Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fz44047lN50Zbv8gXOr1PautWr4.roa
File: fz44047lN50Zbv8gXOr1PautWr4.roa (raw, json)
Hash identifier: tB9lYr51KVsNRgJSpjk/vDyUc24BEEQ5q1Zus56wkI0=
Subject key identifier: 7F:3E:38:D3:8E:E5:37:9D:19:6E:FF:20:5C:EA:F5:3D:AB:AD:5A:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B2858E1A55EDAE7AAD981C58C417AD4E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fz44047lN50Zbv8gXOr1PautWr4.roa
Signing time: Mon 02 Sep 2024 11:36:22 +0000
ROA not before: Mon 02 Sep 2024 11:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214915
IP address blocks: 77.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:85:8e:1a:55:ed:ae:7a:ad:98:1c:58:c4:17:ad:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 11:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3e38d38ee5379d196eff205ceaf53dabad5abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:e0:0c:c4:78:a7:ca:a2:37:3e:d0:3c:0c:
5f:c9:a1:e9:48:a0:9e:c9:b6:2c:a0:b4:42:a5:29:
2d:66:66:85:c9:82:79:d3:bf:5b:fb:f0:e9:b9:83:
43:0c:ca:e3:8d:08:c3:2c:bc:ee:ad:e1:7b:84:4d:
ec:47:e1:09:9e:47:cb:d9:6b:96:c2:8b:b6:aa:20:
22:67:72:b8:4f:f6:4b:f1:d3:83:39:ee:c7:8a:29:
4d:cc:be:f1:11:33:e6:97:7e:71:0f:2a:35:b9:88:
d1:31:b3:4c:0a:30:ef:7d:e5:b5:05:f4:6c:dd:59:
3a:7d:f2:b9:4c:fa:f9:1e:ae:49:5b:d8:3c:d5:96:
0f:ff:f1:88:98:06:05:20:10:b4:34:e8:45:19:ac:
c8:ec:0d:7e:b5:4d:69:05:7e:2a:9f:5c:e1:66:12:
fc:08:e1:98:bc:c5:bc:ac:30:32:98:65:0e:e0:84:
16:1a:80:1c:bd:36:bc:96:b4:51:4d:3e:41:68:15:
fe:f7:90:7c:92:c2:36:b4:2b:4c:bf:c0:4c:7a:16:
25:d9:98:e0:f2:aa:ba:a3:b9:3c:c2:54:8d:bf:8e:
53:65:93:34:15:94:bb:24:62:4d:7e:2b:c7:82:6d:
8f:07:75:aa:82:a5:5e:71:bc:61:89:71:4d:58:8c:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:38:D3:8E:E5:37:9D:19:6E:FF:20:5C:EA:F5:3D:AB:AD:5A:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fz44047lN50Zbv8gXOr1PautWr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
99:67:4b:f2:85:80:d7:4e:a5:c9:c4:59:b3:f3:03:9f:94:06:
5b:d9:e2:82:72:b5:cb:ac:51:69:54:22:ed:cd:e0:ed:7c:8a:
b2:75:26:03:41:2d:d9:50:b5:a2:6e:e1:3c:2c:a6:26:ab:6c:
72:68:3d:94:2c:08:84:f4:21:68:69:6e:4e:95:d1:37:33:d9:
2c:f4:10:13:49:b2:4a:af:b5:14:b3:21:a0:42:b6:e8:f2:d3:
44:05:c0:15:18:b0:47:f2:de:12:f7:07:f1:23:6e:a8:8f:f8:
ba:f6:7e:83:ec:c0:24:e7:7c:79:d7:1e:76:7e:27:b9:d0:06:
ce:a7:0f:14:cd:4d:6d:94:5e:12:ee:4f:01:e3:2b:0f:b2:49:
1a:5c:22:ce:31:55:64:21:51:5a:3a:8a:09:bd:33:bb:1b:b9:
5d:95:7b:91:b1:88:61:c1:35:18:d6:08:c9:ec:5a:67:c1:ef:
a1:44:02:86:ce:bb:d7:14:8b:c2:8d:72:18:83:d7:c5:b2:35:
63:9b:fa:24:4a:31:72:ee:80:d7:91:eb:2a:a8:09:78:c2:73:
d1:d2:d5:58:4a:4c:a4:94:e1:69:d2:1d:b4:ea:ab:14:02:90:
a4:fc:e8:d6:00:43:00:05:fa:ab:58:54:b9:f4:93:06:f8:59:
30:7b:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org