84:40:fc:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCumwqrdMkW+fw7aOaUpEqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNzE0MDAxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzcyODdlZjI5ZjY3MDA3OGFiMjFjOTJhZjliNWRlOThjMzE1OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3200UtAfnrtDljMbzdhpX16de/n
P0b3pD5LSIbaHL8mOwk84fV2MGm8+18ltuJ0SWZEP8ab/YH1B+PwvLstdvhkAULW
lUK5C026HaWM9G0ASjJMNaMtfFWDIuZ49xTJvBXquEuXU3Odw9e6kFlB8KfsZ0kb
NEoJFrfQuIBqMDzS0yyA/gfMX6tHdNjVA7/Pu+tU4uUhDl98HOqEDs3KQ3Bm77jH
cm5uDVrM4m3VF/AZmPse2ktMGeHEtHmui6yxXseIs+2i0SWa7gpPRPS4vT/ZUkvh
0otabRF89F1D3ODAw3bkARE/5tgitONJJ4t5MvTi+IZdJDJmSZ/v2cs6+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdyh+8p9nAHirIckq+bXemMMVnUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUjNLSDd5bjJjQWVLc2h5U3I1dGQ2WXd4V2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoaMA0G
CSqGSIb3DQEBCwUAA4IBAQBBtNbq8ARLE+u2SQgrV0qS40VniBHiWb5AtuVvQ3El
rT9/vao9hm7++vPwPIaKRgezS/Y2HnKtXd4PNyFWLsNmokmxM/PZeljg6YpnNe1P
//I88E1E9kujJh5TFMrQxgrt5sp3R0v5kKtk0/y2qn9aUTTJlemULavuYhzyk82n
CUux2JQ2ILpsn3NnwKHvZtWoUhHkI2NgVQPtv7DU1HU7T+6SoBpayU1IdiaF5+ov
N9si97uelRzPz8i8bNgbu2uKpoW+P2lZ6gEfjS0/Y+TTFigXiO+LxBpNmYBN5yDf
YeSneU2Ji1TubGjKCk1qLJ9Xzp7QRurtfZtNoI+EQPyX
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org