Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fHKHzARruXSzXRPy8Wwo9BqqA4Y.roa
File: fHKHzARruXSzXRPy8Wwo9BqqA4Y.roa (raw, json)
Hash identifier: gNIVIq+LGDcwZeXhluQBUtbMwDFBAgbM5SZtBZq6nqI=
Subject key identifier: 7C:72:87:CC:04:6B:B9:74:B3:5D:13:F2:F1:6C:28:F4:1A:AA:03:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192B3AD6100EA807F95D2CD53092B660D55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fHKHzARruXSzXRPy8Wwo9BqqA4Y.roa
Signing time: Tue 22 Oct 2024 10:02:17 +0000
ROA not before: Tue 22 Oct 2024 10:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58087
IP address blocks: 77.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:ad:61:00:ea:80:7f:95:d2:cd:53:09:2b:66:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 22 10:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c7287cc046bb974b35d13f2f16c28f41aaa0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:9b:c7:fa:ff:53:91:96:16:2f:4b:d0:28:
f4:a7:98:a8:1e:98:56:4a:b2:2c:b6:9c:c2:e2:12:
a4:8a:97:2d:90:43:4a:de:f1:67:30:08:cf:e2:9a:
a7:51:a2:ea:d1:ea:7a:0e:c7:10:d3:da:94:8a:a1:
7e:66:ce:e2:6f:41:9f:75:54:9b:7b:c1:0b:25:33:
7e:63:d6:e1:bb:33:00:14:af:53:64:2e:ce:6d:a5:
c2:0d:b3:aa:82:34:39:4b:3e:f4:ea:71:92:0c:af:
4d:96:d6:01:f9:ba:bd:61:2f:2e:50:05:45:86:b2:
53:93:d4:5e:aa:d9:86:a4:c5:71:93:c7:57:02:a3:
bb:fa:7e:2b:d5:90:51:85:24:f3:63:3c:f7:37:2e:
a6:66:9c:ae:76:0c:82:7d:f1:55:d3:9f:2f:03:20:
86:e9:2b:c8:16:b1:bd:10:1e:60:66:c0:44:d7:1f:
83:d2:ee:f2:f9:11:9c:3f:ec:b1:88:8c:41:74:ff:
93:da:fd:0b:1b:30:4a:38:0d:e0:0a:3f:6e:be:d1:
58:3b:17:3d:0a:bb:15:3c:a6:77:a7:95:a4:70:d6:
bb:95:df:44:a9:76:f5:38:a7:f3:57:a6:1b:85:5f:
31:f7:54:dd:9e:36:5a:1d:13:e4:f9:ba:36:22:f9:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:87:CC:04:6B:B9:74:B3:5D:13:F2:F1:6C:28:F4:1A:AA:03:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fHKHzARruXSzXRPy8Wwo9BqqA4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:17:93:e3:e2:12:fe:45:ec:f7:af:48:d4:b7:01:42:33:55:
e6:2a:71:93:b6:db:b8:1d:8c:e7:63:ac:b2:c7:4b:0c:8f:24:
93:25:80:dc:45:1b:0d:71:a4:94:7b:95:df:08:d9:19:f7:84:
6f:13:08:13:d1:19:53:79:30:d5:a3:80:e6:0b:7a:f6:05:85:
86:2d:2a:1a:6b:eb:fc:8b:72:a7:e4:b4:19:60:1c:b8:fd:5f:
42:36:cd:23:9f:57:c0:ff:b0:fa:e2:18:e7:4b:d4:1e:cd:c5:
c8:72:6c:8f:f1:bd:cc:7d:52:2b:94:91:ed:07:4b:b1:4d:9e:
70:80:e0:0d:c1:2a:9f:5b:4f:2c:0a:a0:9b:2f:3c:f0:11:22:
7c:7d:de:34:b3:10:f5:fa:6d:9b:dd:36:32:b1:81:7b:7d:75:
23:42:02:60:89:da:22:de:dd:8b:e4:a6:18:3b:bb:df:d7:c6:
f4:16:c3:82:ce:86:9d:10:79:04:78:34:16:03:8d:de:e4:47:
2b:87:32:02:ab:81:91:7b:a0:bc:50:98:f7:28:4b:ed:af:0a:
71:58:8d:6c:2f:31:fb:54:64:18:1d:96:c4:25:64:8c:48:90:
6d:04:47:de:94:d0:6f:62:fd:e4:b4:81:66:0d:d5:d2:b6:16:
a1:1f:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org