Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RHW1i_xzGK54cngjlzpgSA162Jo.roa
File: RHW1i_xzGK54cngjlzpgSA162Jo.roa (raw, json)
Hash identifier: fxpR+tUQ1nhEVfmlrblRzhXqW7eaHhAQutnTMy/uSDA=
Subject key identifier: 44:75:B5:8B:FC:73:18:AE:78:72:78:23:97:3A:60:48:0D:7A:D8:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01910E6FF8741B342FE84AB187C7A8471615
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RHW1i_xzGK54cngjlzpgSA162Jo.roa
Signing time: Thu 01 Aug 2024 14:55:04 +0000
ROA not before: Thu 01 Aug 2024 14:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216150
IP address blocks: 77.90.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:6f:f8:74:1b:34:2f:e8:4a:b1:87:c7:a8:47:16:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 1 14:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4475b58bfc7318ae78727823973a60480d7ad89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:62:a4:5b:53:63:83:1c:43:2d:fa:b5:f1:
fd:75:34:4d:97:b7:14:5a:da:d5:54:f4:b9:28:21:
3a:34:9a:0b:16:cc:35:14:76:b3:0c:1b:e7:f6:bc:
a2:f1:63:b2:18:cc:c6:6b:75:d8:36:2f:59:3c:75:
5b:73:a6:f7:df:3d:99:d5:3e:db:75:6e:d7:bb:25:
cb:e7:e1:42:3b:c9:6a:68:a5:8f:82:1e:74:21:a9:
8d:f6:f0:63:d2:7d:92:82:da:cf:3c:fe:12:82:7e:
46:ea:c7:f6:7e:ab:58:bc:23:51:6d:ca:b1:eb:3d:
66:c6:90:09:57:df:eb:09:5d:2d:14:74:4e:3a:b6:
8e:9a:35:ab:c8:af:3a:ce:51:8b:50:4e:c7:49:89:
5f:a6:71:62:ce:6a:f3:62:37:4f:7b:63:72:6a:b6:
f8:56:ee:13:69:f6:b1:99:49:c0:22:2d:d4:05:47:
e2:a9:8b:b3:ee:ac:46:0f:d5:8b:c0:a0:e3:f6:ce:
73:f3:4c:e1:8a:42:6d:89:73:b2:01:fb:3b:b8:12:
21:3a:a2:90:1e:16:cb:7a:48:33:cc:3a:ff:fb:33:
37:9d:0e:f7:28:9f:af:04:bc:e3:b2:a4:0a:66:df:
5b:54:d2:9b:71:a1:0a:29:0e:39:6e:f6:62:5d:4e:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:75:B5:8B:FC:73:18:AE:78:72:78:23:97:3A:60:48:0D:7A:D8:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RHW1i_xzGK54cngjlzpgSA162Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.49.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e0:f8:a0:ac:1a:63:c0:54:ae:bf:cd:df:74:7c:39:7f:93:
46:76:6f:c6:79:ac:59:cb:ba:13:9d:0b:93:7c:65:7f:08:c1:
9e:f2:d8:a8:bc:b2:c6:b8:98:c8:c2:50:c2:95:14:37:d4:98:
82:ef:d2:c5:e4:9e:74:49:9d:8b:53:0d:ab:df:fa:df:0e:51:
4d:cd:32:78:00:f6:08:d3:06:b3:32:f4:30:fe:cf:b4:1e:d0:
52:7c:79:45:1d:46:7e:c9:df:de:14:2e:82:ee:c0:79:6e:4d:
5f:71:ae:73:e9:94:5b:70:db:47:fa:91:3c:fa:05:8a:91:08:
ae:e6:80:a9:c8:df:22:69:79:90:71:8c:35:2b:18:f0:24:5b:
db:7d:6e:c7:5d:8b:e8:fc:55:22:ff:ef:9b:91:d0:90:14:9a:
9c:de:df:02:b9:55:6b:c7:b5:31:14:15:dc:05:f0:92:10:76:
b5:34:0e:6e:0a:d0:e4:15:11:c7:eb:c6:c2:ff:f2:7d:05:26:
65:84:b3:a8:31:0a:04:ac:26:fd:58:ba:1d:8a:28:3b:a1:34:
02:3b:40:cd:44:7f:ff:e6:6b:47:10:d7:a5:01:8b:d3:27:c1:
d7:51:b6:1a:81:3b:eb:82:af:cb:f7:66:08:4e:4a:26:be:c7:
85:b4:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org