Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgIV8B86xUFdGz88g7iRByEuJgo.roa
File: VgIV8B86xUFdGz88g7iRByEuJgo.roa (raw, json)
Hash identifier: D1RH+Q3VjC26DdvFy422GXBPk7NO+HHzvTrVACEvOHo=
Subject key identifier: 56:02:15:F0:1F:3A:C5:41:5D:1B:3F:3C:83:B8:91:07:21:2E:26:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019373AB5C88526FD701C63EDD56C617DF40
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgIV8B86xUFdGz88g7iRByEuJgo.roa
Signing time: Thu 28 Nov 2024 16:47:10 +0000
ROA not before: Thu 28 Nov 2024 16:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214537
IP address blocks: 77.90.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:ab:5c:88:52:6f:d7:01:c6:3e:dd:56:c6:17:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 28 16:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=560215f01f3ac5415d1b3f3c83b89107212e260a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:74:33:8d:3c:2b:30:9b:4f:50:0a:a8:c0:
43:0d:00:7e:75:82:31:5e:93:07:c9:62:c9:fb:68:
34:10:eb:35:b0:8c:14:28:bd:ee:42:a3:fa:44:00:
ea:c7:49:12:d4:f0:62:0f:0d:99:ce:10:97:b7:a2:
7b:f0:eb:b0:ad:ca:51:aa:d7:6f:23:e1:fd:ac:b2:
3f:05:7a:0b:ce:d9:09:cc:f9:23:bd:3a:3f:e0:f0:
dc:47:97:c1:a7:a3:8e:a6:20:17:8d:e9:44:5e:2b:
c1:96:eb:b5:b3:96:24:7a:44:e5:ab:04:20:1b:ca:
6f:19:ac:10:0b:42:5f:f2:de:1a:e3:0b:33:93:18:
c7:88:be:5e:12:92:9c:cb:9e:ad:35:59:79:56:9c:
d0:03:72:67:1c:ed:33:d5:91:98:82:a9:42:2e:87:
85:e8:c6:17:f7:0f:3c:1b:44:5a:d8:5b:27:5f:d4:
58:2f:34:ce:68:47:a6:54:09:44:94:b7:11:5d:3a:
24:15:30:19:9f:d9:2f:e9:cc:fb:b5:71:56:a0:d6:
5a:18:85:b3:7a:1d:ae:c7:45:88:3e:2c:76:01:2f:
4d:f1:42:fd:4c:46:91:1e:c1:dd:2c:0d:66:f9:a0:
86:f4:11:ae:63:7b:83:c5:7b:05:30:53:9c:98:3e:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:02:15:F0:1F:3A:C5:41:5D:1B:3F:3C:83:B8:91:07:21:2E:26:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VgIV8B86xUFdGz88g7iRByEuJgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
00:30:02:87:52:16:23:44:0c:03:a0:3b:f3:5f:f4:2a:57:9a:
4a:f3:3f:23:4c:cd:5c:79:e6:cf:7d:98:d6:b6:6a:ac:0c:b6:
7d:34:90:42:b7:09:6e:2b:cd:aa:9b:c8:91:08:e6:7d:d1:17:
78:ab:ed:f0:98:14:ef:db:eb:47:db:ff:96:f8:c3:26:16:d4:
66:a2:00:ed:3d:b4:81:4c:c5:93:5b:5d:21:41:80:2e:97:f8:
f9:c9:af:9a:a0:34:e2:f4:e9:70:bd:cc:33:20:88:6a:08:7d:
28:d1:da:ff:0b:02:af:8b:b6:ad:50:04:a4:18:3f:3a:d1:a7:
08:e8:3a:9c:14:8a:e5:d5:05:9c:9f:56:e0:8d:76:b6:d6:7e:
f5:3f:8e:e0:0e:e2:98:6e:c6:a1:8c:5d:0b:d4:b3:58:a3:af:
01:1d:cc:0e:6f:c8:bb:22:2d:5a:0b:fa:34:74:ad:2d:72:eb:
25:31:30:9e:f5:0c:f2:82:83:13:6d:46:a3:1b:cc:f2:b3:36:
67:8f:2b:08:f1:d0:4c:18:9b:9e:11:b2:2f:c6:d1:be:0e:04:
51:0d:fd:22:98:cc:2a:0c:ee:81:3e:43:0a:2f:0c:a5:d4:15:
89:d0:42:b8:eb:0e:20:0a:45:ee:a6:5e:58:fe:52:2b:61:b5:
c9:7a:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org