Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c49OAVaGo19Inc_WrLDOwwE2T-0.roa
File: c49OAVaGo19Inc_WrLDOwwE2T-0.roa (raw, json)
Hash identifier: qbBaEzXHKjYg/ksMlycEXnxBrkbVr2OVdWVaZacmw+g=
Subject key identifier: 73:8F:4E:01:56:86:A3:5F:48:9D:CF:D6:AC:B0:CE:C3:01:36:4F:ED
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01907E61D3A9A845E6F0DB552AF0DB21938B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c49OAVaGo19Inc_WrLDOwwE2T-0.roa
Signing time: Thu 04 Jul 2024 15:34:18 +0000
ROA not before: Thu 04 Jul 2024 15:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214580
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:61:d3:a9:a8:45:e6:f0:db:55:2a:f0:db:21:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 4 15:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738f4e015686a35f489dcfd6acb0cec301364fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:55:ce:3d:a3:44:19:42:eb:e1:3b:fe:1e:
1d:0f:5b:ae:be:1e:e9:16:62:f6:a8:d6:9c:1b:2d:
98:5c:da:2d:68:83:00:41:fd:b5:f5:f6:44:1d:9f:
6e:e6:ce:f0:08:89:bd:4c:01:fd:10:f9:a2:ee:6f:
f4:1d:51:d5:32:30:8e:2c:ce:f8:70:49:80:24:57:
51:7f:04:12:2e:47:e7:fd:d4:54:b9:76:5a:6f:47:
e2:ae:52:32:37:d2:eb:a9:39:9c:08:3b:5d:19:6c:
e6:f1:93:f1:8b:56:df:86:69:b3:23:da:4f:ad:13:
70:d4:42:50:fd:15:a2:b8:11:33:07:cc:7a:3f:38:
03:be:ca:0c:11:72:0f:f1:42:0f:0c:d1:05:4b:47:
96:a1:19:c1:50:d1:b8:95:6a:34:a9:8b:1c:73:1b:
5a:08:f9:e2:1d:2a:35:2e:9f:4d:34:55:8e:4f:12:
5c:d2:de:c6:07:5a:38:4f:9a:cb:06:91:38:69:42:
3d:8d:a6:a5:66:15:aa:52:a9:2d:9a:f5:4e:cd:a8:
14:28:c6:ee:8d:81:00:a5:59:ff:97:6c:8a:fa:79:
f1:19:66:e0:f6:8e:27:76:f8:26:6f:55:8c:cd:e7:
ac:24:aa:85:65:ca:a3:13:34:74:35:3f:fc:26:51:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:4E:01:56:86:A3:5F:48:9D:CF:D6:AC:B0:CE:C3:01:36:4F:ED
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/c49OAVaGo19Inc_WrLDOwwE2T-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8e:2e:ae:a5:16:0b:47:21:3b:3f:8c:d6:13:fe:db:7d:c3:
c9:fc:0a:ff:74:a9:60:a5:48:90:84:b8:05:17:ba:86:cc:10:
56:c8:07:dd:f2:f9:b2:37:e1:65:a7:8a:9a:82:ad:37:43:bf:
74:4e:24:2d:55:72:a3:a1:6c:5c:25:80:15:ab:f6:db:0b:ca:
17:84:da:b6:8f:69:2a:24:44:3a:c9:db:c1:0e:d8:c9:c2:95:
97:9f:d2:43:fa:1b:5f:c8:98:d2:cf:c7:18:8c:9a:1f:c7:65:
1f:e5:c2:7a:ca:9e:6a:e4:e9:15:2e:f5:c2:83:35:aa:30:77:
24:d1:bd:24:0f:77:3d:9a:2e:d4:01:c8:35:57:eb:34:8c:58:
da:21:f7:6b:43:b8:9d:2b:45:2d:c1:23:e6:14:3e:19:2e:ea:
de:94:80:2c:a2:56:d1:59:19:d8:80:ea:96:5d:c8:32:58:0f:
ee:db:16:0e:1a:2a:97:d6:1e:23:b9:c7:d7:81:18:a1:61:d9:
0a:eb:7e:ef:f1:45:59:6b:0e:a6:4c:56:be:53:c1:89:b4:bf:
ed:86:05:70:57:f2:b0:10:49:43:f8:68:20:50:51:d4:52:26:
5c:bd:24:26:5f:23:33:de:6b:59:51:35:09:be:4a:6b:3f:2d:
58:a5:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org