Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFU48KA50o8ES09AqKUVAgFgjgo.roa
File: jFU48KA50o8ES09AqKUVAgFgjgo.roa (raw, json)
Hash identifier: 6xxaWHAkFP+AnCAOIYa1BtQTupde2Gq9JJnTu58tY0g=
Subject key identifier: 8C:55:38:F0:A0:39:D2:8F:04:4B:4F:40:A8:A5:15:02:01:60:8E:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01933013E52745C3B9BD292742EA7011AEAF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFU48KA50o8ES09AqKUVAgFgjgo.roa
Signing time: Fri 15 Nov 2024 13:47:10 +0000
ROA not before: Fri 15 Nov 2024 13:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213851
IP address blocks: 77.90.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:13:e5:27:45:c3:b9:bd:29:27:42:ea:70:11:ae:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 15 13:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c5538f0a039d28f044b4f40a8a5150201608e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:5a:6f:15:be:b0:97:34:9f:f5:0a:b4:b8:
78:49:d5:00:2a:c2:c2:df:7f:21:42:f3:ab:82:f7:
53:5e:9c:09:f5:47:eb:92:c6:1a:59:1f:7e:31:2c:
b2:fc:de:ee:b0:a2:da:4f:bc:7c:a7:83:66:67:b5:
d0:b6:e7:0e:d7:ba:fe:60:a8:c7:a3:35:e9:10:ed:
a5:77:10:78:21:d2:d6:79:67:b1:56:73:79:8e:ec:
6a:14:c0:0c:04:87:a3:70:e0:1d:5a:d2:b6:c4:fe:
c4:e7:7d:79:38:4b:07:05:38:14:06:6e:7c:27:c0:
b2:70:65:f8:76:0b:5b:fb:de:2d:2f:60:4f:00:3d:
34:a7:ab:f0:bd:7f:78:23:44:eb:54:17:19:d1:3a:
d9:95:b5:d4:fc:3b:f9:1e:ce:33:c4:80:71:d2:41:
54:5e:1c:57:28:df:bd:1f:6f:bd:e9:9d:f9:9e:57:
60:c9:71:53:e8:93:55:11:58:36:d8:bf:f1:43:f5:
12:36:d3:49:02:2a:48:b4:06:52:f6:a0:34:ae:34:
fb:5a:3d:c4:c9:69:01:01:a4:e2:f0:89:e6:96:9d:
cf:eb:35:c8:91:76:84:11:de:6e:92:09:51:8a:f9:
55:98:e0:54:5f:39:d7:d3:01:62:93:ce:ce:ed:a1:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:38:F0:A0:39:D2:8F:04:4B:4F:40:A8:A5:15:02:01:60:8E:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFU48KA50o8ES09AqKUVAgFgjgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
92:35:01:d5:b4:3d:05:40:df:72:56:96:b4:18:69:58:51:48:
7f:19:6b:6a:b4:5b:cf:e9:40:48:11:5f:0e:c1:0c:1a:c6:fd:
e1:2b:24:e2:77:f4:34:6b:1b:4f:d2:bf:76:90:6f:95:76:9a:
64:d5:23:08:83:8d:f5:95:18:2c:49:b6:0d:23:9f:35:06:22:
59:d2:55:fa:de:39:03:3c:94:40:72:96:c8:00:69:01:f9:50:
b3:32:85:a9:ec:70:f4:ee:f8:54:46:b9:e7:0f:71:99:bc:2f:
a9:2a:d5:1b:0e:31:69:79:de:6a:04:d1:e6:08:d5:01:ae:c6:
cf:75:39:a2:5b:ad:1f:02:10:bb:b5:4f:3d:ae:50:15:96:8e:
81:85:ce:79:cc:27:91:45:73:a0:50:f1:13:70:d4:4b:69:e4:
25:6f:b5:6f:c3:ca:65:0d:b9:f5:6f:2b:3c:28:9d:ed:78:17:
ef:b5:ea:96:0b:75:19:3f:50:3c:ec:05:e3:93:e2:b8:93:93:
04:4d:c6:20:cc:d9:57:4d:39:5c:a1:41:0b:52:bf:f9:ac:69:
a0:8f:85:72:57:07:cb:bb:58:58:1f:8e:11:fb:2b:ee:8e:33:
65:93:69:6d:8b:82:3b:cb:c4:00:8e:80:13:b6:49:78:e9:61:
6f:8d:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org