Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bfjfcgvR2njEW35zvEt0eMijnOE.roa
File: bfjfcgvR2njEW35zvEt0eMijnOE.roa (raw, json)
Hash identifier: kBBCzhXAiCvbAzvZ84T1buQcc+OTKpTK+hPtf9SUyG0=
Subject key identifier: 6D:F8:DF:72:0B:D1:DA:78:C4:5B:7E:73:BC:4B:74:78:C8:A3:9C:E1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190D1DE3426C138A9E6F81BBB351411A959
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bfjfcgvR2njEW35zvEt0eMijnOE.roa
Signing time: Sat 20 Jul 2024 20:38:38 +0000
ROA not before: Sat 20 Jul 2024 20:38:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215569
IP address blocks: 77.90.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d1:de:34:26:c1:38:a9:e6:f8:1b:bb:35:14:11:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 20:38:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6df8df720bd1da78c45b7e73bc4b7478c8a39ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:7f:3c:3a:11:97:3e:36:41:28:d8:e6:0a:
4d:90:d8:45:fe:8e:95:37:04:5d:19:1e:66:6d:27:
2b:1b:f8:c8:48:ae:8f:f9:07:66:31:ff:27:d3:89:
39:65:14:0a:09:31:e7:83:72:ce:92:4d:08:38:39:
5c:94:63:d5:c1:40:9e:cf:f3:39:c1:40:1b:53:9d:
08:c9:e0:50:ca:e1:b4:40:ed:ed:07:d5:1a:b3:91:
7f:2e:b6:a1:a5:5e:bd:cf:c4:19:67:b4:03:db:7a:
8a:ef:44:6e:2b:2b:e9:92:43:51:4a:ec:0c:6e:b3:
23:c5:30:08:92:34:0c:ac:dc:d9:96:f8:34:8c:4b:
ab:41:89:a8:86:e0:cf:b9:96:9c:19:5b:e2:ed:b1:
c1:eb:aa:b2:f7:9d:b8:88:c8:84:b5:95:4a:2b:3a:
d9:ed:5f:3b:80:be:1f:71:9f:50:cb:4d:24:8d:0e:
d6:23:8d:14:3e:2d:df:c2:32:c8:9f:3c:ac:0f:e1:
45:27:14:9d:1d:89:0f:00:f5:c2:45:43:e6:76:c2:
8a:6e:55:4d:87:a1:81:ac:83:bf:89:0d:76:57:5e:
f3:33:7b:54:67:b2:78:90:ff:bf:6d:f2:39:98:4e:
cb:df:a8:d6:8e:e2:3d:2e:32:6e:a1:48:f3:35:18:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:DF:72:0B:D1:DA:78:C4:5B:7E:73:BC:4B:74:78:C8:A3:9C:E1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bfjfcgvR2njEW35zvEt0eMijnOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:35:56:53:dd:f0:90:e7:d5:9e:29:00:33:a6:b9:d0:ee:c8:
65:19:b0:27:f8:06:28:00:1e:ad:ca:4a:33:d3:d6:46:ae:3a:
c3:3b:ab:bf:e1:d2:c0:5d:63:56:99:15:97:43:cd:c0:01:43:
c3:20:f1:56:d7:41:f3:04:7e:9b:db:ba:10:fa:47:c7:76:3a:
a6:6c:2a:6b:b5:b6:1b:01:f0:6b:c7:2c:96:e9:91:73:a9:ca:
00:c9:1b:2c:89:37:12:69:c8:42:36:8b:b3:4d:4b:bb:3e:8c:
4d:77:be:0d:88:77:45:4a:b6:0a:14:2c:f6:1b:c5:03:bd:e1:
58:1e:36:75:d1:e0:60:ae:1a:0c:52:20:d0:42:9f:bd:22:68:
e9:a2:6d:c8:8c:07:a2:ca:29:72:b9:ac:e0:ab:d0:be:23:bb:
8c:5a:a1:b8:72:7c:9f:e9:4d:c4:18:ad:a7:97:e4:bd:b9:23:
a0:f2:27:d3:41:6e:76:49:15:bc:a0:d2:3d:8a:60:a6:1b:de:
ce:db:8e:c7:81:f4:30:f2:cc:05:ee:bd:8d:c4:43:6c:8e:f9:
ca:26:90:55:ec:13:53:35:88:35:b8:be:b6:4e:5f:ca:56:63:
50:3a:9b:d6:2e:52:1b:b1:fa:fc:5f:86:dc:3c:41:2e:cd:f7:
20:ab:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:29:29 2024 by rpki-client on console-fra.rpki-client.org